Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
File:                     PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json)
Hash identifier:          //KEZ0lG60I3XeZnNqk+uzB0/i5veq7ljd4nvR6D9YM=
Subject key identifier:   4B:B2:63:5B:69:1B:47:16:2C:46:06:D5:9A:9C:22:8C:EE:E9:6A:7E
Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
Certificate issuer:       /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Certificate serial:       063D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
Manifest number:          0631
Signing time:             Fri 28 Mar 2025 22:58:00 +0000
Manifest this update:     Fri 28 Mar 2025 22:58:00 +0000
Manifest next update:     Fri 04 Apr 2025 22:58:00 +0000
Files and hashes:         1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: 7Xx6GwWOQa7384zWo3HSqn84W0XxsceczngaIoRepK4=)
                          2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: kTnNlxGzV54r4KPZAQuINu1i12sln6cK8TaYfF0XXkI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BBA
        Validity
            Not Before: Mar 28 22:58:00 2025 GMT
            Not After : Apr  4 22:58:00 2025 GMT
        Subject: CN=67e72978-e3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:9c:45:71:b7:0c:ed:c5:e7:fc:4f:da:62:
                    fb:67:04:d5:5c:da:03:87:e9:30:61:5e:f9:61:7a:
                    d9:93:b2:77:93:e5:09:7a:a2:14:f8:11:ce:3b:c4:
                    25:3a:6a:50:b6:e7:b8:cb:d7:76:6a:24:05:e9:52:
                    fa:74:62:bb:05:d5:b5:e6:7d:b3:57:f1:1a:db:11:
                    ef:e2:bf:b8:ea:36:f1:39:bf:2e:3d:9a:3f:6b:c7:
                    b1:06:28:36:c8:b0:d0:d4:01:39:4f:27:92:8d:4e:
                    ed:d3:56:9e:94:f1:3b:cd:30:64:06:6f:72:ca:b0:
                    c1:a7:70:df:df:03:eb:df:c3:74:bc:c7:c8:d0:92:
                    a0:cc:1b:d9:fd:3c:58:35:2e:b1:87:47:2d:aa:40:
                    51:76:66:cc:db:f5:aa:d7:25:e3:4f:13:4c:b9:87:
                    08:96:30:b7:77:5a:59:0b:24:e0:36:72:46:86:71:
                    38:4b:d3:2d:78:f2:80:13:e7:d1:89:13:2e:80:fa:
                    e0:82:99:45:63:4d:50:84:f5:08:36:2c:7a:24:28:
                    1d:97:a1:f9:a9:d0:45:41:dc:b0:71:ab:ac:f3:a0:
                    6e:71:55:6a:77:ea:13:7e:28:da:c6:66:ac:00:4e:
                    6a:2c:3d:fb:1a:99:4c:d4:8f:db:bd:92:b2:45:43:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B2:63:5B:69:1B:47:16:2C:46:06:D5:9A:9C:22:8C:EE:E9:6A:7E
            X509v3 Authority Key Identifier:
                keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cc:38:07:ce:d7:db:be:80:65:41:57:c2:a4:35:d3:ac:0e:
         8e:4b:ad:c9:31:68:5d:25:a2:2a:45:b0:71:b9:84:76:45:d9:
         f1:18:5f:39:0c:c9:6e:7f:0a:a2:4f:e0:33:91:d7:12:35:19:
         3d:ef:1e:90:97:64:d4:81:3b:62:05:5f:81:1c:c9:7d:a1:83:
         97:ec:b0:9a:da:40:31:a3:3c:b5:a2:77:f8:44:04:34:84:e9:
         41:27:20:2a:60:ed:bb:41:d1:1b:7f:3c:8f:21:50:ee:ea:01:
         52:10:32:c3:fa:2e:d7:a7:4f:f0:0d:15:e2:6a:2a:42:d2:7d:
         6f:5f:44:ba:6b:e4:6f:71:bf:d7:87:31:df:50:5e:26:a6:4c:
         ea:f1:27:ae:ef:82:67:57:72:ae:68:3b:ce:a9:b7:a4:9e:44:
         8a:11:a6:e1:e8:55:b2:ab:d7:89:14:b9:dd:bf:a7:cf:a7:10:
         b7:32:71:ea:f0:a3:05:1e:bb:ec:60:c4:e8:d0:20:54:7b:ab:
         62:cb:49:28:bb:99:56:22:00:a3:3c:b1:6c:72:7b:04:e7:6b:
         d4:47:29:42:61:5a:93:52:be:5f:be:4c:68:a1:03:5c:d5:8c:
         18:ec:f7:0d:1f:7c:d1:b2:1b:38:88:04:d5:12:24:5f:55:f5:
         08:1f:e9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:25:41 2025 by rpki-client