Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
File:                     T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json)
Hash identifier:          pyr9dIDX+Te/SJeLfrQnx8WGX+4r36FBCO28u49w9sI=
Subject key identifier:   12:C2:1B:DE:9A:30:14:2C:B2:97:BC:B4:C2:03:ED:AD:4C:3E:D9:DA
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Certificate issuer:       /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
Manifest number:          018F
Signing time:             Sat 29 Mar 2025 03:04:15 +0000
Manifest this update:     Sat 29 Mar 2025 03:04:14 +0000
Manifest next update:     Sat 05 Apr 2025 03:04:14 +0000
Files and hashes:         1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: yrZYZ+ZBNx5gV+8wPZqTgde4iGpjGmdmArNa+KjSK34=)
                          2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=)
                          3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=)
                          4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF4A1
        Validity
            Not Before: Mar 29 03:04:14 2025 GMT
            Not After : Apr  5 03:04:14 2025 GMT
        Subject: CN=67e7632e-83d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bc:e1:0c:ee:30:c4:3e:a7:dd:01:3c:05:72:
                    bf:1e:ef:d2:85:3b:71:7a:ea:0a:0c:92:76:4d:57:
                    19:f4:4b:63:7c:ee:14:c7:24:18:f5:22:ed:03:cc:
                    f1:f2:99:ce:67:ec:5c:9b:98:2c:8c:cd:d0:aa:e8:
                    15:32:62:54:63:e2:8d:e8:da:8c:bd:10:06:8e:15:
                    39:a6:d7:2e:8d:3c:8c:99:f0:3f:1b:51:ef:53:05:
                    2a:23:d4:f1:3f:2d:47:02:64:e9:41:93:d1:7c:37:
                    44:d7:ca:eb:8a:d6:e8:ca:9c:d3:42:bb:8e:98:96:
                    75:04:bf:45:89:93:9b:df:25:2f:96:d8:60:d0:7b:
                    c1:c4:20:c1:fb:ff:0e:f9:04:a6:4d:a2:43:2a:3e:
                    22:e8:7f:aa:e9:b0:95:86:22:43:fb:17:f2:02:c3:
                    65:aa:e6:96:fb:de:97:44:83:c1:70:34:99:a8:75:
                    c4:17:29:92:55:d0:dc:90:11:56:f2:83:fb:d0:dd:
                    07:b0:d6:cc:f1:d1:24:04:dd:79:67:b7:58:e9:9a:
                    94:41:cd:e6:8a:14:82:ca:96:ae:af:4b:d6:c8:54:
                    36:69:f5:dc:56:55:25:5a:98:2e:c2:61:59:4e:62:
                    15:26:4f:9d:76:e9:28:d1:38:d7:61:24:06:43:13:
                    3a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C2:1B:DE:9A:30:14:2C:B2:97:BC:B4:C2:03:ED:AD:4C:3E:D9:DA
            X509v3 Authority Key Identifier:
                keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:0a:55:3e:8f:06:8c:45:2f:53:13:cd:c0:0e:a4:ac:b3:
         fe:ca:95:53:4a:6a:3a:c1:64:96:b5:50:d2:93:16:99:d9:da:
         c0:1a:3a:9f:12:ae:53:56:1c:e1:ec:4b:96:58:b0:51:23:e9:
         5e:0a:c8:bb:c6:23:d7:6e:ba:2d:47:81:49:0b:38:02:99:07:
         3f:bf:ec:3d:ff:27:cf:15:11:42:f5:b6:16:26:20:3a:ac:bc:
         aa:9d:5b:22:4f:65:29:24:d4:d4:4d:37:04:d3:83:76:c1:fc:
         a7:c9:01:21:9a:c9:a2:03:80:fd:d5:f2:e4:1b:9e:52:41:a0:
         8d:7d:28:96:31:1a:41:ac:d2:cc:a5:8a:08:af:b9:9b:97:37:
         fb:44:77:20:bb:97:7e:f2:f7:d2:5e:25:c2:7c:c9:6e:b9:63:
         38:b0:b3:0c:fa:4e:ed:b9:de:e5:3a:2e:eb:92:e7:9f:8d:a0:
         1e:ef:da:88:a7:ec:c9:9f:48:90:f5:d5:fb:e9:20:77:fe:bf:
         29:12:7f:b2:7e:1b:b1:b3:fc:ef:a8:c6:78:9a:f0:f4:ff:d4:
         72:cd:8f:2e:b6:d6:65:c4:1c:30:d0:89:b5:82:8d:3e:82:5b:
         d6:1e:2c:cd:01:2e:0b:7f:24:7f:93:3b:fb:73:49:55:34:69:
         b8:84:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:43:45 2025 by rpki-client