Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
File:                     N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json)
Hash identifier:          80VMlDmZGgVKq8RN66+LmDRWrYPlKLB/vloLqbgbytA=
Subject key identifier:   F9:04:E6:6B:78:50:FB:60:A9:26:52:A1:91:25:D2:F5:E9:8D:A4:CC
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Certificate issuer:       /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
Manifest number:          016B
Signing time:             Fri 31 Jan 2025 03:10:29 +0000
Manifest this update:     Fri 31 Jan 2025 03:10:28 +0000
Manifest next update:     Fri 07 Feb 2025 03:10:28 +0000
Files and hashes:         1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: W3VbZJ9ywngws7SzZF1q2NfO6F8P8ypFyoJEHqQ+JuA=)
                          2: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: iTyxeo6fdLY6zYqk38GBrAnxGbLRbpbsfA4HbHTb8W0=)
                          3: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: f/RigGqDQyE5cV9YFdD69wWLUqqtBXkgZ1bqVEllexY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
        Validity
            Not Before: Jan 31 03:10:28 2025 GMT
            Not After : Feb  7 03:10:28 2025 GMT
        Subject: CN=679c3f25-0281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:fb:c4:29:89:86:5d:3c:57:75:d4:0e:18:
                    d2:f0:be:67:cc:61:ef:13:9c:ff:50:4f:4d:c2:d8:
                    65:c8:50:da:15:8a:ee:d2:21:90:e9:07:16:ff:d9:
                    25:98:0e:b5:ce:3d:08:78:7b:4a:5b:ef:f3:e9:d8:
                    e8:e7:16:a7:98:21:5b:af:8d:4b:2e:37:19:a3:35:
                    7b:4a:4a:30:fc:40:3a:d1:2b:b6:2d:78:26:2f:5b:
                    ff:a9:aa:08:63:51:bb:3e:4b:cf:98:74:3a:a6:49:
                    12:04:6e:17:fc:df:f2:b7:2c:a3:b5:9f:36:26:44:
                    55:2d:5c:65:d8:75:97:a1:36:7f:27:04:a9:d3:1b:
                    a1:8a:62:8f:32:dd:11:0c:f1:5a:8f:91:07:c9:c1:
                    77:c5:36:77:1e:d0:21:9a:3b:21:90:22:cf:3a:d6:
                    b7:0d:51:f0:3c:b4:6d:c0:42:d4:59:e9:99:13:66:
                    40:e7:9f:bc:21:25:bf:4b:81:54:a2:cd:c8:85:27:
                    00:82:b5:05:2b:a7:0d:07:54:5f:1d:e7:1a:50:e5:
                    15:a4:ba:f1:2d:86:e2:28:02:48:38:98:88:c5:3d:
                    54:f7:00:29:f5:5f:1b:c0:f4:2e:96:d6:14:59:c5:
                    24:87:90:82:5a:b4:c7:5f:f7:8c:5c:77:e3:53:b7:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:04:E6:6B:78:50:FB:60:A9:26:52:A1:91:25:D2:F5:E9:8D:A4:CC
            X509v3 Authority Key Identifier:
                keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:bb:5f:4b:13:9c:ae:35:0d:6a:b0:6c:79:87:f7:04:ac:cf:
         c1:11:38:b5:4c:4f:0e:d1:ac:aa:0e:66:fd:fd:12:67:af:5c:
         43:f1:0f:dc:0c:05:34:4f:cb:1b:ab:06:13:30:5a:18:1d:e7:
         12:f0:0d:be:0c:44:a4:0d:b4:c7:64:80:12:d4:2f:0c:47:89:
         be:a2:e1:79:f9:5d:d4:73:78:78:93:ab:92:f6:51:4e:2a:80:
         25:6d:1e:37:53:70:bd:41:a7:68:e5:06:b6:6c:7b:2f:68:51:
         b4:9a:3e:5e:f2:8a:94:98:20:24:ad:8e:22:a7:e9:54:44:5a:
         03:8d:ca:da:ed:53:7e:0d:db:4e:9b:46:ce:56:3f:ac:9f:1c:
         30:8a:ef:22:c3:6a:8d:51:b0:38:81:f1:32:30:0f:48:42:c3:
         d9:bd:67:e1:fd:7d:77:2a:20:ef:6a:d0:52:fa:52:47:c4:74:
         68:dc:2d:44:6c:f7:cc:ff:a2:0b:6d:46:d6:fd:45:86:97:df:
         ab:b1:dd:5a:cf:06:f0:7b:0a:03:ec:e0:17:3c:fc:37:4a:55:
         92:b4:a7:c1:d0:1d:1f:9b:bd:6f:c7:91:9c:8e:b2:66:0b:9b:
         64:dd:ee:31:30:1b:1f:ea:db:4a:7b:ce:fd:b1:90:19:d3:06:
         26:b5:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:44 2025 by rpki-client