Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
File:                     X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json)
Hash identifier:          3x/FVJVBcN7ZHVmVzg8TysqPgZn91hlIwK2WuS6gHLY=
Subject key identifier:   86:17:EB:F8:CC:B9:F5:5A:EB:83:E8:A8:C5:AA:E6:25:08:41:90:0A
Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
Certificate issuer:       /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
Manifest number:          F4
Signing time:             Fri 31 Jan 2025 04:22:45 +0000
Manifest this update:     Fri 31 Jan 2025 04:22:44 +0000
Manifest next update:     Fri 07 Feb 2025 04:22:44 +0000
Files and hashes:         1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: pXUiw5fQP/6KJ6HpGBVo0nTGJGA1c4hbUknYtvdSFqM=)
                          2: B7E86E0C6D8711EEB912BD62C4F9AE02.roa (hash: 1i4x5btwBoyVs/bOkBs3utfiU+YxigrlqpfcPAr0jaw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
        Validity
            Not Before: Jan 31 04:22:44 2025 GMT
            Not After : Feb  7 04:22:44 2025 GMT
        Subject: CN=679c5014-d710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:91:e8:f5:ae:42:04:5a:50:a0:08:56:87:
                    64:51:95:72:d1:74:0f:92:b9:9f:50:6a:d9:1b:a2:
                    10:b3:b4:56:8f:b5:84:20:44:c9:5c:b7:d6:48:22:
                    f7:7d:da:09:fb:7b:26:b0:3e:58:61:32:68:3d:5c:
                    60:0b:c6:c6:e9:c6:91:96:35:1f:46:fe:b9:b8:c6:
                    99:0b:55:9c:10:58:ed:10:1e:84:88:1a:18:0e:19:
                    50:26:52:b8:01:ba:53:c2:5b:5b:53:b3:b0:63:d7:
                    ff:94:be:0d:a7:ef:ac:c5:c5:d6:0e:26:0c:6f:30:
                    9d:bf:a3:3c:3f:ce:8e:77:58:8e:e4:55:08:dd:25:
                    47:25:cf:fd:33:c9:66:01:96:c3:b7:54:00:db:06:
                    19:bb:1e:5e:62:42:e2:8f:bb:78:63:d3:43:37:8c:
                    22:93:0c:56:a8:78:7b:d9:0c:53:97:e9:c7:62:1b:
                    51:28:04:82:dd:67:a7:1d:4f:f4:c2:25:82:f3:c1:
                    e8:8a:a3:8d:5c:b3:e0:40:8b:7c:c4:49:d3:29:ff:
                    f0:04:a4:10:a1:50:e2:48:3a:b2:5d:8f:7a:87:58:
                    16:af:62:ca:b7:9a:37:b9:01:67:2b:19:f0:90:94:
                    2f:9e:c8:8b:d5:06:b2:a4:b3:da:51:64:b3:16:e1:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:17:EB:F8:CC:B9:F5:5A:EB:83:E8:A8:C5:AA:E6:25:08:41:90:0A
            X509v3 Authority Key Identifier:
                keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b8:e9:4a:c0:c9:4b:58:01:d3:4a:40:64:69:f2:f8:64:8e:
         52:f1:d9:8c:23:c3:f7:23:ab:07:21:d2:b5:6d:47:5d:c8:a5:
         74:de:c4:66:7f:f9:52:71:76:6a:46:cd:72:03:18:66:04:4f:
         41:4b:e9:72:43:9b:80:d4:0f:79:a2:c9:db:bd:b4:97:88:9d:
         76:91:0d:c9:6b:5e:bf:63:be:c8:0c:8d:c8:3f:7d:25:7a:3c:
         bb:ab:18:14:e6:17:36:a4:de:55:d3:4d:45:23:25:b6:6d:d2:
         f9:1a:a7:ba:cb:e3:a9:82:e6:29:ea:77:2e:a1:17:f7:a2:32:
         0f:c2:b0:2a:df:29:13:38:8f:e7:b7:0b:2f:12:a7:67:17:eb:
         20:f9:89:62:98:9b:c0:fa:70:3f:05:49:70:f1:de:fd:7a:12:
         82:22:21:98:95:c4:35:72:16:96:af:34:76:3f:c4:f7:20:84:
         52:4a:9f:38:e2:29:6d:5a:14:72:68:02:16:2a:d7:4a:7b:98:
         89:e7:9d:f0:e2:52:e8:37:62:ee:67:17:96:d8:81:b0:49:54:
         9c:fa:cb:5a:d7:cf:81:62:df:4f:61:d5:b3:a5:2b:17:9f:26:
         7d:ed:d8:86:e8:cf:59:2c:e2:ad:26:0a:7b:12:fb:0f:53:42:
         89:81:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:41 2025 by rpki-client