Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File:                     Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier:          etmX3wULmHXXi0Dh7GBc/BTqOtSZ+6AShnc2uxkiBK8=
Subject key identifier:   30:24:FC:9E:86:68:65:E4:72:67:47:9E:64:54:AF:D5:A9:69:2A:C5
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer:       /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial:       0524
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number:          051A
Signing time:             Thu 30 Jan 2025 23:37:19 +0000
Manifest this update:     Thu 30 Jan 2025 23:37:18 +0000
Manifest next update:     Thu 06 Feb 2025 23:37:18 +0000
Files and hashes:         1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: rZopKzI1x68XGqW4ac36PQvwTzkMAert/fyqXzLyYVQ=)
                          2: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (hash: 0uI77WnMvgx38BJ7x5ctqph2jfLMtLeb4wieKz5xnjk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
        Validity
            Not Before: Jan 30 23:37:18 2025 GMT
            Not After : Feb  6 23:37:18 2025 GMT
        Subject: CN=679c0d2e-20fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:29:9a:05:c8:25:c7:62:ea:50:62:ad:71:
                    85:b6:82:00:be:0c:5a:82:56:a3:0a:96:c0:79:47:
                    29:5d:64:d3:49:19:a2:1f:a0:92:9f:41:ad:fd:91:
                    18:be:55:a4:b4:eb:c3:6f:1b:05:9a:6e:6f:7a:28:
                    d3:b5:45:14:c5:c3:ba:c0:b6:af:14:36:db:6c:3f:
                    d1:06:b0:1a:d6:da:51:8b:94:be:62:7c:94:e7:ab:
                    5e:00:49:04:27:0d:fa:a0:3a:54:77:3d:06:b1:0b:
                    66:65:49:95:c3:a2:19:1f:3f:12:3e:87:b5:cb:e5:
                    27:af:9e:51:de:d8:e1:40:32:a5:76:b8:c7:55:c2:
                    f4:15:73:cc:ae:9b:89:9e:3b:66:c7:3d:50:54:6a:
                    f4:8e:bd:c5:e4:21:02:69:a3:e2:75:43:09:da:d5:
                    9f:5e:70:8f:f8:d8:45:c6:81:9e:ed:74:bc:db:c8:
                    44:85:ac:cb:73:c8:ab:47:63:d7:bb:b2:b5:7d:8b:
                    20:5a:17:34:d8:76:c4:12:c3:75:ee:b5:30:a8:68:
                    72:71:92:02:23:bf:8f:44:5c:c7:89:d5:00:63:5b:
                    81:fb:f8:28:84:76:04:a1:1d:1b:7a:9a:06:91:ab:
                    8e:d4:ab:95:2d:12:cd:2b:f3:ac:97:8e:6f:db:ba:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:24:FC:9E:86:68:65:E4:72:67:47:9E:64:54:AF:D5:A9:69:2A:C5
            X509v3 Authority Key Identifier:
                keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9c:79:ed:8b:81:78:50:36:8d:8a:fc:ff:f3:07:7d:07:33:
         41:2b:1a:81:89:40:45:e7:66:7b:36:25:ff:04:fe:1d:3c:8e:
         af:39:f2:f1:4b:fa:3f:6b:f6:d0:21:06:68:3d:52:2b:59:a6:
         9d:a5:98:df:79:33:9d:79:f8:f5:8e:84:d4:ca:40:25:f5:d5:
         66:3d:e3:b1:ae:67:08:a8:46:c3:9a:0b:d6:61:b2:f5:1a:08:
         70:cd:d7:c0:4c:72:a0:c8:85:12:4f:82:3e:07:f1:e3:1e:7f:
         68:23:99:c9:1a:fc:7d:78:27:bd:f4:6d:73:77:85:59:33:2d:
         94:f0:95:2d:12:0f:6e:37:75:a1:35:ea:97:73:95:53:42:93:
         23:4f:90:91:07:c4:c5:c2:61:04:a6:b0:15:6e:dc:d1:87:18:
         a5:2e:10:73:ab:2d:24:25:7f:e8:f1:7f:b9:23:b9:2b:9a:1e:
         02:5b:f3:fe:85:6b:ab:1a:84:fa:8f:65:6a:f3:02:0f:92:5a:
         3a:a1:8a:f5:9c:75:7f:29:24:dd:da:b0:38:34:9c:70:42:2d:
         83:80:1f:52:7d:a6:ef:28:e0:a6:a0:60:b2:76:b2:9b:20:8f:
         7c:20:7f:7a:41:28:82:dc:33:b3:00:4b:eb:1b:36:26:b2:54:
         c2:c2:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:53:26 2025 by rpki-client