Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
File:                     788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json)
Hash identifier:          G7xFUHOUe2Di7ue4M2lpJaFa3ZY5QldNQvcbgnKvdLA=
Subject key identifier:   4A:64:EC:2B:48:2D:F1:DF:7F:5D:FD:24:6C:71:00:7E:A2:DD:96:A1
Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04
Certificate issuer:       /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
Certificate serial:       0D15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
Manifest number:          0D0E
Signing time:             Fri 31 Jan 2025 18:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:45 +0000
Manifest next update:     Fri 07 Feb 2025 18:00:45 +0000
Files and hashes:         1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: 0hoWvQgAN+VnWmDeHGtfbeyydx2Aup8z665QcCHoriQ=)
                          2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: VSbvOJwGGe/ohiP+L17bAesxp9bgmYgwB4Rs+JtW0oQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3349 (0xd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
        Validity
            Not Before: Jan 31 18:00:45 2025 GMT
            Not After : Feb  7 18:00:45 2025 GMT
        Subject: CN=679d0fcd-a02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:69:97:4f:f4:bb:92:23:05:72:54:2f:ae:
                    14:88:58:45:e0:ce:37:85:72:6b:a6:2e:8c:99:c2:
                    6b:54:c3:d1:2e:c3:0f:e9:77:32:66:3d:bf:27:19:
                    29:76:32:60:c7:ed:a6:52:6d:f2:2b:31:31:e0:6a:
                    0c:62:cf:11:8e:24:2e:da:8c:b3:30:2e:04:3f:6f:
                    97:a7:0e:e6:ee:35:fa:c0:c8:8e:ab:58:94:d7:74:
                    b9:fe:de:a1:0b:9b:ad:b3:48:82:52:6e:03:61:87:
                    43:32:9a:46:1b:d5:2e:81:55:fe:8a:58:7c:90:25:
                    d9:b3:37:40:ea:bb:27:fd:aa:57:85:51:d9:91:cb:
                    b5:d2:b4:18:58:cf:20:42:b1:c3:be:7f:84:eb:92:
                    11:11:23:1a:58:c3:05:4d:c2:de:b8:d7:fe:be:06:
                    80:12:12:ac:20:f0:88:36:6c:6b:d1:54:4c:90:ff:
                    20:ff:eb:80:1c:e2:41:ea:79:44:e0:a6:e0:96:4b:
                    45:f8:09:ab:7e:35:36:b1:a5:e5:cc:57:f2:90:7d:
                    04:5b:4d:16:ed:03:a8:27:3f:80:a9:f8:7c:b6:eb:
                    84:bf:da:83:34:68:99:60:51:0c:98:79:6f:c8:d1:
                    12:da:36:f2:61:07:5e:25:b4:33:a4:4e:e9:56:90:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:64:EC:2B:48:2D:F1:DF:7F:5D:FD:24:6C:71:00:7E:A2:DD:96:A1
            X509v3 Authority Key Identifier:
                keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2e:06:7e:62:8f:2d:4b:53:cf:5e:bb:93:23:b9:21:45:68:
         1d:73:01:c2:28:1e:51:e2:44:c6:36:e5:73:57:64:13:f5:6e:
         f5:ed:df:7e:0e:6c:d5:b3:b8:36:6e:f4:1c:78:31:aa:56:0e:
         c7:fb:e8:a3:1f:d2:3d:1c:43:f2:ee:d9:36:7d:55:df:75:3f:
         5e:2f:f1:c8:47:48:db:5a:74:18:01:af:10:4e:85:9b:8f:72:
         17:4c:c2:26:1b:06:98:c8:37:02:7a:76:df:ee:3c:8c:ae:77:
         89:77:98:99:37:46:cc:5c:6a:29:0a:e3:2a:c9:f2:e4:c2:54:
         9d:3b:d7:40:5a:78:31:e3:96:bd:06:4f:e8:f1:63:d8:d2:6c:
         3d:8e:f1:6b:66:5c:46:0c:12:00:45:55:6b:84:09:f7:d3:ec:
         70:e5:72:7e:d3:35:36:97:01:03:fe:75:56:98:7f:e9:95:15:
         21:67:6c:74:c1:65:c6:8f:c0:9b:a6:64:c8:e8:9e:cd:c6:c5:
         02:50:5d:21:58:97:0c:0f:88:1a:13:e7:52:71:60:65:9c:d8:
         67:94:6b:38:d7:62:b9:f9:56:90:6a:6d:b0:c5:20:57:6f:86:
         e2:2a:31:9a:36:f1:71:5a:a8:77:17:89:e3:56:a6:72:dd:a3:
         36:c2:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:18 2025 by rpki-client