Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
File:                     l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json)
Hash identifier:          A8czyRb/VyDtXm40kWaQ9eXo/L7hfSCQfG5JTX24/M4=
Subject key identifier:   60:30:E2:2F:37:78:D4:7B:19:AC:D7:B3:3B:FD:FD:FD:89:39:E8:89
Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
Certificate issuer:       /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
Certificate serial:       0C0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
Manifest number:          0C04
Signing time:             Fri 31 Jan 2025 18:27:33 +0000
Manifest this update:     Fri 31 Jan 2025 18:27:32 +0000
Manifest next update:     Fri 07 Feb 2025 18:27:32 +0000
Files and hashes:         1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: bVDT0UV6/tk0qkTjFdA3f+DhmSvHoBii2hREm2klrvo=)
                          2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: kw2eNb2EMSu9uzXccFSp6eZwzhS7sBm7WAl3fnQxLVk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3082 (0xc0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
        Validity
            Not Before: Jan 31 18:27:32 2025 GMT
            Not After : Feb  7 18:27:32 2025 GMT
        Subject: CN=679d1615-7c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f0:be:2b:29:60:95:7f:4a:dd:41:96:e7:9a:
                    29:f4:3b:3f:31:62:71:84:ee:42:ed:b6:29:95:ea:
                    20:e5:f3:5b:b5:37:fb:67:a1:c6:21:31:c7:6d:e0:
                    4e:11:fe:96:ed:f0:48:cb:00:ff:80:b7:55:20:a9:
                    f9:4e:4b:99:5c:29:5c:66:f9:6b:84:d2:b9:ca:ad:
                    e1:21:40:41:e7:ae:d0:56:84:b0:07:27:f2:fb:87:
                    b0:53:23:99:52:f0:c0:86:cd:9a:8c:60:ef:d0:b4:
                    3d:fe:62:64:31:f9:66:38:f0:38:e6:0c:e6:50:d5:
                    dc:69:a5:ff:cd:53:1e:fb:57:33:ac:5f:f6:18:35:
                    ce:e2:05:14:84:a7:86:05:d5:0b:b6:d2:97:37:d5:
                    11:6c:df:94:9e:1c:fd:4a:01:4a:5b:8e:d8:ca:72:
                    f5:22:25:23:aa:ea:3f:80:90:7a:08:cf:8f:42:20:
                    25:fe:07:92:31:2b:87:89:f4:41:c5:9d:69:0c:0b:
                    11:c2:17:f9:79:06:35:5c:96:72:c8:f0:42:ce:cb:
                    d2:67:74:fa:a8:60:fc:08:98:a0:75:7d:b4:84:f1:
                    50:fe:01:28:60:6b:85:49:05:e7:d6:be:b2:c5:24:
                    22:cd:ca:84:a8:fe:75:7a:f3:c2:92:d0:d9:07:b8:
                    46:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:30:E2:2F:37:78:D4:7B:19:AC:D7:B3:3B:FD:FD:FD:89:39:E8:89
            X509v3 Authority Key Identifier:
                keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ce:d4:a7:d9:d9:80:64:1d:65:44:17:d0:82:cb:34:e2:98:
         e3:07:97:4f:7f:2e:35:5b:52:c1:e0:3d:5e:ff:87:be:f5:f2:
         ac:92:2e:fc:bb:c5:99:0d:9c:0a:2c:19:7f:92:37:12:2b:5f:
         e6:ae:2b:0b:6d:fd:58:75:79:80:b5:a1:8d:11:29:4e:33:f9:
         7b:1c:5b:fb:e3:ae:1b:f2:a7:4b:21:c5:66:93:31:92:73:e9:
         cf:54:52:fb:77:57:8a:32:ef:1b:bb:6e:20:10:2c:f8:25:6d:
         ba:b5:53:72:b3:42:dc:e0:f2:cd:ab:31:b2:99:37:85:af:37:
         5c:35:28:bb:de:f4:2d:e8:78:67:59:0d:59:6f:c1:01:27:78:
         a8:19:36:18:32:b1:02:10:1b:ba:29:4a:d3:5f:ed:02:b7:7e:
         bb:ed:2d:f4:39:4a:84:78:ea:14:e6:66:9e:39:bf:50:30:23:
         bb:ce:fd:36:ff:6f:e4:f3:ca:22:37:db:f6:ef:82:ee:82:5f:
         e3:58:96:12:79:98:65:25:bc:87:fa:1c:07:7b:45:61:f3:9a:
         64:25:b7:1f:f0:2d:4f:03:2b:32:ce:4c:f9:18:e3:b6:f7:64:
         fc:85:07:97:7f:09:d1:c2:e2:33:f8:41:9c:1f:0a:c4:ac:4c:
         52:24:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:04:06 2025 by rpki-client