Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
File:                     eameEjE6dnHw2VkHDVD_70tSVSU.mft (raw, json)
Hash identifier:          fK3th8gavABbYDrmnc6bZ3U/ROGIZEkZwM1QBzIEZyU=
Subject key identifier:   4A:3A:FD:8F:86:74:75:8E:2B:EE:1C:2F:57:F2:C4:D5:3F:40:61:64
Authority key identifier: 79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25
Certificate issuer:       /CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
Manifest number:          80
Signing time:             Fri 31 Jan 2025 05:41:43 +0000
Manifest this update:     Fri 31 Jan 2025 05:41:42 +0000
Manifest next update:     Fri 07 Feb 2025 05:41:42 +0000
Files and hashes:         1: eameEjE6dnHw2VkHDVD_70tSVSU.crl (hash: 6z9F+O1dC1TDbh8oGYBzyCRb5Vxv1C1/dhmpjeY+11A=)
                          2: 732ACDFA1C7D11EF95F4D214C4F9AE02.roa (hash: D54fzGr3XuP/sJMXmQZGHvGWo91QA4TjhHmNz0qmjV0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525
        Validity
            Not Before: Jan 31 05:41:42 2025 GMT
            Not After : Feb  7 05:41:42 2025 GMT
        Subject: CN=679c6297-384b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:62:5f:62:7f:45:66:07:9a:89:75:44:0e:
                    11:24:23:42:97:83:ac:5b:69:d4:34:fe:32:84:5e:
                    a7:99:45:78:2b:c3:e0:75:78:0a:a4:06:2a:85:25:
                    c8:bc:6f:1d:67:c8:ef:11:10:dd:80:98:aa:ee:00:
                    1e:11:8d:38:59:7d:b0:3c:60:0e:05:fd:3e:e5:42:
                    d3:3b:45:94:f1:c5:4d:16:f8:28:6e:fe:ca:3a:92:
                    f9:58:9c:ca:99:ff:40:6c:10:47:d5:52:47:df:49:
                    70:c9:8d:6c:a3:ea:d8:ef:92:3c:99:6d:d0:40:19:
                    9d:b3:35:8d:55:7e:f7:55:81:21:75:77:55:10:68:
                    1a:60:d2:cb:53:2b:e3:13:31:b0:00:d7:9c:36:39:
                    e8:12:60:34:22:72:4f:c1:92:e3:24:4a:bf:65:9b:
                    ad:0c:55:f4:fc:6f:aa:72:9c:b4:46:b1:8a:a5:64:
                    e6:ce:ba:9c:9e:d5:c5:3f:42:30:ba:6c:2a:01:f0:
                    83:06:eb:45:07:67:29:ec:fa:79:14:fc:55:fd:1f:
                    90:93:a0:12:15:ee:b1:35:1a:99:48:4b:5d:7c:1f:
                    15:43:76:43:42:05:0b:85:a7:48:90:6c:51:f1:1a:
                    fc:51:e4:c5:3a:d8:d2:c5:67:60:df:4c:8e:84:57:
                    45:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3A:FD:8F:86:74:75:8E:2B:EE:1C:2F:57:F2:C4:D5:3F:40:61:64
            X509v3 Authority Key Identifier:
                keyid:79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:36:c4:fe:20:8b:fe:e7:97:e3:71:b0:bc:9c:84:b7:30:5b:
         82:f4:b2:de:1f:e8:3d:96:14:3c:e7:56:cd:61:7e:3a:cb:25:
         37:36:24:6b:0f:15:48:75:2e:a5:5d:ce:1b:86:74:04:e5:7b:
         55:68:f6:e1:82:70:9e:eb:7e:49:bb:f0:bf:74:d9:c0:00:82:
         4f:3d:04:ce:e2:d4:04:70:b1:7d:e8:c5:9a:96:21:a1:72:23:
         fd:68:9d:89:2a:75:45:8f:f6:ef:67:e7:26:28:57:36:94:91:
         2d:c5:86:7b:b5:2a:23:98:9d:38:68:92:93:75:4e:8d:f7:95:
         8d:ea:f2:16:89:6c:ae:5e:31:1d:20:f5:81:63:26:1f:73:13:
         f3:b4:4e:be:64:60:46:29:ec:d8:ce:a2:8b:e3:d3:53:b7:34:
         6e:4b:8d:f1:8c:f0:8c:93:b3:ec:0f:a0:9f:fb:e6:3b:72:b2:
         3a:71:e4:2c:f8:22:88:ef:52:81:ba:90:f6:c4:2d:b6:36:78:
         0f:1f:4c:47:3f:bf:43:6b:e9:bf:84:b7:69:a3:ef:12:82:b2:
         f4:c9:83:e2:d6:59:0d:4b:46:2c:94:01:a6:9f:19:5e:e3:32:
         41:e7:ce:b7:d0:7a:42:d4:83:ff:38:2f:98:53:fd:e2:d6:21:
         37:3d:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:40 2025 by rpki-client