Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
File:                     9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json)
Hash identifier:          w1OEAKeMEffxRzXDP0JnPIW0SJH5iGa+HILRbpIF73o=
Subject key identifier:   39:9A:10:23:F9:8E:1D:94:DB:05:CB:C8:E4:B9:A5:40:84:56:68:BA
Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
Certificate issuer:       /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
Manifest number:          E6
Signing time:             Fri 31 Jan 2025 04:46:09 +0000
Manifest this update:     Fri 31 Jan 2025 04:46:09 +0000
Manifest next update:     Fri 07 Feb 2025 04:46:09 +0000
Files and hashes:         1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: CuUmSYPD/T2Oghb8dShKfynTA0mu5HbrmIRTH/Ak2p8=)
                          2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: LRpyZatatX4jc3xI3kv4CvOw5fWMnbigjWqOElPjGoM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
        Validity
            Not Before: Jan 31 04:46:09 2025 GMT
            Not After : Feb  7 04:46:09 2025 GMT
        Subject: CN=679c5591-c79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:32:e1:3d:48:cd:36:8e:9f:46:8a:dd:04:
                    58:16:ff:e0:bd:4d:d6:e1:96:8f:45:be:0a:6a:25:
                    3d:66:0f:44:30:a2:41:25:b5:db:8b:bc:f8:7c:d9:
                    2d:38:f6:ec:a7:32:be:ac:ce:cf:9d:14:2d:8d:28:
                    c5:95:46:3a:06:ca:f6:34:55:b9:e7:d3:61:41:73:
                    73:1f:28:05:21:29:d6:bb:24:43:1f:5d:75:e0:bb:
                    15:23:db:dc:c0:ea:da:92:b8:6c:f8:b2:42:ac:b1:
                    cc:4a:86:4d:05:6d:e5:9f:67:a5:3d:75:7c:2a:b1:
                    cf:4b:6e:3f:e8:b4:e8:c7:30:89:48:9b:47:67:d9:
                    f7:6a:45:5f:fc:c4:72:07:54:b8:3d:c0:bb:ec:c5:
                    4b:f7:37:18:21:d3:ec:08:39:8e:6a:22:51:85:71:
                    f6:d3:1e:18:19:f6:fd:44:4c:24:72:65:49:ab:0f:
                    7f:6f:c0:f4:61:c3:be:2c:d9:ae:a8:73:7d:4b:36:
                    41:77:4e:ee:5b:ce:78:74:fe:a6:3e:8e:36:29:aa:
                    3d:0e:cc:d9:7e:0e:5d:0f:76:0d:cd:80:b8:86:54:
                    86:87:ba:33:c7:24:33:94:60:e9:d6:b3:5f:f1:12:
                    f5:64:f6:e8:2f:97:94:ac:43:29:07:2b:97:25:63:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9A:10:23:F9:8E:1D:94:DB:05:CB:C8:E4:B9:A5:40:84:56:68:BA
            X509v3 Authority Key Identifier:
                keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:39:93:9f:91:73:b0:b1:e0:29:ae:8f:90:00:85:04:1d:da:
         1b:79:fe:32:fc:23:cf:83:9d:6b:13:4a:e8:33:1e:56:b8:aa:
         f4:10:8a:b4:94:d3:ef:5e:7d:77:b3:f8:16:57:66:69:22:3f:
         c2:a6:41:58:e2:1a:33:5f:b4:43:3b:14:1c:b8:5a:c9:0b:85:
         6f:f4:61:ba:c3:f9:93:d0:f7:21:f2:e2:dc:83:e4:5d:29:6b:
         4e:ab:29:2b:2d:a2:98:b2:c4:aa:95:17:8b:0a:9c:2a:3a:a0:
         b6:ec:54:ea:9b:5b:9a:f1:db:00:4b:99:52:a4:a6:49:e1:6d:
         b4:0c:4c:d8:e8:e5:9a:3b:ee:df:63:13:a0:30:94:74:d6:6a:
         ce:c5:24:22:92:a1:a0:9c:64:ca:72:d7:75:90:11:d7:e4:56:
         44:aa:1d:80:86:fc:4d:60:04:69:7e:a2:77:a5:9b:19:a8:07:
         07:a9:bb:0b:81:cf:41:47:cc:4d:bb:bb:5f:8e:0b:c5:a4:78:
         78:ea:9a:43:ce:53:df:cf:1b:89:f9:f8:34:3b:a0:fa:db:95:
         1f:15:92:7f:38:7e:0d:8c:fb:60:b3:72:09:d7:90:4f:f6:87:
         20:84:8b:7b:fb:90:6b:5c:c0:66:2b:da:88:66:42:a7:eb:68:
         67:f3:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:19 2025 by rpki-client