Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File:                     49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier:          tF6fxcm/xvNv3GpzCsSqQ5T3NzTb9hlo3jll/+bm3yc=
Subject key identifier:   18:CD:1B:45:69:CC:12:C9:44:DD:93:53:02:9B:6A:13:EB:D4:AD:38
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer:       /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial:       10ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number:          10D7
Signing time:             Fri 31 Jan 2025 17:19:05 +0000
Manifest this update:     Fri 31 Jan 2025 17:19:04 +0000
Manifest next update:     Fri 07 Feb 2025 17:19:04 +0000
Files and hashes:         1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: soFUgIEbsuLPKcCCIKrRL3k6hBfuTwWaREi0h8EybaM=)
                          2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: h4w3R++k5N2fKCBL4XYVOAI91zAPSdTO27DUBoN7QB0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4333 (0x10ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
        Validity
            Not Before: Jan 31 17:19:04 2025 GMT
            Not After : Feb  7 17:19:04 2025 GMT
        Subject: CN=679d0609-4023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:3c:6f:37:2e:af:8b:1a:56:a2:83:c1:7f:
                    a3:c8:f2:7f:5d:ad:74:98:8e:ab:96:ae:83:8b:4a:
                    cb:94:21:2c:5b:97:f2:a6:82:55:46:0e:df:46:b5:
                    1c:41:7c:8e:c8:1a:bf:c6:b6:af:9a:f6:b2:b1:74:
                    b2:5a:06:c6:a2:39:05:90:6b:de:ba:5c:16:0a:71:
                    08:d0:e2:cc:3f:53:cb:c5:52:3b:61:57:77:1b:21:
                    1c:30:8a:10:2c:68:d2:fb:bf:8a:e8:e2:b6:24:16:
                    f7:f2:93:d0:33:50:f4:bc:39:b3:9d:af:70:a3:fc:
                    f7:fb:86:3c:8c:9a:f2:d7:f3:22:47:32:72:83:98:
                    50:47:60:fd:5c:b2:b3:4a:10:64:21:7c:9f:fd:9d:
                    a6:07:d2:7c:43:51:2a:ae:9a:4e:74:a3:5d:ac:9f:
                    77:7f:95:77:c3:f7:a7:77:7b:49:1f:a5:03:00:16:
                    96:59:2a:4c:4b:2d:9e:a6:bc:56:8d:53:c1:67:f2:
                    4b:94:f7:5e:5d:8d:aa:a4:ee:e3:e1:85:2c:53:67:
                    0f:95:69:5c:ce:15:55:d4:5a:9d:66:d1:86:51:b5:
                    71:a8:4a:a8:3c:d3:8f:5d:d0:d5:96:9a:ee:6b:18:
                    a2:a1:d0:67:a6:05:f7:72:b7:20:be:ab:91:f5:63:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CD:1B:45:69:CC:12:C9:44:DD:93:53:02:9B:6A:13:EB:D4:AD:38
            X509v3 Authority Key Identifier:
                keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:73:94:f2:ad:76:94:c7:fc:c4:ba:2e:4b:4e:b7:d6:8a:
         2f:64:26:b6:f1:2f:66:be:4c:2f:d7:4c:b4:66:c7:2e:fe:92:
         0e:b1:66:6e:80:0e:f9:58:63:1d:5d:0c:d2:3b:50:17:16:8f:
         6b:a3:d4:17:1e:fb:eb:d4:22:b9:d6:fd:7f:92:1e:ac:02:ce:
         44:8a:22:8c:5d:69:c2:1e:e6:e5:37:a6:16:e3:f1:21:6e:1b:
         7f:01:08:df:84:65:b5:7e:d5:0b:0b:89:bd:fe:e6:f6:b1:2f:
         bb:ef:81:bf:eb:6d:5a:2b:f0:d2:ae:5a:09:ed:1b:d2:2a:34:
         31:85:d0:ad:79:67:c0:ce:2e:ae:ff:53:64:27:6e:35:77:f6:
         76:f2:3f:ef:e8:77:fb:8a:60:49:90:91:70:0c:84:35:29:32:
         01:7b:df:7d:2b:7e:cc:e0:ab:29:3b:56:62:33:71:11:30:0f:
         35:83:62:81:fa:ed:f7:bd:33:e8:2b:78:fa:db:d2:77:aa:25:
         8c:9c:ea:1e:b5:3d:70:ff:44:8e:18:40:c8:96:85:a2:24:9a:
         98:f0:51:29:e0:fd:1a:73:20:50:e2:ac:9b:89:48:6c:8a:22:
         2e:5c:58:56:22:a3:3b:92:06:06:ef:fd:78:f1:97:64:e3:85:
         fd:57:a0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:54 2025 by rpki-client