Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
File:                     evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json)
Hash identifier:          NeZDST00lIvkaPKWzksCf0Dmzlivig83ZvoaDxiRryk=
Subject key identifier:   F4:2B:71:2C:A6:4A:4F:34:1D:68:0B:8E:DA:CC:29:7A:B1:C7:59:54
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Certificate issuer:       /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
Manifest number:          01D9
Signing time:             Sat 29 Mar 2025 02:37:13 +0000
Manifest this update:     Sat 29 Mar 2025 02:37:12 +0000
Manifest next update:     Sat 05 Apr 2025 02:37:12 +0000
Files and hashes:         1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: VREs17cFm937PPVL6YwAG1Zhwwn4yTxJL7Iay31ToZk=)
                          2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=)
                          3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=)
                          4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4D1F
        Validity
            Not Before: Mar 29 02:37:12 2025 GMT
            Not After : Apr  5 02:37:12 2025 GMT
        Subject: CN=67e75cd9-0f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:2d:b3:06:bc:73:9f:7a:d0:cd:c1:cf:d3:
                    65:fd:e7:57:bc:b7:c2:2e:02:57:65:a9:85:b2:6b:
                    aa:f6:11:9f:45:6e:93:0e:eb:27:ea:2c:0a:86:df:
                    79:80:51:72:ab:c6:84:6f:82:4b:d5:19:a8:5b:77:
                    07:14:45:03:fa:b6:b9:94:96:79:1f:de:88:98:7d:
                    66:9e:0e:d6:9b:3c:ab:9b:d1:04:02:13:44:a2:7e:
                    3e:56:ae:b3:c4:7a:71:02:cd:0b:0e:5b:60:33:79:
                    dc:67:62:d6:46:a0:be:eb:8b:ac:60:3f:8f:38:19:
                    8e:ef:92:58:fa:00:d7:b4:d1:11:15:db:2e:f8:38:
                    83:92:40:54:14:90:c7:8c:78:fa:e6:bd:ca:a3:a7:
                    69:08:1f:68:e6:6d:83:4a:f4:13:eb:4f:d9:82:70:
                    11:8e:6d:2c:bc:82:71:be:c2:08:48:b3:b8:33:f9:
                    1f:5a:0a:fb:81:38:8b:19:a6:ae:3e:ab:07:e1:ad:
                    32:1b:a9:18:29:33:c4:5a:d5:3f:4c:fc:f0:77:d8:
                    3b:b1:7b:8c:6c:36:05:9c:0f:31:fe:98:b0:d7:73:
                    34:75:6a:7b:4a:a9:7d:b3:43:ca:b9:86:02:3b:5f:
                    20:8d:db:97:08:5f:78:e3:41:3d:1f:de:30:6f:04:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:71:2C:A6:4A:4F:34:1D:68:0B:8E:DA:CC:29:7A:B1:C7:59:54
            X509v3 Authority Key Identifier:
                keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:e4:12:9f:ba:50:23:4f:da:9a:26:ac:1d:5d:aa:48:22:
         44:27:75:78:55:b7:e2:32:ad:91:52:a8:25:7c:1d:e6:70:98:
         e6:18:74:3a:2d:d0:eb:97:25:c3:d0:33:78:d6:50:25:15:64:
         ac:39:0c:ee:dc:20:60:e0:30:80:45:1a:01:92:be:cc:94:9c:
         73:15:3f:6d:03:6d:36:aa:d7:26:bd:d5:a9:db:c4:c0:44:bd:
         6d:ca:4e:fd:a6:f0:24:ba:a5:4a:6f:01:9f:5f:d4:ae:55:17:
         be:53:70:c4:93:25:c4:fa:2b:3c:b6:18:3c:51:94:a8:7e:2d:
         83:f2:d1:27:6f:5b:8e:8a:93:f6:a1:c1:4a:2a:09:e8:34:b9:
         c4:15:eb:e5:56:b5:50:f1:43:0f:a7:21:cf:81:d7:f0:06:4e:
         49:14:1c:30:2d:24:a7:1c:f3:5c:44:ad:71:69:69:2d:56:8c:
         d8:e1:ec:7c:6c:98:99:6a:68:80:bc:42:93:ee:c8:02:ee:f2:
         a4:02:3a:e7:17:4b:79:df:44:fc:8a:20:e9:4a:0b:a1:bc:40:
         33:b5:aa:26:ef:bc:fc:67:ed:ce:c9:9b:b3:87:83:aa:62:d3:
         25:e5:03:43:91:13:06:78:38:4c:57:15:f6:92:bf:61:87:8b:
         00:d5:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:30:55 2025 by rpki-client