Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
File:                     NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json)
Hash identifier:          9tbhOZXS0n0oP2ikmM0fA2ws7oBgFDS2jtTV3MwJjWE=
Subject key identifier:   23:E6:0A:FB:03:06:D1:B7:79:F5:8C:32:BE:8E:00:F0:D4:2B:13:EF
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Certificate issuer:       /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial:       0304
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
Manifest number:          0300
Signing time:             Fri 31 Jan 2025 01:19:02 +0000
Manifest this update:     Fri 31 Jan 2025 01:19:02 +0000
Manifest next update:     Fri 07 Feb 2025 01:19:02 +0000
Files and hashes:         1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: XaQ1TxNGbynq5nN10+UMtepIpi6+MC45yk3PblhF9vY=)
                          2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: WBPEzwrRJmEQao59jsv0p03EV57EGiVD2LS1uQaSE9s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
        Validity
            Not Before: Jan 31 01:19:02 2025 GMT
            Not After : Feb  7 01:19:02 2025 GMT
        Subject: CN=679c2506-723d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:e6:52:1f:78:e7:bf:3e:86:59:e3:0e:55:
                    c3:f0:4d:08:2c:f1:fb:b3:6f:b0:0d:4d:4a:ee:03:
                    6d:3c:26:7d:56:99:e1:ed:0b:cc:e0:34:6a:a7:3a:
                    f8:82:8d:99:99:de:0c:c7:0e:34:f6:64:d1:fd:65:
                    eb:f9:e7:23:f7:30:40:40:4c:1c:0a:ee:1e:80:bb:
                    ec:30:dc:53:d8:5c:e1:f5:33:d5:ad:25:08:31:fc:
                    ce:35:7d:3f:b4:60:41:03:59:07:88:41:0a:09:fd:
                    cb:17:19:8a:40:27:55:0c:19:1c:0d:fe:75:b9:6b:
                    9e:a1:a1:8b:78:c8:33:aa:27:0d:1b:d4:36:de:d4:
                    e2:a4:0e:4d:76:16:57:23:59:87:13:a6:f6:cb:06:
                    2e:6b:e0:b9:db:80:c1:0e:9d:a3:b5:04:0e:03:3f:
                    b1:ca:10:cd:5d:51:7d:70:3b:55:5f:2f:2a:16:07:
                    7c:39:b7:e6:3c:fc:db:7e:21:ad:46:5c:00:17:67:
                    2d:ad:2f:fc:f0:03:e4:5a:1b:8c:f2:03:8c:3b:4e:
                    5c:2c:74:cf:93:d7:5b:06:b8:62:9b:43:fd:34:45:
                    eb:11:92:c3:93:55:25:45:3f:5e:54:3c:96:d4:95:
                    cc:d1:eb:d4:cf:f3:87:ef:7d:0b:56:6f:1d:d9:d6:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:0A:FB:03:06:D1:B7:79:F5:8C:32:BE:8E:00:F0:D4:2B:13:EF
            X509v3 Authority Key Identifier:
                keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ec:9a:fe:17:05:46:ba:11:28:20:96:9b:83:6e:8b:a7:db:
         ff:a9:3b:71:03:1c:51:65:ab:18:21:e5:21:6a:5b:bb:c1:4d:
         77:7d:22:6a:96:a0:48:92:f1:ad:2b:73:a1:6e:ff:92:f9:66:
         8a:84:da:f0:26:68:09:67:fc:50:9b:1e:a3:53:86:6b:ff:56:
         1a:54:4e:84:86:49:23:bf:a1:57:6c:aa:92:e7:33:e0:c1:1a:
         04:98:e7:fd:1c:ea:7d:fe:d0:d8:2c:f7:fa:54:aa:4e:c8:8a:
         95:fa:a2:ff:8c:9c:a6:85:8d:5b:09:0f:66:d2:0f:4a:d8:c0:
         df:78:6c:56:ae:48:9b:67:f7:58:f2:57:7f:09:02:ff:31:e1:
         a3:41:f3:a7:7e:c0:b4:6d:3f:72:77:c1:52:9c:f2:12:82:a5:
         1f:a3:3e:70:08:96:f2:3d:30:95:46:9a:97:e8:22:db:6d:2b:
         c8:39:59:f2:97:59:71:b3:c9:c2:bc:b7:b8:1e:c1:24:12:29:
         97:2b:a8:98:45:e7:d2:a0:0d:aa:19:fe:78:93:87:04:2d:5c:
         e0:de:6c:f4:58:be:de:85:b3:3b:8a:ec:3b:43:e3:fa:a6:13:
         ac:cd:ac:9e:5b:3a:f2:59:1c:b3:b7:86:7f:99:20:91:a4:11:
         f6:de:b7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:04 2025 by rpki-client