Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
File:                     gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json)
Hash identifier:          BDXWDxMKa6aLczEnS9a4wK53PHo2EHR5GMn4sHyBRwo=
Subject key identifier:   9A:01:69:4F:3C:38:40:73:CC:FC:71:42:C1:D7:C0:CB:AC:49:60:41
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Certificate issuer:       /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial:       0628
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
Manifest number:          061F
Signing time:             Thu 30 Jan 2025 22:40:51 +0000
Manifest this update:     Thu 30 Jan 2025 22:40:51 +0000
Manifest next update:     Thu 06 Feb 2025 22:40:51 +0000
Files and hashes:         1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: 5C8biIW/7r3+F1I8hwme/FxPeDEqa+bFOVUs9+GRcRs=)
                          2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: OfUesfXUMR3a7DJ3hJw2td4vk6wNH0IY4SKhrpALFIM=)
                          3: 9BAE526A83FB11EBB159507AC4F9AE02.roa (hash: Ey0osIR23qN0LL5MqG3hp1UnHadLjG/qFcl9KhR11LM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
        Validity
            Not Before: Jan 30 22:40:51 2025 GMT
            Not After : Feb  6 22:40:51 2025 GMT
        Subject: CN=679bfff3-cd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:8f:bf:de:a8:76:74:6c:a5:69:f7:79:75:
                    dc:90:74:1a:87:5a:b3:61:9d:73:be:b0:fe:ce:24:
                    06:81:58:b9:91:6d:07:89:d4:d6:dd:09:bc:37:2d:
                    f6:8f:c9:fa:28:22:70:7d:64:1c:8c:90:01:a7:12:
                    62:5d:0e:3f:27:12:ce:90:a8:1c:a3:a5:63:cc:34:
                    21:47:a9:ae:8e:80:e0:2c:97:a7:a9:a8:ff:2e:19:
                    65:f7:17:88:4e:8e:96:c7:72:9f:f3:f0:a1:ca:11:
                    ad:98:0e:15:dc:9e:6d:01:87:3d:97:32:7f:5c:33:
                    09:c0:16:05:4b:a2:6d:9e:87:48:b9:5d:c3:1a:08:
                    da:f9:89:64:4e:66:3c:26:27:47:27:65:70:b8:b2:
                    a7:4c:cd:b0:be:3d:20:42:86:bc:36:1b:ef:28:a1:
                    17:9c:bc:12:b5:78:e4:ff:d8:64:41:d1:ff:93:02:
                    5e:c7:0b:cf:3c:cd:7f:23:03:ca:3f:44:4a:49:05:
                    bb:04:25:4e:e8:0f:5a:cc:f3:74:05:40:d6:33:14:
                    cb:30:f2:5c:ff:e4:97:2e:1d:e7:fd:42:6d:1a:20:
                    6c:30:5e:99:8d:61:42:25:a1:5d:7a:e1:1c:47:e8:
                    3d:a9:f7:9c:e1:60:91:36:38:d8:68:b3:fa:5e:12:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:01:69:4F:3C:38:40:73:CC:FC:71:42:C1:D7:C0:CB:AC:49:60:41
            X509v3 Authority Key Identifier:
                keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:7f:47:57:a7:0a:97:0f:87:35:83:74:23:a1:1c:5a:81:
         e5:88:ab:7f:7b:d3:20:a6:49:ac:11:73:bb:fa:96:c4:d8:3f:
         d5:91:eb:e6:71:76:0d:55:7d:0c:1b:4b:1a:80:30:3c:86:df:
         c9:0e:3c:81:75:2f:27:ec:72:37:3d:b8:03:5c:bc:e0:52:ec:
         40:f4:7a:37:ad:f8:f5:d0:88:8e:d2:bb:b6:b6:cc:b1:05:a1:
         78:29:af:02:ea:ab:8a:cc:83:b2:ae:18:5f:f7:2f:44:43:de:
         c4:d3:81:18:15:27:ec:1f:0f:37:1e:3f:bf:04:7f:76:6c:46:
         19:12:c8:aa:e4:1f:62:51:61:f2:e6:f0:b1:1b:da:b1:d6:3b:
         46:90:8a:f6:63:c1:9f:ab:05:cd:c9:4d:72:78:9a:c5:ea:63:
         40:9a:06:2a:81:38:13:ff:0f:5a:51:07:b3:ef:55:86:3a:62:
         f1:c8:48:ee:59:83:b5:00:0a:d3:4e:a8:83:61:4c:ea:88:9d:
         bb:36:25:d4:ed:ef:7b:af:28:87:35:30:2b:f1:af:f4:47:73:
         64:8d:2a:6f:c7:ff:32:e5:0a:76:38:4b:10:f3:d4:af:be:6f:
         8b:04:31:13:4d:b9:41:2f:ad:8b:9c:4a:dc:06:86:81:da:ed:
         78:0f:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:35 2025 by rpki-client