Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
File:                     b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json)
Hash identifier:          TKGiJibs9XnDXGBAHJo2GgsTC606W+aK240Na8d9RrU=
Subject key identifier:   C2:D5:EB:E3:A9:12:D4:8B:5F:26:C7:3A:85:80:A7:05:D1:96:25:64
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Certificate issuer:       /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
Manifest number:          91
Signing time:             Fri 31 Jan 2025 05:34:24 +0000
Manifest this update:     Fri 31 Jan 2025 05:34:24 +0000
Manifest next update:     Fri 07 Feb 2025 05:34:24 +0000
Files and hashes:         1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: fEIgZZ42cOQ8LJ16WQI7g6RryI1fUpqDJ9zpPKJ4mTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
        Validity
            Not Before: Jan 31 05:34:24 2025 GMT
            Not After : Feb  7 05:34:24 2025 GMT
        Subject: CN=679c60e0-3051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:3c:f3:f9:59:d2:db:17:1a:33:4c:23:45:
                    9f:fd:7c:3d:5d:94:31:05:e0:ec:c9:3e:8d:d0:dc:
                    17:89:fb:58:c5:d7:2c:bd:c5:2e:80:cb:6d:22:f9:
                    f7:e1:12:75:ee:99:fa:a7:0e:35:8c:1c:12:45:b5:
                    93:c6:c4:74:3a:f7:3a:e6:38:e0:9d:ea:9b:eb:7d:
                    2f:58:ef:71:d8:1e:a7:f8:2c:be:74:57:c7:ca:c2:
                    df:20:97:54:ea:28:94:35:f3:36:e7:b7:98:d5:09:
                    0f:0b:25:23:1f:66:45:d9:26:20:21:47:6a:21:49:
                    1b:33:4d:65:f1:9e:97:b0:b4:ad:30:1a:15:61:95:
                    b4:58:1d:10:b2:dd:73:b8:07:19:ff:a3:eb:ed:65:
                    f2:80:df:46:37:fa:99:a5:12:74:35:90:2a:f8:b1:
                    96:f8:22:01:a5:73:5c:03:00:7c:64:21:e0:9d:6c:
                    fa:d9:33:30:b7:4f:82:66:f2:02:54:a2:a6:6e:fb:
                    6f:b1:b7:12:ce:e2:af:8d:5d:5d:90:32:83:09:c6:
                    fe:aa:b3:66:20:be:f5:88:4b:45:04:a1:b9:84:71:
                    cb:6b:86:cb:45:db:ec:9c:7a:86:cd:1f:d8:d6:da:
                    e7:2c:03:59:06:41:5a:82:f6:b3:ff:a6:92:35:23:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D5:EB:E3:A9:12:D4:8B:5F:26:C7:3A:85:80:A7:05:D1:96:25:64
            X509v3 Authority Key Identifier:
                keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:0b:67:36:0b:7d:f4:d6:95:f9:ff:95:21:6b:c8:3a:3a:1f:
         4b:ee:43:d4:af:96:6a:03:4b:b3:c4:2f:f7:4a:dd:5b:08:1e:
         4b:be:41:ba:d6:8b:66:b2:8b:7f:e0:e6:31:0c:94:8d:ef:ae:
         28:dc:34:b4:21:80:28:6d:1a:2c:24:c2:d8:3b:f2:f1:e3:fc:
         a2:49:c3:ad:4f:f4:84:b2:14:89:8b:55:4a:e8:09:20:94:cb:
         7a:eb:90:f1:f8:7f:eb:b8:1b:a9:ca:0d:63:f7:32:99:da:8f:
         53:06:a1:71:47:e8:31:fa:3e:6e:db:a5:8c:e1:f2:5b:24:45:
         90:82:a9:4c:e2:96:41:af:34:01:f3:51:1b:35:ad:81:22:3a:
         76:dc:4a:92:e5:02:d4:61:ec:75:6f:36:a2:eb:09:29:ba:de:
         ed:66:81:13:b0:d6:3f:11:c1:0e:b7:f3:a4:f9:fa:2f:5f:f7:
         4e:e9:4b:84:a7:f4:fd:57:c7:8f:8b:8f:41:d3:ae:16:09:01:
         e5:09:bf:83:14:1f:dd:7a:c5:b7:be:e6:e9:19:7d:aa:cb:ae:
         ea:bd:9c:a9:07:ad:b3:66:29:5c:ee:2f:1c:33:49:2f:47:dd:
         d1:35:c1:6e:3e:de:65:c5:67:a5:c1:74:a6:3d:88:3e:81:65:
         6d:71:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:17 2025 by rpki-client