Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File:                     5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier:          uNhBR3yaXdaNT2kmRm59bnlrq4JzRiog/ytpnt5hs6g=
Subject key identifier:   0D:7C:B3:74:A0:66:CA:0B:0C:6C:E2:BD:90:59:46:1D:56:0D:43:64
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number:          01FB
Signing time:             Fri 31 Jan 2025 02:12:27 +0000
Manifest this update:     Fri 31 Jan 2025 02:12:27 +0000
Manifest next update:     Fri 07 Feb 2025 02:12:27 +0000
Files and hashes:         1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: z5t+EPZx0sVIbBUzgPuPNU8+69hmfr6XmJxWEEGBy0A=)
                          2: C578C852218A11EFB28E7B82C4F9AE02.roa (hash: KKFBJy6BuH3zoU7Y7p5i/yiKpN/2/ErHXi1+uvAz3Fo=)
                          3: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: SPHOOqF1bgvzw9UBVa77krOeq2ngEgOV4Vao4IWDQgo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: Jan 31 02:12:27 2025 GMT
            Not After : Feb  7 02:12:27 2025 GMT
        Subject: CN=679c318b-0317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:bc:8f:6e:ec:55:39:90:c9:59:10:fb:f8:
                    d6:e0:26:c2:8f:07:bc:6d:62:6d:2d:52:01:af:54:
                    55:57:c1:45:77:b7:01:1f:d4:36:55:83:4d:77:0b:
                    ba:61:3d:22:d9:52:08:60:1f:49:6e:37:42:42:ed:
                    0e:4f:fb:35:f0:5a:62:29:4d:ca:8f:48:0e:eb:4e:
                    43:2b:57:3e:30:ba:3b:7b:b3:e7:4c:c4:e5:12:e8:
                    dc:fe:b4:4a:14:b1:a4:f2:0c:09:5f:13:b1:83:11:
                    11:f9:fb:18:ed:02:81:7a:8f:da:77:e2:b4:ff:da:
                    b7:24:45:15:5d:00:fc:c7:6e:76:a5:f7:a8:75:ae:
                    9e:ba:10:09:ef:9f:be:c3:57:66:78:5b:96:5f:8c:
                    35:05:18:2d:16:3b:bd:d4:70:7e:48:f0:8b:af:c9:
                    58:04:44:79:05:37:fe:61:bd:d3:43:c5:20:43:bf:
                    0c:71:17:15:60:65:f1:22:c5:e9:b3:3f:f8:a7:16:
                    50:03:52:71:df:72:5f:66:57:ca:1f:c7:f6:ea:8f:
                    45:ee:b1:12:38:c7:3d:06:83:35:48:43:56:c9:6a:
                    70:01:bc:f9:34:1a:24:ac:b7:01:e2:8e:33:1b:6d:
                    dc:0c:48:20:97:30:dd:ca:f1:47:c7:40:47:a0:46:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7C:B3:74:A0:66:CA:0B:0C:6C:E2:BD:90:59:46:1D:56:0D:43:64
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3f:06:8f:66:b3:e5:c3:15:de:4b:90:59:28:61:a5:f2:0e:
         e2:8a:9f:01:2d:16:11:9d:02:cf:26:e5:7c:e5:5d:b9:5c:78:
         3b:7b:6c:68:af:47:d9:e8:0f:a7:8c:7c:8d:eb:a6:96:7f:e7:
         02:e0:04:a0:43:8d:fa:e9:ee:64:95:47:82:df:61:f0:07:89:
         ba:d3:b8:42:9f:10:12:5f:cf:c0:7f:91:fd:57:cb:6a:d9:49:
         0d:98:42:21:46:22:0c:10:d3:13:1d:dc:0a:c6:7e:c5:5f:59:
         d9:68:95:a5:82:67:45:8f:e2:11:80:ad:9e:ab:0f:ea:36:79:
         7e:73:01:70:6f:57:48:dd:76:15:c6:6b:fe:83:28:0d:e7:75:
         26:11:a8:cd:33:08:87:c9:de:c3:9b:5b:e4:46:47:85:76:8a:
         57:d9:30:07:4c:09:96:fe:0b:88:cc:99:f6:26:ae:7a:77:75:
         b2:cd:6a:4e:bf:9c:db:e9:5f:af:63:35:c3:b6:41:84:5e:f2:
         16:2f:76:66:78:d7:a4:0d:fe:dc:ca:21:90:c0:82:24:f1:f4:
         d1:74:5e:4d:f5:8c:a2:14:b5:e5:d1:1b:50:9c:21:95:0e:73:
         6f:37:55:14:20:02:80:52:e1:52:ad:f3:15:bd:12:77:45:22:
         c6:bf:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:37 2025 by rpki-client