Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
File:                     8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json)
Hash identifier:          IvRQ+FWxgoVbq3Q864bx72+7gFPq4OsL+Cf+A/bzqqs=
Subject key identifier:   48:21:EB:DA:16:BF:24:EB:92:98:B0:F4:4B:15:30:36:28:6C:0C:F4
Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
Certificate issuer:       /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Certificate serial:       0DA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
Manifest number:          0D9E
Signing time:             Fri 31 Jan 2025 17:54:35 +0000
Manifest this update:     Fri 31 Jan 2025 17:54:35 +0000
Manifest next update:     Fri 07 Feb 2025 17:54:35 +0000
Files and hashes:         1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: WxJr1zFn/sfmPQNMehu6uUuGRusQkq3mcZakFxF+LKc=)
                          2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: RrERgA4WZb4Wa4GmbO3PCvypqKfkRQ0lOSC1wGlAXvY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3491 (0xda3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
        Validity
            Not Before: Jan 31 17:54:35 2025 GMT
            Not After : Feb  7 17:54:35 2025 GMT
        Subject: CN=679d0e5b-5810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:9e:a3:64:89:5c:98:bc:02:7b:f2:bd:cb:
                    c5:b5:34:e9:70:a0:ee:68:f7:31:ea:55:5d:2e:27:
                    91:9c:20:fe:92:95:ee:f4:46:47:33:6c:b7:27:38:
                    24:45:95:d3:c6:2b:d1:de:64:55:cf:cd:7e:8f:c6:
                    33:2b:0e:81:c4:d2:68:38:c9:4e:e1:8f:4d:77:2c:
                    3d:70:26:c1:d6:2f:5a:98:3d:8d:1c:2a:8e:11:e0:
                    0b:f6:3c:ed:c7:6c:99:b8:e2:d7:fd:ee:5e:13:ec:
                    2d:d5:47:f7:8d:14:43:12:0a:f2:fb:06:f7:6d:b5:
                    ff:ad:5a:c2:3f:e5:7b:ec:f3:86:d7:b6:85:55:4f:
                    9b:60:3d:a2:5e:c5:aa:84:d7:d1:29:32:47:53:1b:
                    e0:00:e9:45:f1:d3:5e:51:35:df:1e:68:47:e6:04:
                    35:7b:ee:9a:05:4c:3e:7d:63:cd:76:58:d0:6e:88:
                    da:c6:db:05:e0:45:49:60:70:ff:52:d3:6d:08:32:
                    b7:36:bf:33:24:39:0b:00:91:78:8c:63:29:76:cb:
                    09:0e:3e:cc:9a:59:9a:4b:5e:2b:a0:60:f7:ab:6c:
                    bb:69:c7:b3:f5:c9:6c:57:f0:99:17:7b:3a:24:ce:
                    6a:54:cf:35:b9:3a:4e:96:cc:c1:f3:7a:9c:5c:63:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:21:EB:DA:16:BF:24:EB:92:98:B0:F4:4B:15:30:36:28:6C:0C:F4
            X509v3 Authority Key Identifier:
                keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:64:ef:95:63:2c:7c:9e:7e:65:e1:db:7d:7d:72:e4:df:f1:
         76:9e:8f:43:e0:3d:d7:04:d8:25:34:95:8d:e1:8d:cd:9e:98:
         d0:d8:67:34:e1:9e:d3:00:6d:51:76:6a:f4:69:27:cb:b7:71:
         03:fc:53:93:2c:f7:01:d2:6b:c9:b1:cb:67:78:48:3c:6f:38:
         0c:60:d4:f8:fc:f6:f4:3c:2b:85:81:3f:f5:dc:7d:1b:a9:03:
         f7:31:01:ee:8f:86:7c:95:9b:01:af:d1:ea:0a:4b:09:14:e9:
         ea:2e:23:54:04:21:57:b6:18:3f:24:d6:9f:4b:71:e9:25:47:
         d6:3e:48:b5:97:80:b0:c8:b1:93:e6:c7:15:f2:f3:99:44:d5:
         b4:cc:f1:8e:ed:ef:a5:e6:53:ef:e3:e5:48:01:17:db:7b:b6:
         cf:a2:94:95:9c:cf:b7:3c:79:18:e1:84:1c:11:04:ea:bd:4b:
         46:0d:d5:f2:3e:46:eb:99:c4:61:6c:93:c7:c6:25:31:c4:cc:
         2a:f8:8d:95:33:da:67:f8:1f:46:a5:e2:e9:35:cd:0b:dd:2a:
         c1:30:43:86:80:7e:e1:92:21:7e:f9:e6:1f:b6:bd:eb:84:04:
         b2:ae:a1:80:14:a0:2d:c9:41:87:ad:2a:fc:ae:18:dd:20:1d:
         56:b9:1f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:38 2025 by rpki-client