Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
File:                     ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json)
Hash identifier:          y8uLuwlxZuz5xnlN5jCKvVzlb7Lxyo9epvl49a8BnT8=
Subject key identifier:   60:B8:11:45:E0:82:ED:14:80:BB:A0:4C:EB:73:EA:0C:2C:3E:FF:F6
Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
Certificate issuer:       /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Certificate serial:       07D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
Manifest number:          07C4
Signing time:             Thu 30 Jan 2025 21:04:34 +0000
Manifest this update:     Thu 30 Jan 2025 21:04:34 +0000
Manifest next update:     Thu 06 Feb 2025 21:04:34 +0000
Files and hashes:         1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: YjjZbaV85PK6UlmrseleAjCK4yeEd/kPTNYhyr83cAY=)
                          2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: 7SJtSkXKrhgxiJ/u+ScdWT/CZ8bW5ltRvm0xbyH8/2Q=)
                          3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 9WsPzCvsd/JuejjAiVSpINcZRZVtqlKA7kdOF+8fdUE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2000 (0x7d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
        Validity
            Not Before: Jan 30 21:04:34 2025 GMT
            Not After : Feb  6 21:04:34 2025 GMT
        Subject: CN=679be962-f71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:fa:5b:ad:e7:fa:cd:03:fd:d4:39:a4:fa:
                    8c:e8:57:28:31:86:a8:ae:36:02:1b:7d:43:69:89:
                    57:b8:8a:b2:37:32:01:55:81:a8:63:89:8f:a4:e3:
                    bc:4b:34:cd:20:fc:cb:69:93:cd:44:05:f6:f5:db:
                    7a:b1:11:58:4c:74:15:32:84:88:cd:6a:77:ce:8f:
                    84:db:bd:bb:62:62:0d:9d:5e:4a:56:30:c2:ec:d7:
                    42:b7:fd:21:cf:fa:45:f9:cc:d4:49:39:da:be:f2:
                    48:67:21:7c:2a:c1:a4:e5:2d:b4:65:86:c4:27:6e:
                    b2:63:41:fc:44:db:d0:15:43:cb:d5:6d:4c:ae:88:
                    a9:b2:0c:14:a3:9b:bd:e3:99:80:0c:a4:69:d6:32:
                    4f:61:18:13:a5:8a:72:1b:71:15:f9:11:36:23:7a:
                    ee:fc:ea:e7:c0:c3:fd:6e:75:de:bd:e2:a6:78:87:
                    98:35:49:ce:7e:15:56:1c:b9:0a:cd:0d:05:a0:99:
                    cc:3f:3a:47:3b:47:57:82:5a:66:53:01:01:00:39:
                    25:47:ae:52:5a:c1:43:88:39:23:0b:86:00:46:d1:
                    e8:c5:71:3a:82:be:0c:5b:97:53:54:5f:04:ac:8e:
                    5a:c7:b7:ee:04:1b:8e:da:49:28:ee:a9:b2:83:a2:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B8:11:45:E0:82:ED:14:80:BB:A0:4C:EB:73:EA:0C:2C:3E:FF:F6
            X509v3 Authority Key Identifier:
                keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:98:df:96:d9:ee:6b:48:85:71:ff:c1:21:3d:f1:a9:f8:
         34:49:93:3a:35:4c:6b:7c:46:ad:09:c9:67:37:11:99:b5:9f:
         53:9b:ba:9b:52:6c:57:d5:35:6f:10:45:f4:08:bb:ee:a4:5e:
         e2:9a:d9:bb:7c:fd:d0:07:4d:d3:b9:1f:23:71:39:de:fc:8e:
         07:af:d3:81:01:61:e7:31:f8:a6:f9:9b:f5:2f:21:30:5e:4f:
         de:79:04:00:3b:38:38:81:4c:fe:a6:21:68:38:90:da:ce:06:
         f7:5e:f3:ad:37:55:cd:87:ec:d0:7d:3c:13:95:45:e2:c9:53:
         02:e8:69:15:fd:52:d9:48:46:56:d2:a6:45:8a:04:e8:35:de:
         d1:93:37:a8:af:a4:95:fd:60:f1:27:50:03:58:c0:3b:9e:0a:
         16:71:fb:5e:31:c8:86:63:10:3e:e7:67:ef:e2:a8:49:3b:cb:
         7e:cf:b2:6d:b9:ef:75:23:47:cd:8b:bb:86:d5:55:96:78:5c:
         07:18:4e:d9:35:c6:37:0d:32:5a:dd:2e:68:14:36:0c:68:90:
         bb:17:35:cc:5a:fa:15:51:17:b5:ea:33:fc:a9:57:35:6f:fe:
         f2:25:22:6f:40:fd:aa:cd:ef:4c:d7:91:1b:59:31:be:06:b5:
         79:5f:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:10:09 2025 by rpki-client