Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
File:                     _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json)
Hash identifier:          IDzaSQUj/hVsyNQbDWxeawcXoccJF5WcQor6qVKjY4k=
Subject key identifier:   A4:BF:03:8B:69:81:EE:17:A7:87:B3:BD:40:25:A2:20:26:0B:1E:30
Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23
Certificate issuer:       /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
Manifest number:          1346
Signing time:             Thu 30 Jan 2025 19:04:20 +0000
Manifest this update:     Thu 30 Jan 2025 19:04:20 +0000
Manifest next update:     Thu 06 Feb 2025 19:04:20 +0000
Files and hashes:         1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: tuoorspFTdkS+dBLVIEFQGE3UEeMO7rQFdO7AVlm8XY=)
                          2: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (hash: RLwYPMhMe9BwDK8rCAnXVnWtpCBgPhejDp6NcWERB7s=)
                          3: 949F398CDC6F11EABFEF2548C4F9AE02.roa (hash: JKN99SL1qpZZYm8JW/0SbU0c9K8PYY5zTB3QwwglAC0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
        Validity
            Not Before: Jan 30 19:04:20 2025 GMT
            Not After : Feb  6 19:04:20 2025 GMT
        Subject: CN=679bcd34-9330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:24:1b:47:ca:5e:a0:0c:11:b9:58:8c:70:
                    27:59:9b:01:6c:ba:59:00:8a:b6:1a:ff:9f:73:fa:
                    cd:dd:c4:e4:85:9a:0e:71:3c:11:8e:cb:08:a2:55:
                    ef:5a:66:cb:b4:23:31:85:82:93:84:2e:aa:a6:ef:
                    3c:02:5f:6c:a1:b9:8b:c8:c3:c5:ff:84:0c:8e:a1:
                    41:46:46:ad:61:97:46:8d:82:c4:b3:3f:59:8f:0b:
                    ca:f7:f4:3f:e7:f5:5c:ab:b9:ae:b7:af:98:5a:11:
                    ce:43:9c:cf:65:4d:f7:e7:eb:aa:31:b4:77:72:1d:
                    c9:5e:6d:8f:d9:3e:1b:21:0c:c6:94:cb:b1:f6:8f:
                    45:58:bd:94:5a:21:1f:d8:42:a1:0d:d0:12:b3:51:
                    82:45:a0:c6:aa:b3:50:67:83:af:3e:bc:58:90:67:
                    6c:1f:c4:75:53:8b:1d:e1:3e:2e:69:58:f5:64:f5:
                    c8:c0:d8:24:82:15:ee:57:3b:12:b6:b3:1b:f2:ae:
                    8e:81:d6:cc:90:9e:72:e9:81:2b:88:3b:c8:6b:ac:
                    14:9e:bf:4e:40:c1:1a:24:71:bd:6a:12:12:eb:41:
                    41:60:fa:72:b3:0f:c9:39:6d:4f:38:9d:95:43:1f:
                    c2:f8:1d:4b:47:7d:d9:de:49:a9:73:3f:ea:64:14:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BF:03:8B:69:81:EE:17:A7:87:B3:BD:40:25:A2:20:26:0B:1E:30
            X509v3 Authority Key Identifier:
                keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5f:82:51:27:34:cc:ca:cc:98:30:6c:17:51:a0:83:90:cd:
         58:65:53:34:e4:3a:86:eb:48:82:07:4e:60:e6:88:50:c6:7d:
         3d:5c:0a:d7:4a:4f:32:d6:e7:d5:6a:05:08:4e:28:20:af:3b:
         d0:d3:b2:49:2d:e7:2b:04:26:03:5e:b4:eb:92:40:be:db:04:
         7d:f0:7c:fd:01:e8:0e:2e:aa:f5:6b:89:26:5d:b6:a9:52:08:
         9b:2c:77:9b:41:b8:83:70:75:db:7f:af:e6:0d:6d:33:4a:28:
         c8:8a:97:c7:14:ce:c7:9a:1e:4e:35:7f:68:d2:8c:81:48:56:
         fd:b9:de:7c:e3:2d:37:00:19:50:8c:09:c0:20:13:e2:61:ec:
         6a:89:aa:a7:63:55:35:f0:00:f8:7d:d9:d8:73:12:12:0c:5d:
         aa:c7:7c:69:35:9a:a9:d7:a7:1d:8a:6d:96:05:5b:35:76:48:
         71:4d:9a:41:be:32:11:3b:6f:a7:57:79:bd:16:ca:95:cc:08:
         67:2c:d5:7b:d7:9b:09:95:23:8a:f7:44:26:c7:69:d4:dd:c6:
         d3:be:01:bd:75:40:f8:19:38:9f:bc:eb:8c:2d:ae:4c:5d:4e:
         61:c0:bf:01:06:9f:41:7d:0f:fd:e7:c1:96:46:9b:37:6c:9a:
         62:cf:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:17 2025 by rpki-client