Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
File:                     9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json)
Hash identifier:          4GhPRYljVx1ys/l+Ls5qblrywcHPqeeUsnF2elgKBZE=
Subject key identifier:   1C:30:CE:48:7B:4A:FC:92:C0:FD:94:60:2A:A8:77:E8:8B:3D:A9:E0
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Certificate issuer:       /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial:       0830
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
Manifest number:          1339
Signing time:             Thu 30 Jan 2025 19:16:50 +0000
Manifest this update:     Thu 30 Jan 2025 19:16:50 +0000
Manifest next update:     Thu 06 Feb 2025 19:16:50 +0000
Files and hashes:         1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: orLLNollT/z9IxXwaXT/O/q9eHkQBFMnqmTDnbm20cA=)
                          2: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: kFvHpezndJlXkkRP4OZDHdlgHrDsggzCOPWYJs3g6SU=)
                          3: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: DLeS0zPVo1GXq+y9erAJGv8PPnf+LNimN04EFu+X8DQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
        Validity
            Not Before: Jan 30 19:16:50 2025 GMT
            Not After : Feb  6 19:16:50 2025 GMT
        Subject: CN=679bd022-8f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:cd:32:b4:8e:23:09:90:6a:f2:11:4f:14:
                    ba:43:af:f3:51:ac:86:bc:45:7c:c0:2d:b7:29:e1:
                    23:42:95:85:36:60:0b:31:74:d1:1c:db:f3:ff:e9:
                    cd:bd:b2:27:68:c8:01:b1:6c:d9:b0:73:8c:d6:b1:
                    ef:95:e9:73:6a:1f:94:16:46:96:7d:fc:59:cc:dd:
                    22:5a:2b:4c:84:42:76:48:30:d2:c1:71:2f:21:9e:
                    f6:7d:a8:aa:41:d1:e3:5a:3f:81:b8:d9:ed:1b:9d:
                    86:15:51:71:4c:dd:be:40:71:1b:50:e2:d3:50:d0:
                    02:df:a4:c8:9e:db:ce:ed:8a:d5:7c:98:60:7f:50:
                    ef:6e:4a:03:1c:7e:0d:cd:06:73:ef:87:31:81:38:
                    32:11:ff:4e:ec:87:4b:3f:a5:85:8c:a8:af:3f:35:
                    78:fe:f9:c4:7e:36:fe:89:4c:6b:04:c0:23:ec:bd:
                    63:64:ce:1c:68:ed:49:6f:3c:48:d8:36:e2:a9:74:
                    09:29:de:33:cd:f9:04:7f:61:3f:00:75:1f:4f:f5:
                    5c:36:62:c3:1c:b8:ba:7b:a0:c0:9a:9d:2d:1f:46:
                    75:59:dc:7b:b5:ab:36:6f:21:84:41:96:d8:94:1c:
                    0e:72:a9:2e:a7:80:9e:1b:11:2c:24:c7:fb:84:7f:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:30:CE:48:7B:4A:FC:92:C0:FD:94:60:2A:A8:77:E8:8B:3D:A9:E0
            X509v3 Authority Key Identifier:
                keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b5:06:58:27:ca:83:75:8d:88:fc:1b:8f:79:25:d4:14:67:
         bb:70:a0:53:da:88:cc:b8:28:cb:03:b7:0f:0e:f4:6b:28:dd:
         f4:dd:88:92:65:df:78:06:e8:ea:93:19:d0:8d:4f:35:22:c8:
         41:07:bf:7a:1d:22:d1:46:fa:93:c7:e1:fa:1d:03:01:f0:60:
         52:46:39:9e:6c:8b:a5:6c:bb:f8:fb:34:67:b3:f8:cd:b1:b1:
         4f:45:28:d0:9a:d3:24:ec:12:ca:10:ba:9e:8f:9d:06:0a:46:
         43:78:e4:5a:21:1e:1b:4f:9d:26:06:44:31:51:a8:f4:eb:ce:
         b7:27:ff:6c:45:b0:c3:06:98:a6:f6:7a:15:38:d5:06:d4:3f:
         80:67:75:6c:b6:4d:57:84:a1:b9:27:d4:57:ac:67:03:86:71:
         cd:3d:e6:9e:c5:5d:16:b1:c5:ba:59:9e:33:d3:22:7b:bc:5f:
         0f:c6:26:d7:47:64:2a:39:ac:31:e9:5b:4c:67:2b:29:26:66:
         a0:36:ae:b7:db:51:79:de:07:c8:77:f7:12:cd:54:d5:26:1b:
         a9:b9:b3:e0:09:b6:65:c3:60:a2:ca:ee:17:d7:05:c7:08:ee:
         a6:b2:f0:cd:4f:ec:ec:20:1d:4d:61:64:8a:c3:f5:6a:8a:b5:
         32:e8:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:53:55 2025 by rpki-client