Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
File:                     IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json)
Hash identifier:          sTacvm9Us+GzC/ftaYQP6o5kqcZGAd01YLguDuSzXy4=
Subject key identifier:   72:12:39:11:BB:FD:70:34:B6:26:72:27:08:CA:B6:D4:3C:6F:23:B2
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Certificate issuer:       /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial:       10D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
Manifest number:          10B0
Signing time:             Fri 31 Jan 2025 17:20:02 +0000
Manifest this update:     Fri 31 Jan 2025 17:20:01 +0000
Manifest next update:     Fri 07 Feb 2025 17:20:01 +0000
Files and hashes:         1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: 9wnCWkGzBPEFayjRhjQg3ZmCg99TwaK7yBroqjeRU54=)
                          2: 13D21C6EFEBA11ED9D83553FC4F9AE02.roa (hash: r+D93hp7rhoCWl0RjXcOFWA7GJmeyzAs1dX6WsQydZM=)
                          3: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: tWTho3aXOfmUFjTTDFR6B98CoHeEv+Tq3wQD28el+4I=)
                          4: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: GqbKfXTNwN0SIpQjwmZy3ObDrSaqHo6sguNM1x2JWQA=)
                          5: 1856F8E8CCC411EFBDE7CF74C4F9AE02.roa (hash: Y01w5gm4XEkWiJJ++96hvfqzFt3ILa8sFuFGF5KXcKs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4308 (0x10d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
        Validity
            Not Before: Jan 31 17:20:01 2025 GMT
            Not After : Feb  7 17:20:01 2025 GMT
        Subject: CN=679d0641-fc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:c1:88:be:2a:8d:cd:d9:8f:c5:84:6a:49:
                    15:e9:c7:55:a7:fa:2b:a7:f3:34:61:d0:03:37:57:
                    72:30:a5:21:a3:ed:59:6f:5d:be:19:56:00:c8:37:
                    25:08:ed:6d:2b:02:fc:c2:18:0a:bd:5e:91:4c:4f:
                    da:03:6a:e4:15:7d:ed:c0:30:17:d4:6e:bb:9d:ab:
                    53:a1:fe:cb:42:30:5e:50:e5:da:ec:71:66:8a:96:
                    3b:3e:b8:30:ed:a9:8e:67:0c:d6:ef:64:04:00:e5:
                    64:c2:e7:91:2c:57:e7:75:9e:a2:89:f7:f1:a6:44:
                    fb:a7:b1:b8:b2:84:cc:4a:06:83:01:2d:80:e6:c4:
                    f3:ec:5f:75:3a:56:44:4c:2a:6e:9b:0e:be:3e:8e:
                    bc:e6:74:eb:e4:9f:0e:8f:42:e5:79:5f:47:d7:2d:
                    0e:64:5f:d4:ea:13:cb:be:6c:0e:1d:69:76:29:be:
                    fe:51:99:dd:13:dc:55:33:0b:3a:50:d6:2c:c6:e8:
                    6c:ac:4f:0a:13:c1:57:64:45:53:b7:81:4a:96:e4:
                    dc:78:bd:39:43:d2:5c:cc:77:fb:26:fd:d6:c5:57:
                    93:f5:ec:b6:26:61:ba:21:cb:ee:1f:85:75:d3:77:
                    bf:66:d9:7a:53:a9:93:04:a6:20:9b:8c:2c:d6:8c:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:39:11:BB:FD:70:34:B6:26:72:27:08:CA:B6:D4:3C:6F:23:B2
            X509v3 Authority Key Identifier:
                keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:7a:d2:cc:cd:d1:68:c5:69:f1:76:1c:bc:d3:2a:52:79:
         1e:d3:0e:a6:cc:2a:4e:9b:83:29:f5:75:f7:01:3e:eb:0f:cc:
         72:ca:6c:ce:d3:b5:29:30:df:33:3a:0f:d9:f3:54:8a:da:68:
         d8:d8:21:f2:5f:9d:31:df:37:fc:04:04:0e:26:e9:9d:b2:73:
         33:8b:57:f5:84:5b:c2:03:ad:db:9c:39:2b:37:b2:a0:c1:f4:
         0e:59:f4:20:db:e9:e2:ff:db:5e:d1:8c:37:ad:80:5a:f5:7e:
         eb:eb:f2:7d:54:83:5c:9c:2e:b5:fe:d4:62:09:87:79:65:66:
         69:2e:57:96:e0:52:8b:d1:85:b7:f3:81:00:28:d0:28:c5:96:
         b6:80:02:a2:3a:16:b4:9b:0e:68:98:a4:17:22:d4:a6:65:8d:
         3b:28:8b:cb:11:eb:f0:03:a6:e4:9c:f0:94:de:1f:54:ed:a5:
         a2:e0:e6:9d:18:a3:2a:1d:bd:f1:2d:19:5c:c7:13:dc:69:43:
         c0:59:ae:84:80:30:11:1f:e5:0a:05:01:34:52:5c:d4:e5:0b:
         62:b4:98:62:e0:06:c4:89:c8:61:eb:0a:08:cf:77:ce:49:d5:
         2c:be:9a:ca:3d:88:d0:1e:dd:ef:85:35:76:f5:de:6f:d6:66:
         6d:45:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:34 2025 by rpki-client