Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
File:                     8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json)
Hash identifier:          hmXhdk5D93OKw8h6RFG8M+XSMXuijqous1fK7EMhfR0=
Subject key identifier:   20:BF:F6:94:B9:63:13:7E:66:CA:0D:32:15:77:03:EB:C4:B1:54:1A
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Certificate issuer:       /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
Manifest number:          6E
Signing time:             Fri 31 Jan 2025 05:56:52 +0000
Manifest this update:     Fri 31 Jan 2025 05:56:52 +0000
Manifest next update:     Fri 07 Feb 2025 05:56:52 +0000
Files and hashes:         1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: lBqZHIlNNn5usP9cRinHcWjjKzV43b2CyzN2xegUk3I=)
                          2: E36214403D0011EFAD623342C4F9AE02.roa (hash: 420VAJueRLeEIyuOExcHcsg4aUQyw3PTMA6zp5xTQ8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
        Validity
            Not Before: Jan 31 05:56:52 2025 GMT
            Not After : Feb  7 05:56:52 2025 GMT
        Subject: CN=679c6624-28c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:b4:c3:c2:fe:31:a6:89:b3:e4:65:23:29:
                    3a:56:7b:5d:31:35:07:5d:ae:67:10:3b:98:64:e3:
                    f1:f6:6f:54:40:cb:04:0a:c8:15:09:2a:65:ba:4f:
                    2c:ea:04:4e:82:b5:d8:96:ce:ef:b0:58:af:fc:f3:
                    35:77:1f:f6:c5:d5:b3:eb:dd:78:7c:2a:83:d5:c2:
                    ae:e5:b9:d0:47:ed:97:70:32:56:cc:49:15:ae:9a:
                    f0:61:ce:8b:62:a3:00:49:28:0b:fc:a2:38:d8:45:
                    dd:0f:38:dc:d7:54:9f:2a:0b:e2:58:4c:2a:a7:e3:
                    92:f1:88:ac:85:a5:0f:2d:bb:49:77:27:44:a4:43:
                    20:58:f5:80:f3:27:fd:8b:6b:68:05:61:0e:2f:0e:
                    e4:62:79:e3:1f:72:a6:f7:7b:54:c7:ac:15:e2:b9:
                    33:d5:f3:75:c7:2d:d5:13:60:ed:6b:3f:33:bf:f8:
                    f7:0b:a0:17:a6:f1:3c:dc:21:24:b7:b3:3f:ac:d5:
                    8c:ad:9f:11:7f:9f:d8:45:7e:f2:06:67:b5:6c:5e:
                    96:b8:27:fc:cb:08:71:43:ce:19:93:74:c0:c3:7e:
                    cb:02:58:3e:7d:2c:89:7a:cd:45:2d:b8:d4:ee:b0:
                    9f:78:53:44:3b:9c:e0:dc:02:fc:9a:04:17:b5:5e:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BF:F6:94:B9:63:13:7E:66:CA:0D:32:15:77:03:EB:C4:B1:54:1A
            X509v3 Authority Key Identifier:
                keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:76:99:bf:64:09:03:2e:10:1c:36:43:7e:9d:46:a2:38:
         e4:a6:96:f8:33:76:9d:5e:69:e1:21:92:74:c0:81:1b:ff:f0:
         36:e6:64:55:4d:a6:36:35:30:0f:01:e4:d1:5c:90:4f:eb:47:
         de:5c:94:1a:c3:b8:ab:77:ae:34:91:fb:a5:6a:af:67:48:1e:
         d6:1f:83:c0:a2:9c:82:04:a9:3f:03:45:90:70:32:10:fd:05:
         26:00:7b:63:72:46:45:c4:eb:4c:dc:5a:d9:92:f7:d4:5c:10:
         0c:65:d1:0f:2d:ad:c8:30:ff:5e:d4:9e:df:f3:22:ad:2a:22:
         c2:0b:68:39:20:57:e8:7f:f0:3a:d9:bf:e5:fa:cb:8d:48:f5:
         65:9f:47:3c:8b:8a:f1:22:16:3d:75:34:15:7c:36:7d:e1:5a:
         bd:30:4c:e5:d9:56:ed:81:34:fb:4c:26:06:d7:3a:8a:7d:c0:
         c9:cf:cb:c2:dd:ac:2f:8d:ea:0a:4b:52:bb:13:11:26:e6:8d:
         61:28:26:fa:d0:63:00:72:8f:e4:b0:c6:45:b0:73:09:4c:8a:
         51:4e:d8:56:7b:29:f8:6e:73:c3:55:c5:0b:41:26:07:f6:15:
         f1:5e:d1:d5:3e:05:be:40:8c:1d:07:60:d2:1c:11:cd:c1:93:
         43:b6:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:28:13 2025 by rpki-client