Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft
File:                     _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json)
Hash identifier:          LJaDjT4J67Mw2mzq/HXAYHCccas0lphSuVhRaD0rfLI=
Subject key identifier:   A3:17:57:33:F0:C7:26:15:88:8D:78:85:BD:BC:36:69:1D:5A:9B:C8
Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05
Certificate issuer:       /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905
Certificate serial:       0A51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft
Manifest number:          0A43
Signing time:             Thu 30 Jan 2025 19:51:29 +0000
Manifest this update:     Thu 30 Jan 2025 19:51:28 +0000
Manifest next update:     Thu 06 Feb 2025 19:51:28 +0000
Files and hashes:         1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: AGpjDsVJYbCOCYTG+EhQwCCHkz1/wwEUpNtWThiYsVk=)
                          2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905
        Validity
            Not Before: Jan 30 19:51:28 2025 GMT
            Not After : Feb  6 19:51:28 2025 GMT
        Subject: CN=679bd841-7611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:28:29:80:06:f1:4e:02:92:6c:1a:d7:d4:
                    74:c1:92:ac:0a:dc:4a:0e:97:63:cc:06:c5:82:e8:
                    3e:ec:50:5f:36:26:fc:c6:3e:be:0a:2e:c9:7e:3f:
                    9a:60:92:49:fb:00:11:6f:d6:3d:23:30:da:f3:50:
                    ba:9f:71:05:ac:8b:9f:7b:08:9f:e1:40:e7:75:dd:
                    c1:33:d5:c9:05:98:8e:40:55:81:1f:0c:f3:6a:91:
                    c9:aa:53:ea:68:65:b5:9b:f4:63:cb:4d:c0:9b:10:
                    46:e1:3a:6f:e3:c2:dd:cd:29:bc:ed:50:61:c0:10:
                    6b:77:df:f8:a2:68:cf:f1:e4:c5:39:bd:cd:59:00:
                    c8:4f:bf:3a:2c:2a:5b:d0:99:e3:f0:02:53:cc:55:
                    70:2f:c3:c1:a1:b6:8c:7e:de:88:5f:82:b5:4d:b6:
                    7e:f0:c9:59:21:47:ed:f7:eb:99:8e:a4:e9:cf:3a:
                    2d:f2:44:91:fb:5b:c9:be:e4:a0:ed:9f:5a:56:f1:
                    7d:a0:06:a5:87:51:b3:0a:dd:41:4f:b8:ff:95:6e:
                    ec:13:e6:2e:05:90:e3:35:cd:ce:7f:e3:d3:2e:83:
                    86:8e:08:24:36:8c:52:05:83:f0:65:3e:94:e5:3a:
                    52:0c:7c:8f:1a:7c:ab:3d:5c:d3:5a:2a:09:e3:25:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:17:57:33:F0:C7:26:15:88:8D:78:85:BD:BC:36:69:1D:5A:9B:C8
            X509v3 Authority Key Identifier:
                keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f9:7f:2c:6e:ac:6c:9e:1c:9a:b2:58:05:d4:8c:1a:ae:57:
         08:72:dc:44:f6:35:00:35:9a:9b:40:f7:3c:bd:e4:8c:3b:42:
         a2:a0:cb:f2:03:38:3b:cc:af:17:67:7b:81:57:a8:ed:15:14:
         29:00:94:9a:34:10:6d:87:2e:19:97:f7:c5:36:6d:a5:72:2b:
         b7:e1:0a:47:8c:93:9a:52:b5:f9:99:b4:bb:b1:16:75:78:b3:
         03:7d:15:53:d2:97:9d:e4:b6:e3:01:83:45:6c:4a:d4:9a:59:
         75:e0:37:1a:da:af:8b:b6:6e:25:21:22:98:41:ba:44:33:d6:
         20:4c:61:fb:08:11:c9:6f:04:3e:dd:80:59:34:c0:bc:70:01:
         9f:ac:25:a2:ab:6e:9d:e9:17:d8:be:59:68:ee:43:80:fe:ed:
         b1:dd:58:51:bb:07:a3:90:79:19:5e:5a:00:81:f6:c1:c8:c9:
         fe:b8:d6:dc:b7:03:bd:90:ec:3b:c8:df:2c:22:09:10:98:41:
         a8:32:46:2a:64:5e:1c:2d:38:d5:1b:4b:9c:9f:1d:18:79:78:
         ec:eb:eb:53:54:6e:14:25:c0:7e:fd:56:da:63:d4:75:c1:8a:
         9d:06:9a:ef:b7:b2:04:eb:72:16:3a:19:cc:ca:44:bf:6f:c5:
         33:1b:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:53 2025 by rpki-client