Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
File:                     5P3k1jhc-jqHPsReepFHztMJvAI.mft (raw, json)
Hash identifier:          3F8gKa9Xz7QPcgGgcclh+INmOkWfSeD4H19VMllQ+HQ=
Subject key identifier:   C5:7C:20:21:69:3F:4B:08:DB:59:8A:11:DE:A6:43:EE:CE:C6:98:8D
Authority key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
Certificate issuer:       /CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02
Certificate serial:       0636
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
Manifest number:          062E
Signing time:             Thu 30 Jan 2025 22:36:43 +0000
Manifest this update:     Thu 30 Jan 2025 22:36:42 +0000
Manifest next update:     Thu 06 Feb 2025 22:36:42 +0000
Files and hashes:         1: 5P3k1jhc-jqHPsReepFHztMJvAI.crl (hash: 8nQqRHlIKMwUAqSmh/Assr1sxMgMvYNd7bnTNgZ3dlY=)
                          2: 18ED6F18862211EB99005123C4F9AE02.roa (hash: rr8gNUqLqDSNabGr8QuJud25OZUwhJk+lADOj5yViNQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590 (0x636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02
        Validity
            Not Before: Jan 30 22:36:42 2025 GMT
            Not After : Feb  6 22:36:42 2025 GMT
        Subject: CN=679bfefa-1770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:26:fb:c0:b3:12:d1:c4:1f:aa:18:28:d1:
                    43:72:89:c4:b0:41:ee:49:39:c5:5e:63:81:ce:7d:
                    0d:2a:79:b2:be:8e:80:02:2e:09:b5:4e:ca:53:42:
                    1f:ef:bb:96:0e:b5:7e:37:a2:5d:7d:0e:29:d9:34:
                    bc:dc:e4:44:c7:9d:fc:3d:1c:c4:c0:85:a2:96:71:
                    80:da:9b:f1:5e:ca:f3:71:ed:e1:5d:17:a8:e5:c9:
                    3f:99:c6:79:8b:7d:9c:2a:65:96:d0:64:30:e0:70:
                    6d:80:84:1d:d4:39:be:e0:be:56:7b:5f:54:65:6c:
                    29:7e:40:3e:f7:49:23:49:dc:c3:b7:d5:34:ac:08:
                    18:ff:2d:43:fb:0c:49:22:f1:8b:6e:49:06:91:0e:
                    39:f4:f1:4a:af:10:6e:1e:a0:5f:86:00:c1:ae:11:
                    8d:3a:62:40:c1:11:2a:42:79:c3:3a:bb:f7:91:20:
                    f1:3a:63:73:a3:cd:33:e3:94:d9:7f:65:f7:7d:9c:
                    a8:c3:98:4a:69:c8:24:0a:0e:12:56:3b:64:85:8e:
                    70:8e:07:76:1a:d0:f0:91:8f:9f:42:f5:6b:8e:ea:
                    ed:46:74:45:5a:56:e6:40:88:0e:9a:8c:2f:96:ba:
                    b8:c4:78:7b:ca:26:31:ca:b9:8f:57:14:4d:6e:a0:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7C:20:21:69:3F:4B:08:DB:59:8A:11:DE:A6:43:EE:CE:C6:98:8D
            X509v3 Authority Key Identifier:
                keyid:E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:24:21:3c:73:c4:c5:1d:a0:4e:45:9e:a9:8c:44:a9:4b:48:
         58:db:aa:b4:4d:cd:5c:27:98:4c:5f:0f:02:ef:fe:7d:9e:95:
         8e:24:d7:66:df:3b:58:5c:54:47:39:c4:18:d6:c3:45:a1:13:
         ef:79:09:96:d5:3a:da:51:de:fe:b5:0e:1e:a4:39:57:96:20:
         11:91:89:29:d8:49:d8:fc:a4:00:d9:84:2f:4f:58:80:62:7f:
         11:da:07:b3:ff:99:bb:c3:1a:e5:3c:27:f4:89:37:61:08:a5:
         b9:ef:36:c5:aa:55:48:fb:e8:c7:76:10:ac:d4:b1:7a:71:13:
         2e:ab:80:7d:bc:82:ce:49:2a:f7:8d:a6:b1:d7:4a:89:a2:ef:
         3d:a8:0b:88:cd:b5:ef:57:ed:e9:63:56:99:73:bc:59:28:72:
         6f:cd:ff:43:02:b0:9f:bf:0f:dc:2f:fd:57:3b:65:33:15:d5:
         a2:f8:53:9f:3a:13:46:1d:f6:7e:37:ef:0f:0c:eb:a2:dc:32:
         e0:ed:c2:17:34:db:8b:da:24:50:77:a8:bd:af:5d:2d:cd:ee:
         27:b6:9f:62:69:5f:c3:3d:cd:b5:f0:70:9d:b9:9f:6b:c7:0e:
         07:37:ad:32:5f:0d:0a:07:7b:d9:43:f4:5e:d4:fd:c2:df:56:
         a1:8a:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:46 2025 by rpki-client