Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
File:                     T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json)
Hash identifier:          lH+FoCi3GxNyY2PyvsuPgZuQoZSze/tyK7vyuXuRh2E=
Subject key identifier:   CE:D4:85:9A:21:24:76:90:E3:E0:DC:4A:F7:B6:CD:46:2B:98:15:D5
Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
Certificate issuer:       /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
Manifest number:          09
Signing time:             Sat 29 Mar 2025 07:28:38 +0000
Manifest this update:     Sat 29 Mar 2025 07:28:38 +0000
Manifest next update:     Sat 05 Apr 2025 07:28:38 +0000
Files and hashes:         1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: zARE1BRNA3txY/M0oyMZbCSiNx82FU8v4GLRdjxijuU=)
                          2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B38F5
        Validity
            Not Before: Mar 29 07:28:38 2025 GMT
            Not After : Apr  5 07:28:38 2025 GMT
        Subject: CN=67e7a126-75e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fc:6a:2c:18:dc:e7:8e:4a:af:3d:f0:d2:0e:
                    a2:c9:19:40:30:46:76:39:1f:b7:37:ac:0d:d3:ed:
                    88:81:2b:f4:d6:a7:3c:ed:28:3d:a3:6e:ec:d4:07:
                    94:e3:6f:31:75:41:0b:08:c4:28:d7:28:8f:b8:a9:
                    29:51:7a:c7:8d:6b:df:2b:2c:39:20:fb:6d:c1:39:
                    09:cc:6a:94:bf:4c:0a:f9:38:14:75:dc:33:46:5b:
                    06:5b:ae:31:5a:7c:d0:8c:79:bf:ae:1e:ed:03:32:
                    09:42:42:2e:d6:21:6c:1c:a5:19:e7:d2:d2:da:b9:
                    f9:e7:60:4e:05:2c:e3:ae:ca:89:ca:1c:3b:85:40:
                    2f:be:6c:b0:53:fd:b9:ad:9e:63:01:87:61:95:8b:
                    89:a4:d7:f9:13:2c:cf:ec:d4:9a:30:0a:5c:f4:dc:
                    20:a5:ae:fa:f4:91:33:fe:73:59:89:5c:62:2d:ec:
                    c7:8f:63:65:61:89:9f:87:0a:5c:66:22:c9:44:d2:
                    e7:e7:bc:df:4c:56:6a:05:cf:e7:97:af:bf:35:6e:
                    38:2c:32:61:26:78:50:8a:26:1f:29:d1:0b:5d:8d:
                    3e:14:2e:d3:4f:ae:2c:75:b1:85:11:a8:27:a9:24:
                    29:d9:31:53:4b:64:09:c8:bd:ab:2f:86:c9:22:6f:
                    56:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D4:85:9A:21:24:76:90:E3:E0:DC:4A:F7:B6:CD:46:2B:98:15:D5
            X509v3 Authority Key Identifier:
                keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:52:5b:e4:f2:c1:fd:7f:c2:fd:e9:d6:75:bd:d5:dc:9c:34:
         3b:02:bf:e3:e8:b7:d7:35:6a:7a:8e:b1:61:ca:2e:de:f3:2e:
         45:83:88:cf:44:7f:23:7a:4f:c5:ea:11:9e:f5:c4:6a:2e:eb:
         db:c8:4d:a2:39:1e:24:1a:e8:f8:61:bc:19:d8:44:8a:cf:93:
         5a:53:11:97:97:58:4b:99:77:d4:17:31:c1:64:2b:b9:08:a6:
         2b:a3:58:93:fc:e9:14:ab:06:c0:be:6a:84:af:e1:a5:ad:2d:
         d8:4d:80:3f:10:1b:0c:ea:14:7e:e3:3c:70:48:64:e8:20:25:
         8f:57:c8:f1:23:9e:ae:ed:7d:19:dc:4d:11:ff:57:86:bf:d1:
         7e:7e:15:6d:84:17:a6:c1:7c:34:89:52:1b:e5:c4:21:b4:e1:
         9a:d9:9b:93:f1:06:08:7c:58:95:6c:7a:7e:4e:5c:6c:77:59:
         32:99:d2:1e:0b:b8:dd:69:fc:38:23:07:19:78:60:30:fc:4d:
         e5:c9:2a:c0:ac:9c:e4:d8:f7:d2:4c:9b:7d:9e:71:62:70:59:
         30:af:53:02:9f:a6:60:7b:39:b5:02:67:d4:b4:8a:bc:3f:24:
         e1:bd:dc:21:e8:a1:bb:be:62:85:fd:a4:88:d1:eb:6b:d0:23:
         02:d8:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:32:59 2025 by rpki-client