Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
File:                     29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json)
Hash identifier:          MiO3QD8+bR5o6YrMMhXF2thHvPGvJ7+leCK6OkfgN5E=
Subject key identifier:   36:5B:FC:9F:ED:CC:D6:A8:EF:55:56:09:98:AD:A3:83:4E:1B:99:62
Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
Certificate issuer:       /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
Manifest number:          E1
Signing time:             Fri 31 Jan 2025 04:37:19 +0000
Manifest this update:     Fri 31 Jan 2025 04:37:18 +0000
Manifest next update:     Fri 07 Feb 2025 04:37:18 +0000
Files and hashes:         1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: kVMzbmnZHd7nPKQ2kWVMoHH1bGpzbRJcKvUFemc67Y4=)
                          2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: FS0NZn6HmMNUVE243zK4MTv8yDH9emQLgpWFOPvCnxU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
        Validity
            Not Before: Jan 31 04:37:18 2025 GMT
            Not After : Feb  7 04:37:18 2025 GMT
        Subject: CN=679c537e-872a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:4b:d9:26:94:a7:cc:2a:57:31:c8:5e:32:
                    04:c7:b4:b5:77:97:2a:f5:ec:bb:d9:c5:58:32:d7:
                    18:18:cb:ce:bc:ff:de:71:cd:6f:fd:e8:a0:76:c9:
                    b8:18:6d:dc:3b:c7:34:ec:06:88:38:d6:04:6d:9b:
                    ab:f3:e6:c3:52:74:43:2e:83:16:a4:6c:66:c9:e7:
                    1a:46:f3:97:8e:4d:16:9f:1a:b3:f8:34:ca:f5:74:
                    4c:a2:9e:a1:3a:99:87:c8:e1:76:70:19:c2:fe:cb:
                    6e:30:20:00:e2:5c:bd:f3:53:77:f3:5d:d6:06:27:
                    ae:1c:de:0b:8c:39:30:dd:ef:bf:fc:19:30:79:89:
                    c3:8b:cf:ff:77:a8:61:9c:a7:54:f2:c3:4e:0c:0c:
                    c6:ee:8f:a9:8e:63:2b:83:82:81:00:92:f4:28:15:
                    78:14:47:90:f7:ba:0d:14:33:1e:f4:d3:9c:af:6b:
                    55:44:c0:f5:f1:23:29:f9:d2:8f:bc:40:e1:0d:8a:
                    8b:f6:bd:99:27:22:6c:4e:98:45:6a:df:48:8c:e8:
                    1e:1b:b2:b9:a2:fa:3b:a4:75:02:6d:66:45:49:e2:
                    dc:03:20:b4:7a:c0:6a:2a:64:71:6d:06:ad:8e:67:
                    7a:01:de:92:48:cf:8a:78:91:62:fb:84:0e:fd:f4:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5B:FC:9F:ED:CC:D6:A8:EF:55:56:09:98:AD:A3:83:4E:1B:99:62
            X509v3 Authority Key Identifier:
                keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:f3:5a:69:58:51:c9:18:3c:78:52:8a:4e:13:04:d2:7c:
         61:6a:e4:9e:b8:71:82:c0:83:b5:56:ed:02:3d:08:ed:61:9a:
         e0:38:1e:f4:8b:9b:c3:2e:16:c2:9b:14:92:b0:00:93:c8:af:
         ea:10:06:f8:9b:51:1c:3b:ac:21:40:c3:e8:ba:b9:9b:c1:db:
         78:bd:e0:cf:8d:32:19:0c:12:95:11:a4:f2:7c:95:d7:82:ec:
         de:be:b1:1b:8a:2a:fa:95:61:cd:2d:cf:96:de:c7:7f:f8:43:
         2e:ae:b8:50:f0:68:59:24:9c:a5:45:54:e9:a9:f0:66:cd:b2:
         85:39:91:cd:13:3c:46:05:3f:74:b5:a7:13:06:d3:db:08:93:
         4d:05:f1:16:d2:57:14:25:c2:e2:84:3e:cb:b2:06:90:2f:45:
         95:ea:3f:fd:14:ec:c3:14:ab:91:73:7d:dc:56:bc:92:19:59:
         45:aa:57:fb:ec:77:c3:47:65:a4:96:d2:38:15:95:a2:ec:8d:
         ea:09:cf:eb:aa:86:2d:92:98:26:49:07:72:0c:97:fa:94:3d:
         6a:69:38:ce:57:d9:ea:8f:98:1a:8a:9b:85:2b:80:12:fc:f7:
         c8:8d:5e:63:58:f3:7b:a3:dd:64:de:50:bc:e8:c5:72:2d:5c:
         bf:05:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:17 2025 by rpki-client