Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
File:                     RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json)
Hash identifier:          odcTgxmomQ7Ig81X+bGgAYspetxuc8Zpy5VHWmv54Dk=
Subject key identifier:   62:AE:53:FC:97:EE:68:A4:49:59:A5:F8:16:49:91:52:5B:52:DB:0E
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Certificate issuer:       /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial:       0733
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
Manifest number:          0E58
Signing time:             Thu 30 Jan 2025 21:40:51 +0000
Manifest this update:     Thu 30 Jan 2025 21:40:51 +0000
Manifest next update:     Thu 06 Feb 2025 21:40:51 +0000
Files and hashes:         1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: Hji+KYiQbAVbrQzfXW8FVedIxgzQJ4P5re6q2XoYHGo=)
                          2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: hkxmNGokisQG0mbBKypviapB/RNUZ9nsMjdRwBRak9A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
        Validity
            Not Before: Jan 30 21:40:51 2025 GMT
            Not After : Feb  6 21:40:51 2025 GMT
        Subject: CN=679bf1e3-cea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:58:7b:1f:0b:75:a7:08:50:89:4f:0f:2d:
                    2a:0e:8c:38:56:72:f8:63:14:d3:a1:81:fc:bc:23:
                    a8:fc:8c:c5:df:f5:a2:ec:5a:0d:9e:a7:eb:af:a1:
                    0d:31:0d:3f:37:8f:53:4e:8a:2a:d1:f3:e0:44:4c:
                    d6:53:df:01:8c:9c:05:99:30:f3:0c:d2:99:0c:6b:
                    51:af:ec:c9:04:60:0a:b6:19:95:c7:3b:19:bf:e0:
                    38:3d:96:e9:77:92:fc:c1:b9:c4:07:73:b3:db:fb:
                    69:7a:bf:6b:9e:48:0d:b2:5e:14:55:58:03:61:db:
                    58:8e:fe:38:4e:8d:72:e1:97:fb:1c:40:e0:72:c6:
                    6f:3e:ab:37:3a:97:5f:85:5c:08:0b:7a:46:27:a1:
                    c9:3c:1e:cd:21:dc:1b:3f:48:c3:e5:85:36:7d:a2:
                    b4:84:9d:a8:52:2e:7d:64:7d:f0:cd:c7:7c:71:d8:
                    d9:49:2d:c2:2c:76:d0:ed:98:e1:8d:42:33:3f:d2:
                    80:94:e7:51:10:7f:0c:85:cd:3b:68:2e:c3:e7:fa:
                    c9:44:f3:66:ef:ff:f8:e5:a0:12:d5:bf:c3:03:3e:
                    84:05:e4:4f:32:a7:e6:e4:8e:66:d3:a1:95:d8:73:
                    ef:20:74:62:0b:03:c6:9e:68:ea:10:97:76:58:4b:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AE:53:FC:97:EE:68:A4:49:59:A5:F8:16:49:91:52:5B:52:DB:0E
            X509v3 Authority Key Identifier:
                keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:79:fd:24:96:0a:b5:2a:bd:27:57:5a:10:e7:85:19:fa:ac:
         5c:35:c9:21:bd:35:6a:a8:3a:43:ec:f1:7f:2a:15:bb:5f:81:
         ee:dd:18:21:76:e1:41:f8:42:26:29:0c:18:12:a5:e1:b5:60:
         b5:a4:d6:b3:af:47:ae:69:cd:11:43:d8:70:b7:07:25:26:1c:
         8f:8b:e1:fa:4a:00:11:a4:28:3e:ce:0e:3f:76:8e:f3:7a:53:
         d3:91:39:ea:57:a3:aa:7f:70:51:8b:85:ae:14:ce:4d:cd:fb:
         e1:df:cc:5d:9e:e2:7f:31:1c:2b:59:b2:4d:0f:6e:70:8c:12:
         ab:cc:8b:73:13:29:95:0b:84:3c:a4:dc:ff:c7:e6:43:11:1e:
         ee:ae:19:c7:18:02:67:93:1b:2c:66:45:84:cf:2a:83:4a:1b:
         b4:23:7e:89:28:1a:91:aa:c7:f8:8c:03:df:f7:8e:70:fc:92:
         a1:d5:00:a5:59:24:33:64:e2:11:95:5e:bc:c8:e0:7b:57:9c:
         d2:0b:00:5d:bd:41:8f:bf:e4:bc:da:07:df:8d:bf:3d:4e:24:
         f1:f8:6e:0e:30:b4:96:58:2c:06:72:e6:61:9e:f8:8f:cd:b2:
         81:a8:81:ba:59:22:1c:28:78:58:5f:30:70:b5:f8:ad:90:10:
         bd:8c:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:17 2025 by rpki-client