Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
File:                     6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json)
Hash identifier:          3mZz5SAlDKLtnBRmwVLS1kCU2ayNwjPlexWp3LWPW7M=
Subject key identifier:   4D:54:A0:1F:22:26:BE:B9:79:35:BA:4A:11:B2:A0:81:89:92:99:08
Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41
Certificate issuer:       /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
Manifest number:          01AB
Signing time:             Fri 31 Jan 2025 02:28:08 +0000
Manifest this update:     Fri 31 Jan 2025 02:28:08 +0000
Manifest next update:     Fri 07 Feb 2025 02:28:08 +0000
Files and hashes:         1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: e4bwWe3t5efbCViu57r1Qdjyw1JBZ9BBUHmcZeWrMpQ=)
                          2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: TXPIWerNT1GXv7TyCQJNbBBoD6VtScjOMdZFAdd3h8A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541
        Validity
            Not Before: Jan 31 02:28:08 2025 GMT
            Not After : Feb  7 02:28:08 2025 GMT
        Subject: CN=679c3538-89bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:43:be:83:85:ad:f8:30:0e:c6:9e:a6:ef:
                    a2:2e:3c:46:c7:30:f0:29:a7:64:d9:f3:d6:bd:46:
                    76:4f:52:6d:92:ec:28:92:9c:ac:1f:63:56:47:41:
                    a5:33:f6:04:d8:b0:6a:af:60:d8:92:6c:b2:f8:d0:
                    94:be:d1:15:fd:d2:b9:ce:27:e7:10:20:e4:74:26:
                    c6:41:bb:e7:41:80:6a:0a:63:38:ff:6d:14:ae:af:
                    66:23:68:35:9e:8a:f9:e7:9b:0d:d3:27:74:c1:ba:
                    7c:b4:71:ae:6e:6a:3a:60:ad:1b:e0:3c:35:77:a7:
                    da:6f:1a:e6:0a:d8:3c:23:e5:93:b3:8d:4d:c7:1d:
                    d0:2c:7d:b5:1f:ce:c2:e8:6f:72:8d:0d:da:45:60:
                    a1:69:96:e6:07:75:9e:96:d7:b4:8e:c4:21:c2:60:
                    2b:c8:c2:28:d0:78:e3:18:59:f1:ba:65:4f:7e:86:
                    f6:37:cd:17:6e:0a:49:4d:4c:93:da:c9:5a:f1:60:
                    a0:6f:12:8f:44:02:d0:6c:86:49:1a:bf:3f:3b:6e:
                    92:67:b6:48:75:60:da:78:b1:bf:0e:07:84:6e:5c:
                    dd:9e:c2:5d:2c:75:e1:e1:6d:1c:34:be:b0:5a:a2:
                    5e:8d:bc:7d:7e:e1:51:a3:c9:c8:86:e1:65:5e:08:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:54:A0:1F:22:26:BE:B9:79:35:BA:4A:11:B2:A0:81:89:92:99:08
            X509v3 Authority Key Identifier:
                keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:38:ce:27:1d:e4:d6:b2:b9:57:8b:11:be:f7:f8:2d:2d:d2:
         5a:84:50:b6:6a:68:a8:f2:b9:44:4c:a0:70:04:ab:44:76:66:
         75:ba:98:d7:f7:46:b0:28:de:cc:75:21:cd:a7:a7:ec:0b:a8:
         a0:66:0f:54:55:b5:1e:cb:63:5c:cc:a6:a6:c4:ca:f4:18:01:
         01:8a:51:7b:b6:43:d1:a8:25:87:20:1a:e3:a8:53:c5:05:cc:
         76:b1:56:e2:59:4d:31:0c:37:00:9a:0a:07:65:75:ef:e2:36:
         7b:94:5e:5e:a8:7b:52:c8:77:19:11:0b:68:32:12:c7:70:41:
         2e:a5:ee:50:5b:29:3b:a4:5f:e9:98:f6:fc:9f:1a:16:18:77:
         22:04:66:35:cc:da:47:be:d9:72:78:d2:28:3b:6f:b3:17:f3:
         b5:c2:64:4b:09:b7:28:a9:2c:4e:87:31:55:70:bc:bf:82:5e:
         bf:9e:8c:a1:78:81:c0:11:5a:ac:df:8d:d1:a1:1c:f3:71:36:
         6c:73:73:e6:b0:79:8b:a1:82:16:cb:fa:d6:5c:09:1b:84:6d:
         5e:a1:29:dc:62:7c:8b:1e:23:0b:53:dd:7d:48:f0:c4:40:44:
         40:bc:1e:3f:a6:2f:13:d7:13:03:95:08:83:6e:b6:9c:60:21:
         ea:1b:bc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:55 2025 by rpki-client