Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
File:                     VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json)
Hash identifier:          me3vTeDNjC7FwwYvIEIFSLgHODXXbPIfH8X9ARfnU4A=
Subject key identifier:   F9:27:77:BB:50:A4:D0:59:40:CE:47:4B:4C:6E:27:E7:E6:FE:A4:5B
Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
Certificate issuer:       /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
Manifest number:          FE
Signing time:             Fri 31 Jan 2025 04:16:58 +0000
Manifest this update:     Fri 31 Jan 2025 04:16:57 +0000
Manifest next update:     Fri 07 Feb 2025 04:16:57 +0000
Files and hashes:         1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: 5Ltr5LfTvABLSBW0DVrfZU90Hfl6f7nA3AdVZwHM7SM=)
                          2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: DaoJhbsGXkUC42pkhjpzJhDA/mxo+1TSGX1zlEEQkMA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
        Validity
            Not Before: Jan 31 04:16:57 2025 GMT
            Not After : Feb  7 04:16:57 2025 GMT
        Subject: CN=679c4eb9-8f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:a0:ed:da:76:17:73:ff:40:18:01:5e:49:
                    ee:1b:12:df:13:8e:45:05:a9:d4:e9:26:9c:16:32:
                    e0:85:cf:79:a1:91:7d:f3:30:dd:19:7c:f0:d3:ee:
                    e1:4c:14:21:a6:80:57:94:3e:87:9c:32:3a:66:f3:
                    01:ac:74:b0:72:4c:53:fb:27:83:12:d5:1c:c8:6a:
                    8b:a8:08:2f:b8:f0:34:e7:45:1e:9c:9c:0e:bf:08:
                    b3:28:46:21:e2:13:16:3c:ae:c0:e0:fe:29:ca:9d:
                    ae:37:c3:96:3d:3b:4c:74:3e:fb:76:8c:44:87:72:
                    20:2b:1e:d2:48:60:ab:3a:1f:07:68:8c:3f:47:23:
                    b5:86:94:fa:61:dd:2c:b2:2d:2e:e4:fb:da:89:41:
                    45:6d:d1:79:89:a3:6b:fe:a8:4c:3a:f4:bb:b1:2e:
                    86:2b:8a:e4:f9:f6:cd:dd:9c:d9:56:6e:64:77:ee:
                    ef:4f:e2:67:89:4b:31:38:c0:1a:e0:c1:4c:33:4b:
                    1d:51:b0:e5:6c:b9:df:52:da:05:54:91:be:b8:ae:
                    b5:cf:e2:e0:3b:1d:5e:cd:35:da:7e:09:4f:5a:ef:
                    50:3f:a6:cf:b5:f6:66:51:4f:f5:a4:cf:a8:7a:60:
                    52:11:32:88:b1:6c:ef:9b:83:b6:2f:18:73:34:b2:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:27:77:BB:50:A4:D0:59:40:CE:47:4B:4C:6E:27:E7:E6:FE:A4:5B
            X509v3 Authority Key Identifier:
                keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d5:77:d3:2f:fd:7e:16:9e:4c:34:18:97:a6:18:e8:ee:06:
         17:f5:89:08:af:f5:0b:2c:17:24:d2:a1:f7:8d:5a:9d:4f:97:
         d7:b3:4d:a2:fe:3a:2b:bc:bd:68:c6:1c:53:30:4a:81:8b:98:
         01:74:31:18:61:d4:7d:3e:7f:2e:aa:07:53:73:8b:5a:84:9f:
         ff:a2:37:83:04:65:28:4a:f2:a4:d3:13:2f:ca:78:4a:82:3b:
         c3:86:03:f7:76:4f:b9:d2:36:dc:e6:e7:91:ec:8f:76:5f:92:
         fc:c0:b8:5d:55:7f:ec:51:ad:87:5e:74:71:66:66:06:27:95:
         a9:54:34:05:a1:1c:d2:66:86:24:c2:86:21:e6:b3:84:42:5c:
         64:fe:0a:b8:a9:90:0e:68:10:87:8f:ab:ec:b6:3b:4d:52:0a:
         6d:06:da:f3:de:31:f1:43:aa:ca:d7:2f:a1:5a:9a:c8:9b:64:
         0a:5d:d2:5f:3b:b7:7e:ff:e2:91:cc:d9:79:ad:77:f4:20:27:
         4a:ff:98:47:5e:be:df:e1:d0:c3:96:05:c0:d2:72:aa:33:ee:
         55:d9:fb:b2:bb:c9:02:85:5c:f4:68:23:11:82:43:16:bc:1f:
         dc:49:34:24:30:79:42:bf:b2:13:14:4d:ef:64:05:9e:86:0f:
         2a:75:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:15 2025 by rpki-client