Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
File:                     dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json)
Hash identifier:          NyLV8HI1k/tT4S/S+7zu+kIRWOAYP0tEYtxIhdC6+OY=
Subject key identifier:   E0:32:BF:B5:A6:9F:7B:90:6D:BD:00:16:63:8C:B1:7B:80:BD:6D:A9
Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Certificate issuer:       /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
Manifest number:          0592
Signing time:             Thu 30 Jan 2025 23:14:36 +0000
Manifest this update:     Thu 30 Jan 2025 23:14:35 +0000
Manifest next update:     Thu 06 Feb 2025 23:14:35 +0000
Files and hashes:         1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: cMuNdljsMxarfI5VuYvn5KTwIkmAWkr21GwQGjHhtJg=)
                          2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: YxPwMr4MBHxV8GdUwwcGZ9ThhhxxM846OSPi1905C3k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
        Validity
            Not Before: Jan 30 23:14:35 2025 GMT
            Not After : Feb  6 23:14:35 2025 GMT
        Subject: CN=679c07dc-368d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:77:c8:f1:0c:94:b0:a0:9d:7c:ee:74:4f:e8:
                    57:7c:e0:48:86:d8:3e:d8:32:bc:38:ca:ef:94:83:
                    d3:cc:28:20:3a:cb:49:29:af:8e:f4:15:3d:30:b8:
                    14:10:29:88:1f:cc:43:27:ea:f1:a8:87:df:bd:4e:
                    30:34:8c:17:21:47:c5:a2:ac:3a:77:f2:bd:57:98:
                    b5:bd:a0:fc:45:34:a5:7b:7d:e5:84:02:97:d1:6e:
                    58:24:b1:55:28:94:1f:a0:c9:76:40:f8:f3:9c:68:
                    8e:31:13:18:fc:68:84:35:99:4f:a0:3d:e0:e6:05:
                    6a:d0:19:05:a7:04:13:4a:e3:85:0c:ad:14:c4:90:
                    5e:ea:64:62:f1:4a:80:f6:ff:40:24:61:88:ae:9e:
                    e0:0f:67:a4:20:f4:f4:42:01:db:f9:91:7e:a2:ce:
                    d1:a6:89:d6:f4:79:68:20:d9:36:b8:a8:77:69:8f:
                    40:3e:5d:09:97:d4:62:e3:16:53:45:4c:36:5d:34:
                    55:26:99:d0:d5:52:34:6e:42:cc:2c:de:01:0c:9a:
                    0c:45:ef:81:c5:58:3e:d5:b1:ef:04:0f:09:5c:03:
                    f3:52:ef:75:06:e2:1b:93:54:b3:bc:d5:7c:45:9d:
                    81:17:38:45:fb:38:77:b8:26:bd:d4:36:bd:98:b6:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:32:BF:B5:A6:9F:7B:90:6D:BD:00:16:63:8C:B1:7B:80:BD:6D:A9
            X509v3 Authority Key Identifier:
                keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:ac:e7:3f:62:98:bf:c2:4c:cc:56:0f:62:80:1a:16:a7:
         bd:32:25:54:96:29:51:b2:93:f8:22:36:57:93:50:5d:3d:a7:
         c7:a2:8f:10:cf:04:10:b1:44:32:f9:b6:ca:c9:6b:54:ac:44:
         62:c1:b6:c5:d6:91:1e:f5:b3:18:89:b3:aa:1c:00:be:50:07:
         8a:bb:39:9c:86:a7:74:f3:92:72:f6:ef:b6:81:49:99:2a:97:
         14:3e:6d:4f:b5:ef:06:dd:dc:4e:8f:6a:b2:e8:25:2d:93:ab:
         49:c5:a2:11:4c:11:bd:c2:69:c5:f3:39:7a:5c:43:8e:a1:38:
         80:65:c6:1a:3b:e8:5d:87:13:89:33:cb:69:67:7f:f7:7c:70:
         a9:4d:39:8c:da:c5:c6:54:a6:c9:d4:f9:71:4a:4f:2b:12:7f:
         98:ce:ad:9d:1d:2d:89:14:b4:a4:f3:bc:47:43:d8:02:e5:49:
         40:b6:b0:45:a6:bd:fc:40:d3:ab:d0:8a:d3:4e:c0:b7:e3:e4:
         c8:12:f2:29:52:14:ae:eb:13:51:09:1f:1c:02:ae:d2:40:b9:
         af:35:42:87:2b:e2:b8:66:47:5e:fc:03:9c:76:26:1f:d1:eb:
         ec:64:0a:ef:29:75:d8:8e:28:8d:17:ba:1c:c9:60:00:2e:c5:
         21:e2:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:18 2025 by rpki-client