Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft
File:                     DKQH8N1TBy-ooGCBaRkpbmV31oI.mft (raw, json)
Hash identifier:          j15ZTAPTcnqXxDTHxi116a8Ob63YDiMaOiCmABSpGOI=
Subject key identifier:   C6:E3:5D:E3:90:00:71:37:B3:DD:89:F2:60:C5:DA:E3:00:1B:9C:AB
Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82
Certificate issuer:       /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682
Certificate serial:       0C0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft
Manifest number:          0C00
Signing time:             Fri 31 Jan 2025 18:32:09 +0000
Manifest this update:     Fri 31 Jan 2025 18:32:08 +0000
Manifest next update:     Fri 07 Feb 2025 18:32:08 +0000
Files and hashes:         1: DKQH8N1TBy-ooGCBaRkpbmV31oI.crl (hash: qpQRMYqao7if3Snrh+JcuVuLxW/8dw+MfN9/nP9/+KI=)
                          2: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (hash: YiyWCIvNLdPDV222FaDBu9f6FoqEAO4drbd6AsmezW0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3085 (0xc0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682
        Validity
            Not Before: Jan 31 18:32:08 2025 GMT
            Not After : Feb  7 18:32:08 2025 GMT
        Subject: CN=679d1729-be07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:ca:c2:7d:ee:ba:20:8d:e5:49:c1:4d:a3:
                    d4:77:6b:14:d8:ec:d2:79:e1:73:d9:32:36:e5:0a:
                    c5:07:1a:57:69:13:f7:0b:e2:6e:b6:79:49:1b:65:
                    a8:d0:4b:ab:84:6a:83:b9:d9:e0:b6:af:15:2d:31:
                    08:aa:75:53:ff:c0:06:8c:a2:4a:00:60:36:31:7b:
                    1d:4c:1c:ae:9c:51:9f:e4:73:c0:ad:7c:34:3f:c7:
                    4e:72:4c:9c:6a:14:53:5e:29:b2:56:1e:90:14:67:
                    73:58:7a:3a:61:ca:18:a9:d2:30:e2:d4:07:96:f8:
                    f4:33:b5:fe:ec:53:f4:ce:7d:27:a0:16:e9:b8:e1:
                    35:92:98:1c:70:3f:d1:fc:8b:91:e4:86:c9:db:2a:
                    ab:4d:24:0e:5a:97:1c:14:1c:8b:ef:c4:09:c1:63:
                    95:15:cb:2b:a4:16:46:22:05:eb:97:16:ff:70:9c:
                    67:99:e2:50:91:fe:56:bc:a2:ab:b6:aa:be:2f:b4:
                    93:fc:6c:56:98:61:ac:1f:34:88:17:82:6a:60:23:
                    8b:63:e1:20:64:b3:1d:58:c5:8e:27:7a:3e:71:bf:
                    52:42:7a:39:86:9d:9d:00:cd:a8:d4:0d:17:fd:97:
                    93:88:ac:bd:bb:36:cb:65:92:1e:ef:7f:42:83:d6:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E3:5D:E3:90:00:71:37:B3:DD:89:F2:60:C5:DA:E3:00:1B:9C:AB
            X509v3 Authority Key Identifier:
                keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fa:00:d3:48:23:72:9e:17:31:0d:35:ad:70:67:73:cf:a9:
         5d:ee:34:51:a3:90:c7:52:10:df:b5:5f:0c:3a:d0:73:32:bb:
         d1:fb:08:22:43:e1:ab:cd:21:14:65:c2:d6:98:1f:90:9a:15:
         7f:81:55:4c:ce:33:90:ec:fb:14:49:56:ae:22:56:4e:90:24:
         21:25:87:c2:41:ab:83:4e:12:ea:1d:c4:81:cc:39:bd:9e:83:
         af:49:86:fa:25:55:ae:d5:fb:41:1e:86:a7:0f:4c:07:be:bb:
         ad:58:07:7f:78:48:61:f2:7b:b8:cf:c4:42:63:a1:b6:99:f3:
         2b:2f:c0:0a:cd:91:28:a7:59:cd:ea:49:a5:09:77:58:d2:68:
         62:99:6f:f0:c0:ec:3d:c1:85:5b:88:31:a0:cb:d9:46:cc:47:
         ca:26:69:e9:8b:3e:ee:c9:13:1f:36:69:3b:d7:31:2f:88:00:
         f3:cb:50:15:a7:48:02:70:fd:5f:f9:64:20:b5:57:07:d4:b9:
         94:09:34:2e:d2:43:de:4a:e4:30:e7:d4:69:9b:8c:39:d5:95:
         1a:b2:ed:e8:0d:4e:17:70:ea:57:c2:a2:67:97:46:50:69:da:
         c3:d2:42:6a:c5:3e:17:0f:ed:3c:24:03:92:c0:7b:eb:db:4f:
         34:7d:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:55 2025 by rpki-client