Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File:                     mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier:          baqFFfLkHUWEu8rK/5B67Ca2C63azSGDDA6vEYUR3p8=
Subject key identifier:   E3:55:E6:B3:1A:E3:61:1A:CC:EA:ED:E8:52:32:7F:F9:10:A9:16:A1
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       0DC6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number:          0AFC
Signing time:             Thu 30 Jan 2025 20:49:01 +0000
Manifest this update:     Thu 30 Jan 2025 20:49:00 +0000
Manifest next update:     Thu 06 Feb 2025 20:49:00 +0000
Files and hashes:         1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: 9sau/w/FLQQeuV2hpLRRx1xhDdVk3XO1LQBhTNAVnDA=)
                          2: 56AE7D02D6F411EFB69B8A29C4F9AE02.roa (hash: IXm2HsdEYaCOi6h4ubXsEi+FEV948MFYW6RsFbYgeGM=)
                          3: A97B0954CF4411EF97DACA5AC4F9AE02.roa (hash: DYwkvsvRm+JSPeHD9ASsAAmeOo8QRXaAQeNFQ95mB3Y=)
                          4: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: y4GAkxc1wnMMcIWRORtwNgAVULVWlMkQgSrzLVx7bAs=)
                          5: BE7E4E9891F911EF86353E28C4F9AE02.roa (hash: cdF0IEAin6BEbgZDiectcRjj/Qj2LqehP647MMLBn4Y=)
                          6: 40F0E4DC75AB11EFB897AF69C4F9AE02.roa (hash: 66mcnb1x9N203HeKzYtZYqy46nvM7OGyg282gr346uI=)
                          7: D0C30AAED19011EFB9DDF30DC4F9AE02.roa (hash: wtOuXEEJjUYTWpY0E5t1TiUGzbI8GDejma2rE9RJ+hE=)
                          8: 9E1DC9ECD7EC11EF9729B263C4F9AE02.roa (hash: oXhD931xCK2LvvVF0/sMvlM4+kzsirX9PVHDx1hcjIE=)
                          9: FA9BC95A548711EF89E24A18C4F9AE02.roa (hash: TzqKssNJoGfL9wI2PFMHpXN5yW7cil9sz1WNr4GCrKI=)
                          10: E044F8EA6A7D11EFA472EC50C4F9AE02.roa (hash: o1wNjuG4TpbV9OvZFMpjNOBDtLxry7fuLmL+RNYnRgQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3526 (0xdc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Jan 30 20:49:00 2025 GMT
            Not After : Feb  6 20:49:00 2025 GMT
        Subject: CN=679be5bd-ac85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:9b:82:08:af:3f:a4:61:17:05:49:52:21:
                    79:ff:fa:77:f6:01:3d:ac:14:26:4e:e5:0c:bc:d6:
                    8b:97:54:41:63:32:0f:9a:e5:d8:91:df:b0:72:7a:
                    77:e2:0e:c9:f0:4b:8c:3c:b5:b9:80:93:b3:fa:29:
                    93:b6:a5:d1:fa:34:0b:53:a2:e6:7c:3a:5a:e5:c9:
                    50:46:b7:8f:de:7a:f1:bd:b3:3c:5a:e6:b9:e3:df:
                    4f:c8:a4:86:dc:c5:24:94:72:e1:93:57:5a:31:51:
                    97:f3:1a:5d:5b:23:14:e0:94:60:86:18:df:88:90:
                    b8:de:ad:59:50:a5:d7:2a:61:e9:ef:46:61:3c:d3:
                    ff:6b:af:f1:1b:44:9f:0e:4c:35:de:2e:13:c8:fe:
                    9b:7f:a4:2c:84:76:c2:9a:bf:3a:d0:99:c4:39:68:
                    82:57:c9:3a:11:e8:4d:a6:2e:ec:be:1b:43:30:26:
                    24:b9:81:2f:1b:72:61:fb:f5:bd:2b:73:d8:f7:0f:
                    94:27:28:11:bc:29:e8:ce:d0:0c:f7:64:45:dd:df:
                    2b:a8:fd:d6:12:5f:b0:48:f9:1f:7d:68:af:aa:43:
                    0f:e9:33:65:ae:5c:52:b6:31:92:bb:f3:94:1a:76:
                    ef:7b:4f:0e:c9:11:87:7a:e8:1e:bd:48:89:70:08:
                    cb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:55:E6:B3:1A:E3:61:1A:CC:EA:ED:E8:52:32:7F:F9:10:A9:16:A1
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d4:f3:ae:33:7f:ef:f9:bd:15:9d:59:e9:a0:fe:9e:0d:e6:
         e3:75:c1:17:ca:42:c4:11:c0:62:67:71:01:07:ed:11:82:f8:
         d9:ed:d3:ad:f4:c3:ae:84:77:0f:fc:ca:df:71:e5:da:95:32:
         97:2f:cf:e3:53:15:01:c9:f3:f5:43:f7:3a:4b:83:8d:ed:35:
         0c:99:2b:c0:52:4b:5b:a0:96:61:2b:77:de:fa:fa:0c:81:e7:
         24:d5:0b:23:bf:88:31:1f:ac:6c:e2:38:77:12:f9:46:27:62:
         33:00:dc:25:cb:58:8a:30:76:b3:c6:c1:82:3c:ab:55:b1:5c:
         d7:b3:15:8b:ef:fc:cb:bc:32:85:a4:81:98:84:64:23:42:5b:
         55:72:11:58:ed:79:e2:29:d8:44:7a:71:57:76:c5:a4:fa:56:
         62:97:af:a9:dd:25:f6:02:48:b8:c1:1f:cc:56:2b:b4:28:cc:
         bc:27:a2:46:87:b0:3c:8c:06:df:eb:29:07:1d:b7:a5:4c:30:
         c0:91:e5:28:9f:c2:2d:5b:74:b6:16:5e:c5:8d:bf:d3:e7:8f:
         2d:84:28:d9:17:3b:3a:78:eb:38:f9:ab:36:7d:cb:cf:0c:03:
         bd:1e:d1:c2:b8:8f:e6:78:ce:ac:ea:3f:50:a8:03:66:66:c8:
         2a:b4:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:53:42 2025 by rpki-client