Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
File:                     yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json)
Hash identifier:          S/UH17TjBBanPBxq2ovRl05dOQIBM2VGvZDkSdn48Rc=
Subject key identifier:   C6:2D:71:BA:D0:93:EB:5B:7D:00:B0:98:E5:82:8A:BD:B3:ED:5F:24
Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
Certificate issuer:       /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
Manifest number:          7A
Signing time:             Fri 31 Jan 2025 05:49:33 +0000
Manifest this update:     Fri 31 Jan 2025 05:49:33 +0000
Manifest next update:     Fri 07 Feb 2025 05:49:33 +0000
Files and hashes:         1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: DT32Cgg29BDmHUk9E+KkPq4sFNkz+uym+9yuKzzt0rA=)
                          2: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: xTsY4iW+fb2o0N8YA+SXz8YOTeNUYyhxpihIk2CiRFI=)
                          3: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: 5AufB2RsG7jdJMojc2DVF486w/PxZ39VMbcx9j28U7E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
        Validity
            Not Before: Jan 31 05:49:33 2025 GMT
            Not After : Feb  7 05:49:33 2025 GMT
        Subject: CN=679c646d-78d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:98:85:ae:7e:b8:e2:03:c1:46:e4:11:72:
                    d4:b6:a9:83:3f:6b:47:30:d6:db:da:c4:be:25:b1:
                    8c:df:a2:fc:fe:a4:97:7b:08:6f:df:ee:39:1f:e8:
                    28:9c:53:47:65:80:43:a7:d7:dd:c0:e6:d0:c4:e6:
                    7a:93:c3:6f:33:5a:66:9d:2f:e4:32:67:a1:07:9e:
                    87:0e:a3:70:52:71:ba:06:86:2b:f1:63:99:42:45:
                    1a:88:d7:ee:ea:cc:18:d9:48:61:e1:57:9b:96:5a:
                    e7:ac:fe:52:a1:94:de:7e:ba:4d:f3:87:f8:a4:59:
                    23:d1:ad:5c:f9:be:a4:11:67:04:79:1a:b8:bb:56:
                    60:4b:2d:6c:99:17:3e:70:7b:5d:13:62:b7:4d:42:
                    8a:31:27:4a:9f:53:05:0c:f2:06:bd:94:3d:8e:0e:
                    00:d8:a7:ca:27:41:c8:38:9b:6c:0a:41:25:84:7b:
                    8f:71:7e:93:3f:2d:20:33:bd:69:f8:b6:37:12:ef:
                    8f:31:e4:b7:55:cc:10:0a:1a:d7:12:57:23:92:36:
                    43:02:e2:68:80:82:9a:44:3f:89:cb:01:86:a8:c5:
                    25:d3:b8:88:4f:91:a1:25:03:2e:60:20:6c:56:34:
                    b4:33:f8:d4:6f:6f:82:ef:9f:8d:21:42:83:f6:23:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2D:71:BA:D0:93:EB:5B:7D:00:B0:98:E5:82:8A:BD:B3:ED:5F:24
            X509v3 Authority Key Identifier:
                keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:31:49:72:06:a4:8b:0b:87:15:0d:7f:df:d1:33:29:1c:d9:
         e0:bb:49:05:41:e8:48:b8:b2:ee:c2:54:3d:5d:12:82:ac:68:
         3f:dc:1f:60:2c:20:b0:28:ba:0e:a0:69:7c:d3:fb:65:90:de:
         2a:f0:34:c9:67:8d:6a:cb:51:40:b0:c6:ec:ee:47:c0:a4:c4:
         4d:48:05:50:e5:d0:ee:ff:b5:30:ef:b6:0b:72:74:a5:82:2c:
         a6:8a:97:13:9e:b2:42:8e:c5:50:ff:f2:b1:b1:23:4d:f6:ff:
         e3:cc:a6:3a:14:0c:2c:60:d7:bd:bf:be:c7:26:a0:cf:40:f2:
         f6:4c:71:6f:a1:19:d4:37:96:29:72:ba:81:14:d9:be:e7:06:
         a8:6b:f8:83:85:c5:30:46:2d:cf:26:6e:75:33:5c:b9:bd:dc:
         6a:59:9f:f1:1e:b3:63:cf:e6:83:85:51:1a:f9:e1:56:49:df:
         23:ec:e0:3d:b3:3c:79:be:79:cf:ea:7c:12:f7:27:6c:6b:39:
         56:02:5f:e0:2d:68:22:a0:ee:20:d9:5f:64:83:fb:3d:5d:7c:
         88:68:6e:c4:0d:af:6d:a6:65:9d:6a:4c:1a:8f:2e:09:28:95:
         b6:93:c8:64:18:42:a7:15:3f:69:4a:bc:ae:7a:f0:19:be:4e:
         24:ed:aa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:44 2025 by rpki-client