Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
File:                     VtexXMGugneFjWSSwB3VMwhEzAY.mft (raw, json)
Hash identifier:          o25IIIatVLqkw0wj8LFkdHSnTXFemUtS4I9E6QUg/qY=
Subject key identifier:   93:1C:FE:11:1A:7C:CB:CC:6F:0D:FA:DC:D7:88:40:0E:9C:EA:5F:0D
Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
Certificate issuer:       /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Certificate serial:       082C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
Manifest number:          081B
Signing time:             Thu 30 Jan 2025 20:53:01 +0000
Manifest this update:     Thu 30 Jan 2025 20:53:00 +0000
Manifest next update:     Thu 06 Feb 2025 20:53:00 +0000
Files and hashes:         1: VtexXMGugneFjWSSwB3VMwhEzAY.crl (hash: +exQmJh6omJVb6y45/zKIrmFoX9hW+yqbSdHV9FwAm4=)
                          2: 206929C4CA4F11EABA13087FC4F9AE02.roa (hash: HN2wxXwa+kSK089yxD0HDWrYydcNndyobtFpGLOTHwg=)
                          3: C584C646CA5111EAB9696B0AC4F9AE02.roa (hash: jKi3PKCqjoeXzKEIhqY8kjF2HaVhBCmBhcTW865Wvd0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092 (0x82c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
        Validity
            Not Before: Jan 30 20:53:00 2025 GMT
            Not After : Feb  6 20:53:00 2025 GMT
        Subject: CN=679be6ac-5690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:e1:b3:42:3f:5c:cd:75:e4:3a:53:c3:96:
                    5d:03:c7:c5:29:ea:b1:bf:e1:9b:c5:89:96:ce:38:
                    e5:6c:2b:b0:02:9c:a9:a7:36:ef:3d:f3:5a:40:53:
                    bd:c7:7c:7d:f1:4e:e7:b2:6e:3f:87:84:76:24:e9:
                    e9:3f:2f:cd:0c:c5:7f:d9:10:54:88:b3:0f:50:f5:
                    f8:02:d5:39:cb:ad:ae:65:36:d7:57:5d:de:2f:0f:
                    61:99:c0:b0:a9:17:3e:f2:7c:98:07:bd:a9:d0:c9:
                    1d:69:20:61:1d:76:4e:d7:94:06:9d:81:51:a5:70:
                    d5:3c:29:cc:66:f7:f8:2c:e7:e2:ca:f2:d3:4e:e9:
                    5d:32:75:6f:3f:1d:04:88:81:e9:e6:a9:90:4a:98:
                    51:11:7b:90:ab:ad:b4:e3:f1:95:18:25:1e:76:44:
                    b9:fa:d2:5b:6f:96:95:3e:a0:e7:ab:27:18:6b:23:
                    e9:1a:13:e7:c5:1a:ce:c5:a5:01:cf:92:d2:04:92:
                    f3:ae:fc:ed:63:a6:21:d1:92:3c:f9:02:34:fc:d2:
                    cc:cb:d7:3c:20:92:80:e9:4a:36:9a:51:47:e0:63:
                    a3:c3:0a:05:fd:82:40:dc:b1:e6:3e:1c:58:35:44:
                    46:b5:6f:09:e5:26:9d:65:56:20:b6:54:ac:ce:ca:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1C:FE:11:1A:7C:CB:CC:6F:0D:FA:DC:D7:88:40:0E:9C:EA:5F:0D
            X509v3 Authority Key Identifier:
                keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d2:df:d1:6e:d2:4b:33:28:0d:79:ab:99:70:b7:84:d0:d8:
         36:e7:58:68:e6:65:6b:d4:cd:ef:8b:94:44:82:64:ac:0c:64:
         ad:9f:40:4e:f9:7c:c1:32:0d:c1:6c:ac:5c:bd:7d:65:20:b1:
         c7:95:20:ab:4b:1d:de:da:9f:f8:55:17:f6:ec:99:a2:1f:e5:
         11:68:1b:33:2e:d7:30:92:9b:c4:fc:f6:e9:3a:c3:22:8d:b2:
         22:81:d1:eb:a0:c3:43:68:67:6c:98:b9:a4:75:7f:e3:57:65:
         3b:7c:48:29:81:c5:c6:c3:93:58:dd:8e:97:1f:fe:64:c5:a2:
         ed:1b:ed:0f:74:f7:0a:13:df:0d:b6:b7:60:f1:ea:c1:e1:23:
         fe:96:82:7d:fd:2a:a6:3b:bd:f5:e1:e8:90:bd:29:e3:9f:25:
         42:1a:dc:99:36:55:3e:b7:9b:fe:6a:1a:40:96:1a:bc:03:b3:
         a2:fc:7e:24:38:cf:20:f0:0b:b1:ad:57:9d:45:7c:3c:fa:d1:
         56:31:c5:72:0a:ba:e9:d1:60:25:f6:45:4e:48:a4:e3:d6:9a:
         7a:37:bc:9b:60:0a:01:fa:38:7e:19:f8:91:c1:19:3d:48:af:
         0f:06:15:da:d6:ad:da:9e:38:82:5a:ee:34:7b:77:0a:d9:da:
         16:89:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:05 2025 by rpki-client