Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
File:                     coqCQJLldBJUu5LVl3IzYaBL8pI.mft (raw, json)
Hash identifier:          mX7d0zELdx0BOv77T7bI0cY/1cobOmEVtDBS/Z2MRJc=
Subject key identifier:   F7:0E:38:CB:83:44:D8:54:20:34:E6:75:E6:A5:C7:AE:91:3C:C1:9C
Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
Certificate issuer:       /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Certificate serial:       0CC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
Manifest number:          0CBB
Signing time:             Fri 31 Jan 2025 18:06:19 +0000
Manifest this update:     Fri 31 Jan 2025 18:06:18 +0000
Manifest next update:     Fri 07 Feb 2025 18:06:18 +0000
Files and hashes:         1: coqCQJLldBJUu5LVl3IzYaBL8pI.crl (hash: 4uvMEgDYaP64FCLysOcDJIlikV2LnLUPdv9zGSUsKIw=)
                          2: 08CA5724E2B111E9A73CAB51C4F9AE02.roa (hash: hxOmPvPOn5zrLZ2ksvGMh7mEDCQIxMBDMGA2oTUGfDw=)
                          3: 9D85178EE2AF11E9919C1D4EC4F9AE02.roa (hash: tvGwHBxAQqNeN4uZum6IC7hhXyOo5oDfO91MYyuJgHY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3272 (0xcc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
        Validity
            Not Before: Jan 31 18:06:18 2025 GMT
            Not After : Feb  7 18:06:18 2025 GMT
        Subject: CN=679d111a-3262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:6b:9e:e4:be:1a:67:fb:ac:ed:e1:54:c0:
                    6c:06:23:5e:50:df:12:ca:b3:46:55:96:5f:ca:d4:
                    34:d1:db:4d:31:3b:30:76:06:30:2f:14:74:e0:4c:
                    6a:dd:c3:f0:61:cf:44:21:f6:fb:ad:60:95:a2:d6:
                    71:40:4d:63:bc:85:dd:c7:be:18:8f:18:df:2e:cc:
                    42:e2:4a:d7:55:cb:b3:d8:31:c0:c3:69:72:92:bb:
                    b3:e6:0f:64:5e:cc:7f:b9:0f:f4:fb:f0:68:63:33:
                    64:78:fe:fd:31:02:61:91:4a:01:eb:1c:44:0e:0e:
                    29:1b:ee:50:76:f9:97:f5:29:8f:61:c2:d1:7c:d8:
                    7e:59:2e:9a:43:ad:78:4a:20:df:be:4e:ea:4c:a6:
                    fc:98:c2:9a:82:02:2b:89:b2:27:c5:8a:ad:54:59:
                    d3:71:c8:c8:d4:8c:bb:a5:0a:29:f1:12:05:6b:a8:
                    50:65:4a:cd:26:21:61:9b:27:7b:fc:4a:69:da:0e:
                    29:a5:29:37:0e:c6:25:68:05:fb:21:64:96:04:0e:
                    1c:0e:5a:00:da:9e:d7:87:10:74:b9:64:aa:e6:bf:
                    89:f2:77:55:22:46:fa:06:70:41:20:a7:bd:f3:79:
                    be:95:fe:b1:bc:dd:e1:3b:43:a0:64:e3:ea:53:d9:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0E:38:CB:83:44:D8:54:20:34:E6:75:E6:A5:C7:AE:91:3C:C1:9C
            X509v3 Authority Key Identifier:
                keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:22:70:98:7e:a9:c9:ac:c3:b5:9e:5f:87:3d:48:7e:36:93:
         87:27:08:d3:97:9d:ff:92:15:92:4c:07:6d:26:eb:87:28:6c:
         96:9c:e2:38:c6:e4:3b:14:d7:77:45:f7:85:63:0c:54:fb:4b:
         b6:d5:2c:09:25:2a:e6:0e:6e:cf:37:68:58:94:52:ab:a5:43:
         f7:e2:04:eb:06:d5:e4:09:02:0f:e5:b5:cd:54:2e:06:90:80:
         c6:02:05:39:b9:a0:8c:50:85:2b:3e:54:34:2f:c7:b2:14:a7:
         6f:b5:85:fc:a0:e4:34:fb:54:cd:14:a1:71:a5:83:0a:db:f1:
         8d:b7:2d:c0:54:07:70:f5:50:ab:1e:ee:74:43:5e:f3:30:46:
         94:20:6b:74:a5:86:ae:e5:83:8a:48:71:39:01:c0:d7:04:68:
         dc:a1:e6:d0:da:5d:a4:49:ee:ce:c7:14:f2:6b:c3:de:f4:6c:
         2a:91:63:81:06:67:cd:ca:c8:be:0d:b7:38:06:40:ae:97:d1:
         0d:18:ab:54:ac:8a:16:72:b9:ee:d9:03:f0:ec:93:b7:80:fd:
         65:da:6c:46:b0:f1:b5:2e:52:6d:f3:3b:75:b1:42:a3:a6:27:
         d0:ae:d3:74:b0:9d:d4:67:cf:f8:27:e8:3c:15:c9:e7:e5:31:
         bf:6b:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:29 2025 by rpki-client