Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File:                     A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier:          /uSlDrXvYWE7tEqj1P4qRPdvybnzGmYOfj5gVq00X04=
Subject key identifier:   A6:2F:C6:5F:6C:06:53:D0:B2:B2:1B:7F:7E:23:84:91:0E:98:D8:7B
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer:       /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial:       02FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number:          02F4
Signing time:             Fri 31 Jan 2025 01:23:25 +0000
Manifest this update:     Fri 31 Jan 2025 01:23:25 +0000
Manifest next update:     Fri 07 Feb 2025 01:23:25 +0000
Files and hashes:         1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: WqWC68LcXP367uV0rUsyhdFesu/w5j++wRDo6E04c+w=)
                          2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: 6JpjDff62wDTfk1naPEndRnRsudFZskUVlbVd/hGOl8=)
                          3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: +vJahyBsj/iwD6Uf+V5LVvoqUetqk1SrdYTgQvG1J8M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
        Validity
            Not Before: Jan 31 01:23:25 2025 GMT
            Not After : Feb  7 01:23:25 2025 GMT
        Subject: CN=679c260d-b26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2f:5d:63:ac:e6:ae:62:6c:5c:23:1e:45:de:
                    f5:52:b3:1f:17:cd:2c:72:3c:bb:35:7a:18:c5:68:
                    72:66:4e:ea:3e:a9:12:63:cc:8e:7e:58:20:81:fa:
                    9d:5a:65:78:fd:19:83:25:6c:52:28:d2:ff:90:09:
                    16:38:c3:d1:2d:6d:a3:33:8a:ca:cd:c9:be:26:5f:
                    ff:bf:53:ae:12:8a:03:ef:e4:0f:f5:40:d7:75:ce:
                    d8:b7:1f:20:b6:33:b0:f9:21:c6:6f:83:dd:e1:95:
                    44:c6:22:5e:16:ba:c0:7d:d5:2e:d1:3a:c1:9d:05:
                    d8:fd:78:58:03:8e:f3:77:4f:61:a8:b2:6d:b7:f9:
                    a1:70:61:18:95:66:da:40:0b:08:d2:6d:2a:48:2b:
                    f0:c2:ad:29:3c:ae:fe:98:32:be:dd:03:5c:db:bf:
                    8c:09:9d:ad:56:3a:11:d5:0c:dc:33:d2:1a:d1:9a:
                    89:3a:1e:28:9a:bd:fa:36:32:14:63:ab:f7:41:f5:
                    2f:37:b2:28:cb:92:e9:b1:68:a9:6d:65:07:50:8c:
                    06:45:83:5a:b0:37:a0:51:f6:97:37:1f:f8:64:78:
                    89:6c:d3:5a:3b:f2:73:63:e8:35:c6:cc:4b:7d:56:
                    1c:2c:93:4b:34:09:2b:6b:69:db:a8:ca:83:c9:0a:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2F:C6:5F:6C:06:53:D0:B2:B2:1B:7F:7E:23:84:91:0E:98:D8:7B
            X509v3 Authority Key Identifier:
                keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:d6:a9:b4:59:10:b2:be:4f:db:1f:a8:c4:bf:48:8c:2f:
         3a:5e:61:9a:89:8b:33:16:79:a6:ff:57:0c:43:54:2a:28:af:
         fe:97:ae:a5:19:83:00:94:74:c7:b2:18:a9:86:cc:62:0f:35:
         74:53:e8:68:81:a0:c2:62:77:01:68:38:58:6a:a9:72:d6:19:
         79:7b:2d:ab:9f:09:75:0b:f4:82:58:ba:f5:03:0d:93:db:c5:
         27:9e:82:48:d4:46:33:ea:85:f8:30:74:e6:36:00:bc:64:42:
         99:b6:f0:e3:d5:21:1e:13:f0:77:8a:3c:90:84:e0:fc:06:14:
         fb:64:81:08:91:32:34:d4:6b:45:20:10:9b:f0:2d:44:32:e3:
         80:a5:7b:38:5b:b6:cf:12:eb:5f:c4:f1:8a:e4:a4:5d:aa:5c:
         fc:80:8d:aa:f8:06:df:a2:0b:49:2b:38:6f:57:86:47:b9:1e:
         6d:84:f7:e5:8e:8e:b3:e7:67:02:f9:66:d7:de:be:ed:03:0e:
         91:03:98:97:72:3b:a5:72:46:f1:54:53:6d:53:d1:83:07:1f:
         4f:8e:07:05:dc:ea:a6:e7:00:30:3f:3c:2c:6a:60:6f:43:bc:
         20:85:20:1b:7b:69:bd:de:1a:54:bf:21:06:a3:b0:94:0c:79:
         01:5a:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:33 2025 by rpki-client