Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
File:                     4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json)
Hash identifier:          0KIHsOh7/M1tQb1lN8aUI9ic5rSleOzHqetSwEqx2vw=
Subject key identifier:   6D:F1:99:36:1A:3F:85:F6:A6:77:E6:44:66:8D:7B:0C:74:99:C7:91
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Certificate issuer:       /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial:       075B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
Manifest number:          0751
Signing time:             Thu 30 Jan 2025 21:31:41 +0000
Manifest this update:     Thu 30 Jan 2025 21:31:40 +0000
Manifest next update:     Thu 06 Feb 2025 21:31:40 +0000
Files and hashes:         1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: t6+nUFylmhZ/FTtZmvvTCR7kzAp38ZqUJq3EOGfkbcg=)
                          2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: BUdadXM84LZqg6dcPh4b0sJ5Cd4Jg9PJnJrm+wRnwP8=)
                          3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: GwT8wJjuiJq3ptd4ORrNmt479yde0NY4ozRqZ/YvpGw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
        Validity
            Not Before: Jan 30 21:31:40 2025 GMT
            Not After : Feb  6 21:31:40 2025 GMT
        Subject: CN=679befbd-562a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:48:e5:2b:57:f4:80:65:78:ad:28:2e:69:a5:
                    cc:a1:3b:10:1a:54:3b:17:86:44:92:b7:8e:78:27:
                    3a:a0:fc:e5:c7:0b:d9:92:f3:95:3e:37:4e:15:b2:
                    62:52:78:d2:e2:4a:96:76:71:5b:12:6e:3f:8a:15:
                    41:a8:e0:e6:24:b2:d0:7f:5d:57:f0:78:8f:ee:41:
                    75:42:d2:4f:a3:2d:dd:19:35:a1:d4:7b:ab:df:d8:
                    36:b0:54:5e:8f:4a:e5:7c:61:6a:a5:bd:bc:05:32:
                    c9:d7:3f:b8:2e:16:00:c9:9f:d0:76:7f:5b:27:08:
                    c1:0f:12:13:4c:cb:a4:a0:95:5b:12:ee:c2:d4:86:
                    c2:f7:56:83:66:96:62:58:44:a2:6e:67:21:91:b5:
                    c8:41:93:64:b3:a2:b2:05:dd:ec:65:a9:b8:81:d4:
                    da:14:49:2c:a8:fc:e6:99:6e:c4:3d:da:de:75:89:
                    1c:f6:b5:b7:65:10:bb:5f:f6:7c:54:6c:92:88:66:
                    2b:03:3e:aa:4d:6b:5b:16:00:8e:3d:ba:f5:e8:c9:
                    41:89:0c:bf:02:91:d6:a5:41:43:ac:7f:57:e8:36:
                    d4:07:06:72:cf:4c:e8:36:58:e3:46:54:47:71:69:
                    4e:78:fe:eb:a3:90:7f:01:47:28:b3:fd:b5:52:8f:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:99:36:1A:3F:85:F6:A6:77:E6:44:66:8D:7B:0C:74:99:C7:91
            X509v3 Authority Key Identifier:
                keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:cb:a7:fd:e6:ad:97:d5:a6:9b:29:fb:9b:09:93:32:74:
         b9:0d:3c:26:41:e4:ba:aa:be:3b:bd:1b:33:0b:ac:4a:1c:b3:
         c1:0f:64:0a:c3:f6:21:71:f1:40:be:9a:1b:a4:1c:92:f2:e0:
         27:ae:11:b7:35:10:cf:ff:be:ce:b3:2b:5c:c4:4e:2f:0a:31:
         c2:d4:19:f6:27:f9:1f:e7:d4:ed:e9:b4:ad:11:c6:2a:c6:80:
         c0:17:b3:e5:a6:bc:a4:7e:33:2a:60:0c:93:2e:68:27:69:3c:
         ac:66:a6:6e:4e:33:b8:af:c5:7a:4b:91:75:d1:ec:42:fa:79:
         2b:a8:47:e4:aa:d6:94:c9:7c:62:00:cc:20:ed:a1:12:7f:55:
         0b:f9:a4:e8:0b:fe:68:b6:66:a1:48:9a:3f:10:83:56:1e:d5:
         47:17:b3:62:1b:68:ce:9f:c9:31:89:43:78:05:7e:29:c1:03:
         7f:7b:df:4e:15:11:18:8b:4d:84:54:65:04:92:d2:09:6c:3d:
         81:ce:5f:94:86:12:5f:27:bf:2e:31:31:ca:23:34:74:ed:36:
         57:44:a7:b9:42:c8:5a:67:b2:36:40:2a:5e:72:b9:07:ed:a3:
         61:3a:3c:08:d3:b0:f2:95:55:ee:46:bc:8f:bf:6f:15:85:18:
         90:51:dd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:01 2025 by rpki-client