Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File:                     Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier:          y9oCLYPEnTFm8ov2/PPSoBHdEPSS8Aj5kBfu7rYkYFw=
Subject key identifier:   D8:04:70:C9:CC:49:6C:8B:59:BB:3F:93:90:CD:6D:20:2B:0B:68:6D
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer:       /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number:          F8
Signing time:             Sat 29 Mar 2025 04:40:06 +0000
Manifest this update:     Sat 29 Mar 2025 04:40:06 +0000
Manifest next update:     Sat 05 Apr 2025 04:40:06 +0000
Files and hashes:         1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: AdxXlhoRGndP/m86enqOzXiuQt1aMEW85dniWkQzAtk=)
                          2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: vJ2YKh1qvo6z7EsNb01ZnfIC7WfZlHkFbVKbRaXaFP0=)
                          3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: /ZzSx5BufcsBFJm8hzU4SO+vyDuIxcR/d9CCuElSRT0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3526
        Validity
            Not Before: Mar 29 04:40:06 2025 GMT
            Not After : Apr  5 04:40:06 2025 GMT
        Subject: CN=67e779a6-0edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:58:ec:8c:0d:8f:df:a3:7a:19:fe:6a:bb:
                    74:84:b3:62:a2:93:d9:ff:d8:71:94:95:fd:cf:85:
                    58:90:1a:e3:1d:d5:6e:86:e9:07:88:49:73:43:d1:
                    0f:39:0f:7e:eb:14:b3:98:1c:1f:81:36:5f:eb:d1:
                    f6:32:92:a3:b4:61:55:16:63:d2:b6:c4:60:dd:c3:
                    60:94:9a:c1:bd:cf:db:4b:6b:22:b4:74:a6:24:09:
                    d8:bc:10:77:19:eb:0a:9a:4d:71:8c:15:23:63:70:
                    60:b6:b3:39:2f:b9:e3:4b:bb:0b:7f:64:3a:cf:ee:
                    5d:9a:65:c1:ea:72:74:9a:93:eb:34:3c:a5:fd:04:
                    93:86:54:3d:35:6b:c8:e9:8b:6a:8b:c9:38:4f:3e:
                    d3:cb:37:a3:3b:a3:6c:58:ae:08:83:93:b5:80:7d:
                    14:0e:ee:b0:f0:fc:76:7d:f8:7f:62:70:04:04:ad:
                    b9:de:3b:b9:6b:ec:e0:97:05:73:3c:05:38:3b:22:
                    ad:59:0e:10:8c:3a:75:66:2b:18:41:f0:38:6c:fb:
                    67:b2:bc:82:0d:29:9a:ad:f4:06:44:97:f9:ef:38:
                    e7:27:68:b1:88:1a:0e:47:9b:dd:96:44:38:df:f4:
                    58:0b:21:b3:26:5d:08:c3:3f:e3:e8:23:ae:9b:2e:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:04:70:C9:CC:49:6C:8B:59:BB:3F:93:90:CD:6D:20:2B:0B:68:6D
            X509v3 Authority Key Identifier:
                keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:70:bc:a9:bb:44:64:49:df:36:ce:2f:0e:c3:47:8f:0a:e8:
         13:33:95:85:be:e7:0d:a4:54:aa:1e:74:fb:53:65:41:25:e4:
         19:82:1d:8e:29:c7:42:df:45:78:f3:9e:f3:32:17:de:cc:6f:
         4c:b3:51:ec:49:f2:20:0b:ba:88:0a:e2:0d:50:49:60:73:37:
         c0:e8:e9:6a:b7:67:57:27:f4:37:84:e3:d2:92:f5:49:c2:4b:
         8f:e0:76:f0:da:91:c3:59:65:32:1d:21:f6:da:3d:c4:f6:74:
         42:4d:21:8d:ad:41:a7:e7:91:ba:d3:ba:47:3c:cb:8a:8e:db:
         e0:a2:58:59:6d:41:6b:f7:f7:ac:9c:76:8a:20:b1:ce:0d:d3:
         1b:ad:b8:0c:89:3c:14:b7:99:72:e1:7b:52:fe:9f:2e:69:43:
         98:8a:01:14:82:dc:6d:a6:8d:bd:d3:bf:7d:84:f6:60:31:c9:
         25:74:c6:95:e8:cd:e7:a9:89:37:de:f9:7d:d5:bc:07:df:b8:
         22:29:c2:70:ad:bb:bd:0a:ce:65:32:b4:b4:c0:5a:a9:6e:85:
         3a:f9:39:09:5b:1c:ba:bb:3b:5e:e9:b6:5f:05:8c:12:7c:97:
         3b:f8:1a:dc:4b:5f:3e:ec:a4:03:9a:74:62:9c:45:f3:5f:54:
         e2:4b:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:39:47 2025 by rpki-client