Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
File:                     30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json)
Hash identifier:          lhbkgwhb9GKZ8I/xtt9xVvij6dz+vuaG9B3IrOpWQsI=
Subject key identifier:   01:B0:B4:40:3E:27:70:BC:C0:19:91:5A:CF:28:A1:30:7B:40:E7:B2
Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
Certificate issuer:       /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Certificate serial:       060F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
Manifest number:          05FD
Signing time:             Thu 30 Jan 2025 22:57:33 +0000
Manifest this update:     Thu 30 Jan 2025 22:57:33 +0000
Manifest next update:     Thu 06 Feb 2025 22:57:33 +0000
Files and hashes:         1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: N4KQsCJbB/IyK3bXYR/3HHKBj1dyuBo7pQfm968vp4g=)
                          2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: hZSSJaQgFguODQcmLdfStIq0+a+g/wi2cxwKmcjF2gk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
        Validity
            Not Before: Jan 30 22:57:33 2025 GMT
            Not After : Feb  6 22:57:33 2025 GMT
        Subject: CN=679c03dd-1d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:56:be:f9:32:b7:39:67:f0:34:0b:db:50:
                    5e:1e:3a:1b:76:f9:df:ca:10:71:2c:87:c5:3b:70:
                    97:85:6b:eb:f8:0e:89:7c:55:09:28:81:e2:ca:9f:
                    70:9a:f7:d6:ad:2f:07:7c:10:c2:69:6d:bd:71:e0:
                    77:d0:1d:1b:50:2b:da:ae:28:a8:58:04:9f:ce:ff:
                    46:34:d6:28:6b:1f:d0:df:f4:06:91:9f:2d:6a:c1:
                    63:6e:3d:f3:23:94:8c:97:76:3b:44:6d:9c:a8:e7:
                    6c:47:e0:72:4d:d6:85:ec:f6:be:3c:38:17:cf:f3:
                    02:d0:a1:ca:a6:e7:ac:50:49:71:c5:81:45:9d:2e:
                    02:1d:c2:df:ba:38:c0:25:1c:ed:47:2a:04:8b:77:
                    1d:12:3a:54:8b:69:79:58:5e:07:e1:de:f6:83:e0:
                    69:e4:9c:fe:ee:c8:1e:af:e1:3f:dd:19:16:9a:db:
                    0d:de:92:19:b8:34:76:a7:63:27:d3:ca:27:ed:25:
                    07:de:2d:ab:7a:68:e9:d6:b9:06:62:9b:0a:c5:5f:
                    f6:a6:9c:c3:23:78:ee:26:b8:b3:b5:45:51:c5:88:
                    e5:1c:f8:0a:08:42:44:90:1e:c6:88:fa:9a:66:be:
                    b4:67:d6:1b:0f:3e:90:27:45:24:65:88:e4:d7:b5:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:B4:40:3E:27:70:BC:C0:19:91:5A:CF:28:A1:30:7B:40:E7:B2
            X509v3 Authority Key Identifier:
                keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:05:47:9a:c7:68:0b:45:ce:fd:7d:63:c2:62:13:84:61:30:
         9b:a1:8f:ed:18:f5:85:61:5c:11:5c:64:82:07:06:48:ae:d4:
         1a:0f:64:01:2e:b4:c5:17:58:d3:30:24:87:6d:3d:8b:00:df:
         ad:16:4d:3c:33:23:54:26:76:b4:62:cf:93:8d:58:22:27:24:
         5b:37:53:de:76:4d:b4:b6:ff:05:88:15:6d:30:2b:bd:e2:40:
         43:d9:93:6c:45:d8:d1:81:f4:b9:06:2e:4c:08:fe:65:c4:2c:
         2d:19:c5:73:15:08:67:2d:cb:0e:94:e5:b7:4d:19:54:54:c4:
         fb:93:0c:7c:ba:32:c4:65:f9:25:93:da:53:87:0b:22:e0:5f:
         72:3e:a9:79:86:0e:25:3f:79:b5:04:bc:f1:24:b5:58:7d:a1:
         ed:47:9a:f0:5e:7e:fd:5a:b8:c4:51:d3:1d:e0:15:39:46:b5:
         93:ac:1a:15:e8:91:f9:20:99:b1:62:fe:e7:06:bb:6f:59:a1:
         82:f0:6a:a9:e0:7e:b5:3a:97:f5:aa:b9:65:a6:40:98:83:e5:
         06:87:fd:3f:03:02:be:3b:61:d1:da:b7:94:88:55:82:91:02:
         49:32:93:cb:9c:f2:c8:ee:60:1d:9f:e0:11:7a:28:66:81:51:
         cb:dc:74:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:22 2025 by rpki-client