Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File:                     vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier:          KRMzhwpVxc4hUNq8KPEmrQ8YBDjok77JPaKz41bf6Nk=
Subject key identifier:   D3:AC:BE:F5:4D:51:21:B5:B1:F6:8A:FC:16:5C:A1:E1:48:8E:1E:2A
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer:       /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial:       077E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number:          0779
Signing time:             Fri 28 Mar 2025 21:40:02 +0000
Manifest this update:     Fri 28 Mar 2025 21:40:02 +0000
Manifest next update:     Fri 04 Apr 2025 21:40:02 +0000
Files and hashes:         1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: ZiPX5Wc4qZ7WhK9dJjZ3qZV2WHE0meUY2wOhmmTpTw0=)
                          2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1918 (0x77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423B
        Validity
            Not Before: Mar 28 21:40:02 2025 GMT
            Not After : Apr  4 21:40:02 2025 GMT
        Subject: CN=67e71732-5a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:ca:b4:65:d8:d8:6f:9b:98:2b:c4:5d:9f:
                    1b:66:76:22:7a:19:d4:58:a8:ee:c6:91:99:2d:d1:
                    35:1d:6b:15:a2:68:41:57:b8:f0:56:a2:1f:72:68:
                    59:9b:c5:56:13:03:57:13:a1:07:11:3b:b5:f4:c9:
                    06:ec:7a:c3:bd:90:0f:80:ba:8c:52:95:39:f1:1d:
                    f7:3c:3a:6f:31:ac:5b:68:f0:27:c4:56:1f:86:56:
                    5d:53:76:f9:cc:fd:b9:48:4b:a5:88:e3:6a:85:23:
                    5f:2d:27:4c:d2:49:e1:3e:06:5c:06:e1:5b:9b:da:
                    d3:9c:ba:52:19:c9:e2:ad:5d:e4:42:34:cc:84:6c:
                    72:50:34:fd:b5:7e:d4:68:9d:2c:df:39:49:e7:2d:
                    2f:ed:26:bc:1a:a3:9e:fb:c1:f3:00:84:ef:d6:dc:
                    54:b9:46:25:da:e3:25:e6:3b:41:a9:b5:4b:b6:e0:
                    0f:a1:b5:76:04:d8:2d:c9:09:ca:26:9a:75:3a:e6:
                    8f:aa:7e:ac:bb:a8:04:34:99:fb:05:73:a0:30:49:
                    29:3e:b4:c6:45:3d:3a:3a:e5:f1:f4:03:bc:06:b7:
                    ec:61:2a:3a:1c:b6:d4:27:3f:8a:ef:6d:4e:ec:29:
                    d8:83:3f:fe:86:07:7a:4d:8d:52:ce:cb:1c:3a:3d:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AC:BE:F5:4D:51:21:B5:B1:F6:8A:FC:16:5C:A1:E1:48:8E:1E:2A
            X509v3 Authority Key Identifier:
                keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:35:93:d5:c3:d6:cb:65:1d:99:6b:9f:b3:1b:56:2a:9b:
         0e:0c:14:be:4e:c8:a1:de:92:7a:9a:e2:c2:5d:e4:cf:ad:b0:
         9c:c7:2b:39:fa:87:23:70:43:0f:73:2d:7c:62:1b:86:86:93:
         44:42:1f:68:0d:46:7a:d8:f0:35:16:60:a7:f7:9e:06:10:74:
         75:2b:b9:4c:d3:c1:0f:d8:40:d9:5a:8d:c7:90:01:4e:ce:25:
         2c:74:5e:21:68:6b:63:d6:a2:6a:e7:13:3e:56:db:9b:af:16:
         0d:c0:1b:bd:0a:35:14:c2:81:81:f9:a7:39:04:0e:b3:63:92:
         dd:32:50:af:aa:50:75:63:f0:ee:48:f0:cc:ef:00:93:f2:63:
         c7:9f:ac:fb:eb:c3:c0:4d:cd:9b:3b:df:2e:30:ab:44:83:17:
         cb:42:e0:dc:7c:ad:0c:5d:a1:df:25:8e:f6:9b:59:85:3a:4d:
         c1:9a:1f:76:75:0f:1e:60:6c:47:94:e9:d9:74:25:1b:ea:98:
         38:85:10:d5:47:2a:68:9d:15:1f:cc:3c:e8:55:70:1d:1e:0b:
         ae:3a:35:ea:5f:24:2c:b7:ce:59:6c:e9:76:c9:79:19:b2:ec:
         d9:f3:2c:1e:c8:14:c4:e9:f0:ff:4c:61:3e:32:39:11:57:f2:
         31:4f:48:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:27:02 2025 by rpki-client