Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
File:                     poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json)
Hash identifier:          RnlJEfCtaS45uiRAYqPiwIQrIL3mmEW0O50yjlyiIig=
Subject key identifier:   49:3F:13:76:9A:EA:F3:69:92:EB:F4:3F:2B:51:79:4B:EC:9B:1F:BF
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Certificate issuer:       /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial:       036F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
Manifest number:          0367
Signing time:             Fri 31 Jan 2025 00:59:20 +0000
Manifest this update:     Fri 31 Jan 2025 00:59:19 +0000
Manifest next update:     Fri 07 Feb 2025 00:59:19 +0000
Files and hashes:         1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: vTiCTbCTV96wuJgEU09ElpLIYQM9LDAJG9fokMmyD1s=)
                          2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: CW3j/kB0iIlMJ+3lrD5HV2LAKz9hUDzTZRZrWdpxIYA=)
                          3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: KwB5Za6c44Sp6WKsELOvklwRL+/LDv/rBqGOUWdpNrM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
        Validity
            Not Before: Jan 31 00:59:19 2025 GMT
            Not After : Feb  7 00:59:19 2025 GMT
        Subject: CN=679c2067-5420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bd:78:1a:5b:7c:25:75:82:e6:18:98:f9:8c:
                    59:bb:10:84:e5:b4:30:1f:87:db:e6:d3:6e:ee:79:
                    7e:6b:7a:e3:47:10:ec:3f:c2:95:4f:76:28:01:c9:
                    ca:1f:fa:f2:73:6f:fb:65:af:b0:2d:fc:cf:38:99:
                    4c:79:07:6e:a2:24:8d:ea:06:7b:4c:94:b7:12:66:
                    40:a6:4e:6d:a7:2f:f8:32:aa:0c:4a:12:68:a1:bd:
                    13:f3:c8:3e:2e:37:89:b6:c9:c7:aa:77:1c:e0:57:
                    de:e5:75:69:1b:c7:9d:1a:79:1a:d5:25:3d:01:e2:
                    c4:48:80:c0:ba:83:29:40:4f:04:ba:79:83:49:1f:
                    5f:a4:07:a0:2b:c0:f4:1f:c0:1e:aa:e3:b6:a4:6b:
                    4f:75:09:12:b9:e7:8e:6c:83:44:f8:8a:f9:9b:cd:
                    52:fe:9d:e6:31:58:71:34:b3:ea:18:30:dd:bc:76:
                    b4:a6:2b:a6:83:19:04:ec:8b:55:01:60:63:27:b1:
                    79:cc:53:6b:70:b8:a2:02:4d:94:be:b9:16:54:06:
                    9d:b8:a7:7b:5a:aa:19:2d:ef:9e:9d:63:a8:e3:1e:
                    72:93:58:52:b6:3c:81:c6:6f:71:5e:ef:6e:26:0c:
                    12:38:4b:c4:f8:71:6a:44:c0:8f:dd:05:8d:04:62:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3F:13:76:9A:EA:F3:69:92:EB:F4:3F:2B:51:79:4B:EC:9B:1F:BF
            X509v3 Authority Key Identifier:
                keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:d8:40:e8:dd:a1:26:8e:0f:0d:d3:ed:c1:39:e1:a8:7c:
         a3:e4:aa:cc:38:fd:6b:bb:b7:8e:82:d1:d1:48:ce:c8:d9:97:
         8e:4c:ca:f4:5f:33:92:24:38:6d:35:79:e3:42:06:fc:b8:35:
         83:20:e0:e5:2b:c4:20:ec:94:80:10:7d:39:d6:ab:f2:7e:bf:
         1d:30:e3:f6:4f:b5:c5:91:ea:a0:dc:cd:d9:8f:01:73:19:0b:
         d0:85:0d:ab:7a:d6:9e:df:ff:6b:ea:a4:10:76:3b:fe:38:7e:
         f1:68:b1:99:37:73:4a:d5:42:ca:18:2a:b9:cc:2e:2b:81:7d:
         7b:82:9d:48:6d:a1:78:b0:d3:38:d0:09:87:4d:f2:42:94:98:
         6e:96:7d:fb:6a:03:5f:12:0b:69:21:7e:9f:19:dd:b4:84:73:
         f2:5b:4e:d7:2a:dc:09:f9:8e:a2:ff:7a:5b:bb:aa:40:40:47:
         2a:f4:d0:f3:dd:44:d7:a9:8a:b8:c5:d7:7d:cd:dc:cf:0f:c4:
         cc:50:44:a3:db:fa:4e:78:44:68:64:2b:a9:44:a9:07:84:09:
         57:36:0d:1e:23:6c:75:e8:dd:75:53:66:62:b1:50:8b:96:7f:
         a4:63:f9:93:13:4f:71:45:3e:32:b0:9b:2c:a4:fe:86:54:83:
         ab:b3:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:10 2025 by rpki-client