Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File:                     MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier:          kKWvxxPI1gZiKA27o5Pnjyz4qdl6fy8n11for7rkmxI=
Subject key identifier:   2A:FF:DF:29:7E:6D:7E:60:A6:8D:88:A6:4E:5D:10:CB:91:7D:5D:62
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer:       /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial:       1409
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number:          13ED
Signing time:             Fri 31 Jan 2025 16:57:08 +0000
Manifest this update:     Fri 31 Jan 2025 16:57:07 +0000
Manifest next update:     Fri 07 Feb 2025 16:57:07 +0000
Files and hashes:         1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: ZFoHvkfl894esbWWkN+BzihlSrBd/31EMZ/uW+F3P7U=)
                          2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: dEUjWtTlj2rNYIxixfb1q7kgTimYlRGEihBrx/cv4cU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5129 (0x1409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
        Validity
            Not Before: Jan 31 16:57:07 2025 GMT
            Not After : Feb  7 16:57:07 2025 GMT
        Subject: CN=679d00e4-bda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:37:66:0f:7e:fb:0c:45:d9:ad:d1:84:d3:
                    ca:3b:0e:95:d4:ce:3a:5b:13:2a:d0:98:94:a4:22:
                    a3:85:e6:73:40:09:94:ac:bf:ea:e6:86:73:62:6d:
                    c3:c1:ea:1e:76:a8:63:1e:ee:55:fc:e8:ed:a9:b0:
                    a4:9a:f8:4c:3a:3f:be:3e:97:00:87:b7:cb:b6:10:
                    b6:83:5f:38:40:e6:77:fb:41:bf:85:1b:6c:3f:5f:
                    9d:8c:32:c4:2b:e4:45:09:cd:49:67:18:96:88:02:
                    cd:88:a2:79:bb:cb:3c:23:16:9a:2f:ee:5f:eb:76:
                    66:ee:c6:6d:af:f5:09:02:c9:62:30:24:2b:ac:f9:
                    8e:9f:4a:de:7f:e2:13:3a:5a:57:7c:9f:48:8c:f1:
                    b4:ba:27:73:50:6b:12:6e:01:56:dc:52:e3:ba:ef:
                    9a:d7:24:e7:3b:2c:5c:71:5d:2b:18:a1:05:e1:f3:
                    62:6c:3e:7b:c8:4a:e4:da:a2:46:20:52:e9:b7:88:
                    4a:b4:2a:49:5d:26:7b:bc:7e:03:31:53:f7:54:4e:
                    b5:70:d2:7c:e7:d6:79:99:02:8b:af:72:ba:53:cc:
                    3d:bc:38:1a:4f:61:13:a2:f8:a5:93:38:af:c5:3b:
                    5c:c0:b7:ac:be:d9:22:98:b1:3e:52:f5:e9:c8:39:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FF:DF:29:7E:6D:7E:60:A6:8D:88:A6:4E:5D:10:CB:91:7D:5D:62
            X509v3 Authority Key Identifier:
                keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:90:02:b4:84:bc:70:36:2d:53:37:0c:90:a8:8b:5a:43:1c:
         b8:d4:3d:1e:77:fa:81:e9:ca:8d:5e:40:a8:de:a8:01:4f:23:
         43:0e:3b:17:be:f5:76:ed:6b:53:aa:49:48:12:67:3d:25:68:
         c8:3c:62:1f:be:52:69:a8:db:7d:18:7f:96:5a:13:b9:d4:41:
         7c:73:4e:fa:92:bb:2b:59:c1:8a:2f:f5:0c:88:23:9f:4a:1d:
         0c:ab:2c:46:8d:59:25:a1:85:b9:5e:53:2a:c3:9e:fa:e3:7c:
         bb:11:09:a9:2f:28:7a:5f:94:6a:2f:96:e0:9c:ef:8e:d1:81:
         d5:bd:f2:56:b6:37:74:b1:61:52:29:79:c0:13:4f:c5:be:0e:
         8b:1c:15:6b:e1:f7:62:b3:fb:9e:32:55:cb:09:e6:73:5a:50:
         39:c3:81:01:c3:a9:0b:40:10:27:f5:a4:de:77:b5:92:5e:ce:
         65:1f:72:ef:4c:af:a8:72:85:15:bf:9a:56:78:ae:a2:9e:2b:
         ab:c2:02:02:1d:8a:72:8e:60:cd:8b:c0:c7:c7:a9:5a:0e:e1:
         81:52:b4:6f:4b:0c:dc:9d:2d:7b:c8:b0:0f:b4:ba:4b:46:71:
         d5:3d:ed:d1:8e:bf:9f:b2:ae:50:07:1d:19:90:64:1f:97:86:
         9e:29:d6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:36 2025 by rpki-client