Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
File:                     EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json)
Hash identifier:          fNeNpmqHlBoPSQqIoGKyDKAL16WWCskKyV3YHnCny7Y=
Subject key identifier:   59:A0:97:81:27:A2:88:17:28:02:54:7B:55:14:C8:02:F1:45:03:4B
Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
Certificate issuer:       /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Certificate serial:       034F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
Manifest number:          034D
Signing time:             Fri 31 Jan 2025 01:04:57 +0000
Manifest this update:     Fri 31 Jan 2025 01:04:57 +0000
Manifest next update:     Fri 07 Feb 2025 01:04:57 +0000
Files and hashes:         1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: 7+r1lqFZMKbMLDbQpU59w4NpVTDYgn8bquPSU8HWOCk=)
                          2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
        Validity
            Not Before: Jan 31 01:04:57 2025 GMT
            Not After : Feb  7 01:04:57 2025 GMT
        Subject: CN=679c21b9-c8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:4a:9c:e4:6d:c8:91:0d:91:6d:68:28:75:
                    96:b1:fd:42:23:d0:5e:a0:35:0e:fb:b1:e3:f6:64:
                    a2:a1:ae:fb:a9:a5:79:bd:f7:a1:1a:cb:13:c1:4e:
                    9c:0e:f2:01:98:0c:00:c1:a8:c2:7d:db:23:48:59:
                    fb:06:3a:a9:05:12:07:8e:de:3d:a2:b9:42:d9:0e:
                    8f:b6:7a:62:21:19:36:80:50:ab:1f:96:6d:30:36:
                    87:97:1c:3e:4a:e3:20:63:42:9a:9a:91:51:07:a0:
                    42:93:a4:ae:b5:7d:96:18:26:99:1b:97:97:48:54:
                    c5:14:10:e2:6c:c0:f8:57:16:92:6d:ce:5e:04:1a:
                    6f:31:3e:b8:88:d9:88:60:0e:a1:8d:7a:41:27:8e:
                    71:e7:a0:8d:20:20:73:c2:cd:c0:e6:15:59:dd:61:
                    8d:e7:6e:98:3e:8c:dd:8a:aa:72:ae:e2:eb:3c:19:
                    b2:a3:69:5d:6f:9e:78:01:13:68:95:a0:ce:43:96:
                    e4:26:5a:f4:0f:82:fd:32:6f:ee:6a:59:06:de:c1:
                    e6:b6:95:6d:49:7e:3e:a4:bf:4e:3a:3b:1a:bb:73:
                    a3:1e:f5:94:37:aa:e0:12:99:2d:cd:6e:b5:93:76:
                    3f:30:e7:9b:8c:61:85:d4:3a:38:bf:13:bb:7f:9f:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A0:97:81:27:A2:88:17:28:02:54:7B:55:14:C8:02:F1:45:03:4B
            X509v3 Authority Key Identifier:
                keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a9:15:30:fa:8f:06:f3:c6:1a:26:ef:6e:d3:ab:ed:39:4c:
         6a:f5:fe:96:30:40:58:94:93:70:5d:0b:2f:fc:8b:b6:f0:a9:
         4f:32:fd:3a:70:ef:c8:b7:23:a9:d3:e5:7a:94:03:ee:44:a6:
         4f:66:c2:93:f5:f6:d1:a8:21:bb:57:74:40:d8:83:ec:8b:86:
         48:c3:86:5c:2d:54:07:8f:33:d0:1a:ca:6f:00:e7:c4:01:90:
         54:9c:d8:58:2e:db:68:1d:57:ad:16:d2:9e:3e:f8:37:71:41:
         11:eb:ad:c4:72:b2:74:0f:8c:4b:92:5b:bd:81:fa:e0:5d:2a:
         15:f9:5a:cd:15:4e:ee:0a:ef:c0:33:a9:8f:ee:ad:6b:c6:3b:
         32:06:c8:07:31:87:29:ed:ff:66:71:7d:7e:c7:1b:0b:11:42:
         df:f4:67:17:c6:e4:4b:f6:d2:e7:16:2b:3d:6b:8a:e1:d2:ce:
         a3:a6:e4:ff:bf:51:7e:dd:37:57:b8:e9:a8:79:8d:c6:34:72:
         e2:b6:c4:4e:ea:d7:4a:af:f1:29:4f:00:60:c7:a0:d7:52:5a:
         d1:01:65:10:38:0c:d3:77:ea:af:68:8f:09:83:4d:df:e4:19:
         91:fe:15:39:e4:6f:b9:67:59:8d:d1:1e:33:7e:82:8b:3e:3c:
         43:0a:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:17 2025 by rpki-client