Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File:                     mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier:          N+Etq0BzTgaAtIZBkKdlNryUb6VvHK1gPQCmokXcalA=
Subject key identifier:   E0:AC:12:57:F4:89:3F:82:8D:31:85:0D:D7:F5:9D:25:F8:93:6A:8E
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer:       /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number:          45
Signing time:             Sat 29 Mar 2025 06:45:12 +0000
Manifest this update:     Sat 29 Mar 2025 06:45:11 +0000
Manifest next update:     Sat 05 Apr 2025 06:45:11 +0000
Files and hashes:         1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: W3uS9Zxi6oozg2XaRiPUDR+NWFahSBJ0UCOQdeDK25A=)
                          2: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: Q2O3UQQcNoLM1v/zHql7wsFe9RZlWk5/+eqvd3Q27EE=)
                          3: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: RrU3CkYFdXPh/xjxUTbpuTN6rb1MmkQpXUXbfG9JUVQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC
        Validity
            Not Before: Mar 29 06:45:11 2025 GMT
            Not After : Apr  5 06:45:11 2025 GMT
        Subject: CN=67e796f8-c83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:e5:f6:8f:ec:b1:ee:34:21:7c:6d:69:74:
                    55:e0:3a:45:9b:2d:e4:86:a1:6d:1c:76:22:e4:d3:
                    90:cb:d6:c7:b0:65:0a:4a:70:67:1e:53:50:84:21:
                    36:4d:94:7c:a3:8f:1b:3b:e3:85:58:4d:b2:a9:b2:
                    ae:c0:a4:b7:87:a1:2e:50:e1:9b:db:8d:86:0a:35:
                    7a:43:64:03:b7:04:a3:7c:e9:5b:9e:e3:f8:da:d6:
                    36:62:96:b5:aa:a8:8e:aa:6a:28:ef:e6:f8:e4:75:
                    a3:2a:5d:26:98:ea:0a:31:82:b8:40:c9:31:0d:8e:
                    d7:86:66:b2:a3:bf:c0:d2:4d:84:28:cf:83:89:ed:
                    4b:36:90:1d:bb:ab:74:04:c8:c9:59:a1:5b:9e:c0:
                    99:e6:29:7d:b0:ab:b7:1d:13:e3:94:be:76:2c:9d:
                    5a:30:f7:2a:a0:ee:69:6b:1c:bb:8c:00:3f:c8:27:
                    0a:b9:c5:ca:4e:c1:94:36:65:cc:4d:2f:86:e6:53:
                    f7:bb:1d:fd:0e:f7:57:d6:20:79:29:68:c6:33:bb:
                    58:03:61:3b:f4:15:56:b9:74:cc:a1:bf:f0:65:66:
                    a7:84:3a:f7:38:3c:37:87:e3:f7:50:0b:25:d5:dd:
                    4d:bc:39:e9:d0:6e:3a:be:3f:91:c9:89:23:cc:6a:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AC:12:57:F4:89:3F:82:8D:31:85:0D:D7:F5:9D:25:F8:93:6A:8E
            X509v3 Authority Key Identifier:
                keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:5a:f0:fb:bc:ea:38:f1:50:c4:3a:21:3d:fa:b0:d2:41:
         e6:bd:36:bd:35:a2:f3:fc:8f:61:8b:56:e1:6b:e5:46:2b:78:
         31:7b:46:2a:a9:da:cd:87:bb:9d:f2:74:a5:a6:c3:a4:1c:e2:
         0a:15:70:b6:00:1f:51:67:a5:a0:1a:36:b5:8b:15:78:a9:6d:
         44:26:79:18:b6:e5:23:02:da:92:e0:2d:38:67:ff:64:58:56:
         03:da:93:65:26:f3:f6:b5:b4:7a:7b:9d:74:4f:22:f5:72:a2:
         c1:c3:79:89:3d:d8:34:e9:a5:bb:14:0d:23:08:4c:a9:5f:b2:
         dc:75:d5:04:b6:46:b6:2b:f9:b7:d3:1d:ab:56:a0:e6:6a:af:
         24:ff:9f:1a:1c:73:0b:a9:be:30:23:db:fa:ff:d6:a3:45:91:
         bb:1a:98:9b:73:ea:03:f0:eb:35:76:30:d4:40:b3:4c:77:02:
         5a:41:ae:22:62:ec:17:07:30:3b:2e:98:f5:f1:d9:4c:2e:d9:
         7e:de:70:f7:fb:87:66:a2:4d:3a:d5:22:f2:e2:5b:fa:50:8e:
         ed:53:66:33:a6:25:b7:e6:73:e0:65:80:40:6d:48:bb:1f:1d:
         ba:15:a5:68:52:69:b0:88:93:1f:5a:49:fa:58:f0:ad:b6:f2:
         f5:a2:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:59:28 2025 by rpki-client