Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File:                     EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier:          xmBr1zJtFyUmYJAnYfHkwpbanhg+i1/onkBQDFN79Pc=
Subject key identifier:   EA:7E:AA:78:48:5C:90:E3:5D:F8:89:DA:91:AB:AF:CC:17:8F:D7:76
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer:       /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial:       0DD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number:          0DC3
Signing time:             Fri 31 Jan 2025 17:52:26 +0000
Manifest this update:     Fri 31 Jan 2025 17:52:26 +0000
Manifest next update:     Fri 07 Feb 2025 17:52:26 +0000
Files and hashes:         1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: SKG+YphFjeNFh1e4lp13szkns5OO/HhzdZMvd/tRMzs=)
                          2: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: tRUYfW/mxJFIRHVM9QsIKc4UoKBg/TdEbDm54bKQfQg=)
                          3: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: frbKmKZ/HkPfIsExphPK4/29KT8ut0jhVn7FWlBmQ8E=)
                          4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: agk9fTE0Dhy5dYc90EBQeapRa6cEZ8A1rQ5/CvNJ7LU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3536 (0xdd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
        Validity
            Not Before: Jan 31 17:52:26 2025 GMT
            Not After : Feb  7 17:52:26 2025 GMT
        Subject: CN=679d0dda-1bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:a7:01:72:1d:49:76:c6:be:1d:97:c3:b3:
                    43:39:88:56:fc:c4:ca:36:de:bd:2f:fc:de:5a:49:
                    67:8a:ec:1f:ee:f8:37:71:f9:a3:f5:1e:d0:10:9a:
                    82:78:51:a5:91:26:c7:6c:8b:2b:7d:50:9f:a3:7f:
                    b5:44:dd:a9:6b:9a:6b:35:1e:fa:97:13:cd:80:00:
                    34:aa:a1:65:f5:de:4e:a0:46:57:ff:ff:7f:05:27:
                    d6:31:b8:16:dc:0f:60:01:93:24:ef:de:ee:24:b5:
                    32:0a:38:93:94:9a:e6:9b:e9:8e:15:ab:97:66:11:
                    a3:34:53:6a:7f:cd:58:d9:e0:f5:5f:e8:f7:fa:b6:
                    7a:1d:97:17:0d:00:77:62:f0:d4:70:99:de:77:e1:
                    fd:7f:36:26:b0:b3:f0:ed:25:25:fe:19:fd:38:5e:
                    39:22:3e:06:ce:4b:79:1f:6d:20:dc:41:0d:cc:e8:
                    9b:67:21:e5:c7:57:3d:e5:8e:4a:65:3a:8b:a5:09:
                    4f:a1:39:a9:73:8a:1a:77:c3:13:eb:62:ae:06:cf:
                    c5:39:12:13:32:c2:20:42:26:5f:56:50:48:65:e9:
                    b0:03:dc:b7:3d:f7:25:e4:71:af:88:d2:57:71:f4:
                    08:5e:d6:41:ad:c8:65:a0:c2:64:66:b5:5c:a7:b6:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7E:AA:78:48:5C:90:E3:5D:F8:89:DA:91:AB:AF:CC:17:8F:D7:76
            X509v3 Authority Key Identifier:
                keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:7d:95:c6:ad:37:09:47:90:28:62:4e:6e:47:2c:25:e9:
         4f:fb:e7:ab:85:18:5e:92:15:4d:35:ad:20:38:af:4a:0e:d7:
         2f:4b:55:4d:a6:67:9c:93:5d:2e:82:68:a3:97:56:e7:ef:dd:
         56:64:b7:a5:4e:7a:06:ac:b7:ca:b9:7d:1c:a2:35:89:66:d4:
         2e:80:f8:34:21:75:4a:eb:15:6e:8b:6b:eb:11:8a:12:44:b2:
         4a:3c:1d:8e:fa:40:02:1e:c5:e6:c1:88:b3:47:8f:96:70:21:
         10:4c:38:7b:27:55:86:ad:5e:99:50:2c:83:d5:fe:d4:1c:22:
         67:2c:47:dd:1e:dd:fb:1c:7a:be:5d:ef:07:ff:a2:51:4c:90:
         19:c5:87:b9:ca:c8:f6:21:7d:49:22:c5:b2:22:3e:8e:2c:c6:
         46:7f:af:d6:a6:89:36:42:a5:ff:67:db:d7:3f:58:93:0b:83:
         bd:83:9c:fa:b7:32:0a:8a:b9:16:2d:98:4d:46:4f:fc:d8:9c:
         de:f3:1a:a7:15:0d:21:1b:79:d8:27:21:dd:93:be:c3:f2:37:
         b4:fb:4d:1c:cf:99:91:e1:54:bd:37:30:6f:44:b4:d4:a9:81:
         6a:4f:6d:c3:51:0d:eb:b9:80:01:9c:ca:a3:fe:6b:94:e8:60:
         ae:ad:69:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:03 2025 by rpki-client