Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
File:                     faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json)
Hash identifier:          Rd/KIx9M+hdrE9hBcQckVDYYQrgWsJKpBWWvrBH15W0=
Subject key identifier:   E2:CA:A3:55:B7:C8:F9:22:74:AA:36:DE:2E:47:D8:24:1C:1E:8C:41
Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
Certificate issuer:       /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Certificate serial:       1002
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
Manifest number:          0FF8
Signing time:             Fri 31 Jan 2025 17:26:33 +0000
Manifest this update:     Fri 31 Jan 2025 17:26:32 +0000
Manifest next update:     Fri 07 Feb 2025 17:26:32 +0000
Files and hashes:         1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: JvpYmg7b8QSeyVJUOUHASvKRBCeCBLHpM2UzXE5lgqQ=)
                          2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: y5NX1YIUJkNfdZYbpVfh0lEdhrqmAzue7Svt0KDhStg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4098 (0x1002)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
        Validity
            Not Before: Jan 31 17:26:32 2025 GMT
            Not After : Feb  7 17:26:32 2025 GMT
        Subject: CN=679d07c8-ef2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:7b:e1:c1:62:3b:03:2e:08:ee:14:19:03:
                    d3:b6:8e:3e:b6:2a:4e:3b:4c:64:37:5f:f6:de:46:
                    01:88:00:75:60:df:27:08:38:2c:c4:80:78:15:1f:
                    ba:45:cf:b9:dc:5c:6e:58:cc:f1:63:16:e5:bf:c9:
                    44:9a:46:e0:18:90:88:d1:78:7e:a5:86:28:30:3e:
                    f0:1b:5f:f6:94:8b:1c:c5:af:92:c7:07:a5:9f:6b:
                    47:a6:4c:c8:ea:2f:f4:d6:44:cf:63:88:b8:7b:e3:
                    32:8e:1a:fe:73:e9:9e:2e:8a:9c:91:a5:f7:53:34:
                    86:58:f9:73:89:eb:42:72:5b:72:ed:2e:5b:ba:ba:
                    2b:c7:40:cc:bc:43:45:43:b4:bf:20:b3:df:71:92:
                    cd:03:ce:06:49:fd:1e:b1:0c:d3:e0:f2:fa:63:79:
                    ee:b0:9f:48:61:37:a6:0b:75:73:4b:7a:e7:05:cb:
                    6b:7a:30:a2:64:9e:17:dd:cb:72:64:83:af:26:4f:
                    be:09:01:87:e3:01:32:bd:3a:97:29:a8:1d:21:32:
                    6a:ec:de:d2:8f:c8:0b:15:48:fb:9a:c3:88:7b:e2:
                    42:16:cb:8a:ad:e5:6d:78:5d:ed:71:74:9f:f3:d0:
                    96:51:6c:aa:13:04:46:20:17:34:38:4f:08:59:ce:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CA:A3:55:B7:C8:F9:22:74:AA:36:DE:2E:47:D8:24:1C:1E:8C:41
            X509v3 Authority Key Identifier:
                keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b0:8f:2f:dd:2a:37:61:23:aa:c2:5b:7c:97:6b:ea:f0:75:
         7c:3d:f7:dd:46:3a:32:22:d4:73:09:aa:da:ab:86:c8:1f:fb:
         d7:60:4a:26:df:ff:21:be:c8:01:f1:8b:72:25:35:7e:d8:83:
         69:37:da:3c:a2:f5:f3:02:cf:dc:15:d6:35:01:fb:93:cc:1c:
         75:46:d8:8a:dc:d3:c3:31:63:e1:3c:f1:17:5d:6d:58:23:1d:
         97:9f:e5:27:80:9b:ab:77:72:e5:f9:49:e3:d4:6b:16:f0:55:
         68:f3:cb:55:48:31:40:4a:b2:ce:dd:29:71:5d:c9:43:04:00:
         80:fb:40:c4:fe:5f:e1:87:03:64:18:e4:8e:8c:42:a1:0a:f9:
         2f:b2:2e:76:45:e7:89:45:82:e9:63:4e:28:72:33:44:bc:82:
         f1:e8:37:25:68:93:f0:f0:ef:3d:3d:8e:35:75:b0:7e:8c:06:
         b3:ad:b3:2f:13:1c:1b:47:39:0c:f6:79:5b:41:03:3e:5c:bc:
         eb:5f:61:8d:65:c3:fa:db:24:31:b3:79:db:9c:05:a0:f7:19:
         46:40:e9:15:19:ac:ed:fc:01:9d:44:e9:f4:03:72:70:7b:01:
         96:c5:f7:a4:da:6d:7f:78:fd:7c:6c:11:18:87:51:b9:f9:37:
         b2:48:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:58 2025 by rpki-client