Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
File:                     ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json)
Hash identifier:          NLAnmQm4Pc7C1fZrkP85mZyExs0q+2b9fKKppHNadBU=
Subject key identifier:   E0:D4:03:C2:CD:44:7C:63:F0:67:F7:EF:15:51:36:57:F1:47:A9:D1
Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7
Certificate issuer:       /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
Certificate serial:       3493
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
Manifest number:          3473
Signing time:             Fri 31 Jan 2025 14:46:46 +0000
Manifest this update:     Fri 31 Jan 2025 14:46:46 +0000
Manifest next update:     Fri 07 Feb 2025 14:46:46 +0000
Files and hashes:         1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: lA7x9yORKr6xQSQbSp1ZlXafQG4fx4u7FEOf9uScMTk=)
                          2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: Gk1l67dg5FNqnZfalpzkFwLJz8/jIZg966YRagGgh6M=)
                          3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: hQzBarqE7y1xhvVkKj4n1pe4CbqvYvdULHNvM+oOS2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13459 (0x3493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
        Validity
            Not Before: Jan 31 14:46:46 2025 GMT
            Not After : Feb  7 14:46:46 2025 GMT
        Subject: CN=679ce256-d194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:2f:2d:59:2a:76:55:34:83:0a:21:3c:6b:
                    ae:42:ca:86:18:6c:5c:bc:3b:49:94:9e:c3:10:9f:
                    5f:80:58:03:a9:71:0b:89:92:92:61:7f:93:e1:53:
                    bf:75:70:bf:fa:94:1c:a5:2f:31:7a:d4:cf:82:d5:
                    36:3b:50:d1:41:15:a9:69:70:9e:07:24:93:9b:91:
                    2e:41:3a:0c:ac:07:be:c0:19:c2:30:95:c7:58:42:
                    34:37:cc:5b:63:b7:79:df:47:7d:44:28:d8:f1:cc:
                    36:01:9d:f2:28:c9:4d:a0:cb:30:cc:6b:53:75:b6:
                    c1:0d:7d:b0:b1:4f:08:21:29:ef:bd:06:af:2c:9c:
                    fe:5a:a6:7a:a6:19:4d:b0:f3:3e:48:d9:c5:71:30:
                    05:80:96:de:56:ad:c5:06:99:56:b1:11:2b:b1:53:
                    c7:45:73:dc:66:bc:a7:e7:a2:3d:1b:44:f9:34:28:
                    cb:9c:d4:b9:28:3d:6e:4f:9d:1e:cf:a0:dc:eb:4a:
                    a5:33:7a:a3:80:3c:16:79:55:c1:f3:0a:24:4f:bd:
                    54:49:82:f6:83:02:cf:1d:6d:e6:e3:aa:59:1a:db:
                    fd:3e:b7:14:97:4f:36:36:64:51:f8:6b:b7:60:bf:
                    5d:a8:7e:d8:d3:01:56:8c:d1:ac:25:1f:7e:6b:94:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D4:03:C2:CD:44:7C:63:F0:67:F7:EF:15:51:36:57:F1:47:A9:D1
            X509v3 Authority Key Identifier:
                keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:f8:cb:0f:b5:17:2d:11:4c:20:63:3c:5c:f9:d0:eb:99:
         2d:f0:58:02:5a:39:49:7e:9f:71:a0:4a:fc:c5:3e:05:32:64:
         64:f0:65:82:a7:1b:0b:7a:f6:ec:b4:a1:c3:60:2c:cd:53:97:
         fd:35:e1:61:de:10:99:40:4c:4e:23:ad:d6:05:ba:93:4b:33:
         7c:4c:b3:b9:be:45:97:10:42:1b:61:c4:48:1c:a6:c5:8c:90:
         14:50:27:19:f6:95:46:23:59:93:cb:c9:6d:b5:02:8f:86:44:
         1e:14:04:fb:0f:70:22:bf:c3:0a:38:3a:7d:84:96:70:8a:69:
         b8:db:8a:3e:fe:4c:cc:40:ce:c7:f9:c8:07:82:66:ba:d2:2d:
         f8:5c:35:cc:0a:dc:09:df:fb:f5:d7:72:f7:bd:d6:bd:96:f3:
         62:6a:1f:c2:15:1d:e1:5c:8f:b2:1e:cf:f6:ab:f3:91:82:e8:
         20:b4:48:92:0d:c7:84:1c:3c:b4:99:58:d8:7c:fb:ee:6b:d7:
         e0:34:6e:b1:27:76:01:67:0a:c1:69:51:d2:2f:aa:07:27:1f:
         e7:97:26:92:83:78:99:f5:9a:51:b4:67:1c:e3:d5:b1:91:cc:
         c5:2a:36:65:c5:fc:6d:43:8b:f3:73:60:ae:c5:8e:89:2c:06:
         ef:87:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:35 2025 by rpki-client