Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
File:                     Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json)
Hash identifier:          /gg2LqPiKeSGQa7BUzk0k6HisLScBwmoknvDvq93Wfo=
Subject key identifier:   B4:27:91:0E:E6:CC:AA:AF:C4:A4:C3:BC:D9:1F:DA:0B:99:B3:4F:1D
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Certificate issuer:       /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial:       1911
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
Manifest number:          18FE
Signing time:             Fri 28 Mar 2025 16:33:29 +0000
Manifest this update:     Fri 28 Mar 2025 16:33:28 +0000
Manifest next update:     Fri 04 Apr 2025 16:33:28 +0000
Files and hashes:         1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: M4744zgLUamykyp1NtKxC45KkDkGBcM/UeHgGGMYFm8=)
                          2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA=)
                          3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: i9JFPAUn7PS/i/yxYDte5hNt2lU/GYfFJVKLS5WTzUc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6417 (0x1911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBA26
        Validity
            Not Before: Mar 28 16:33:28 2025 GMT
            Not After : Apr  4 16:33:28 2025 GMT
        Subject: CN=67e6cf58-a0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ec:47:78:b9:ce:4d:d6:ca:98:37:50:73:6a:
                    cf:5c:81:64:20:06:11:5a:33:80:14:5a:91:2b:ad:
                    0f:44:a4:77:1d:d7:a1:b7:89:6d:de:5c:5b:93:f6:
                    2f:91:85:c4:de:2a:26:cb:8b:85:79:d6:14:14:35:
                    2f:94:f3:98:29:4c:ce:fb:7d:b5:79:dd:e1:59:e4:
                    97:de:d3:db:ed:70:b4:d3:72:a4:ef:c3:42:87:14:
                    49:03:c4:28:c6:70:35:3c:6a:d3:d9:22:62:53:2f:
                    ec:37:0f:d3:ab:b9:c8:d3:22:b0:f9:df:93:d8:a6:
                    2a:8f:a1:0e:c8:e3:13:06:75:51:1d:11:97:ab:83:
                    45:e1:a2:45:c5:eb:81:9e:9c:32:f7:ae:40:58:25:
                    80:1e:32:5a:d8:da:fd:f9:be:a3:fb:4f:21:57:dc:
                    f8:b0:df:75:30:8d:cf:1e:22:cb:7a:4b:19:6b:18:
                    0a:8e:c2:6c:86:6e:30:f1:0b:c7:d5:c5:2a:38:cf:
                    4d:4d:56:d2:f5:42:f4:d7:ae:04:02:85:22:66:9f:
                    75:2a:59:d6:92:b9:84:9d:6c:2c:46:3e:67:4d:79:
                    26:ab:09:8b:2e:4c:81:15:d7:47:5e:67:b7:c2:e5:
                    3a:a0:b3:cc:2c:b0:16:a1:c0:d3:cf:9f:a7:d1:ea:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:27:91:0E:E6:CC:AA:AF:C4:A4:C3:BC:D9:1F:DA:0B:99:B3:4F:1D
            X509v3 Authority Key Identifier:
                keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a0:d2:f9:e9:e5:cd:26:fa:a9:fe:e7:fe:85:45:45:11:37:
         91:11:83:2b:ea:9b:d0:82:22:41:33:ad:4d:b7:14:65:11:84:
         39:5b:c4:4d:cf:08:4d:3a:a5:98:54:ea:b3:4f:1e:fc:25:c7:
         f0:2b:91:f3:97:6a:84:59:e1:30:1d:53:88:61:4e:b6:1d:01:
         51:fd:34:a1:d6:f1:2b:f9:26:ab:5f:34:40:6a:2a:35:cd:27:
         00:9d:cd:79:09:58:f6:5e:a7:04:06:65:bd:6a:7a:13:b1:bb:
         a7:0b:ce:05:7f:0f:57:1b:60:80:ac:97:45:9e:cf:0e:fe:6e:
         9b:21:2f:51:0f:07:26:29:0d:38:47:04:1c:60:e8:64:4a:8f:
         88:04:4b:fd:bc:89:b9:f1:ed:f5:87:3e:a5:20:a4:d8:56:24:
         f1:db:d1:59:b6:0e:07:01:d2:c8:8f:ba:b5:8d:a8:28:55:38:
         cc:0e:0a:6d:5b:5f:ac:3d:ec:ef:54:73:a9:8e:00:9b:d7:02:
         d2:71:39:55:84:96:8e:74:48:76:33:15:c4:8e:af:d8:c1:cf:
         d7:02:bd:ca:83:7e:a9:0e:08:50:47:f9:53:be:38:94:c3:8a:
         cc:f2:49:8b:4a:e7:9b:34:a9:b5:e3:2a:ad:5b:ef:45:c2:a9:
         53:d2:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:41:30 2025 by rpki-client