Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
File:                     mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json)
Hash identifier:          k3rBBgIxpWnRK5dn4LOz4Y8/tRLDEF0OwBaGgPIT5KM=
Subject key identifier:   BC:3B:46:50:E8:D6:C7:A7:AC:B0:FA:E6:A1:01:57:E0:1A:D9:22:36
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Certificate issuer:       /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial:       0471
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
Manifest number:          0465
Signing time:             Sat 29 Mar 2025 00:26:18 +0000
Manifest this update:     Sat 29 Mar 2025 00:26:18 +0000
Manifest next update:     Sat 05 Apr 2025 00:26:18 +0000
Files and hashes:         1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: 0Uz6sgY455RmGJcPf5BqplFXyTgUBVpvBuO4HBtnzGY=)
                          2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=)
                          3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D774B
        Validity
            Not Before: Mar 29 00:26:18 2025 GMT
            Not After : Apr  5 00:26:18 2025 GMT
        Subject: CN=67e73e2a-ef01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:27:1c:93:54:9e:99:98:44:5d:ae:57:92:07:
                    67:4e:94:c1:73:e1:ec:ad:20:0c:a3:a3:a0:10:81:
                    24:37:e7:fb:7f:d2:81:9a:99:70:e7:a3:4c:31:cf:
                    31:c5:23:30:29:36:48:fd:d9:c5:2b:5e:fd:11:b0:
                    ab:b3:8b:88:cc:75:f1:bc:de:e0:10:0e:3b:87:0c:
                    d1:5c:c0:b6:33:17:59:33:22:a4:02:f9:97:08:85:
                    f9:ba:22:27:bc:f9:20:86:99:9e:4a:0f:d4:ce:6a:
                    e1:ba:a5:e3:95:03:a5:82:7f:7b:6a:e4:dd:f5:ac:
                    2c:8b:88:82:d2:0b:6f:50:72:ab:f1:98:c7:1e:4e:
                    de:7e:a8:48:54:6a:30:46:0b:33:c1:66:97:68:7f:
                    96:6f:34:db:4a:1c:b2:ca:65:e5:64:68:b6:ed:af:
                    2a:57:bf:2b:6f:15:8a:7f:57:0a:3c:aa:34:48:93:
                    b9:da:5b:0e:a9:28:70:4a:9e:28:e7:af:a4:b5:12:
                    38:b1:42:bd:a0:21:f7:7d:7a:e5:0d:c4:e3:e6:55:
                    a5:17:db:60:89:0b:ce:57:91:3d:4e:77:cb:de:ad:
                    69:e5:fc:db:3c:e3:49:c7:91:76:f0:29:f4:48:05:
                    0e:d9:31:19:76:1f:0c:06:78:3d:ca:cb:b1:08:f0:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3B:46:50:E8:D6:C7:A7:AC:B0:FA:E6:A1:01:57:E0:1A:D9:22:36
            X509v3 Authority Key Identifier:
                keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e8:60:fc:3e:44:bf:74:af:3e:b2:9f:28:de:f6:3c:64:49:
         7a:58:98:8c:f8:58:b5:d6:9b:45:c6:1d:46:64:7c:3d:38:37:
         96:e2:ac:3d:88:ac:67:c5:29:ca:12:01:c5:2c:ed:9f:e2:39:
         6a:30:49:47:0a:df:4e:a3:19:ee:dc:08:c5:21:3d:cd:67:7a:
         83:45:05:11:e1:96:72:aa:26:ef:05:2e:15:95:f1:df:fd:0b:
         0e:94:f6:c1:55:da:29:37:ba:d7:3d:b0:d7:37:96:7a:16:92:
         f9:6b:d5:9d:b3:98:a0:95:12:52:7b:7c:1c:e0:6a:f4:60:b6:
         81:4c:17:b0:ba:f9:3a:fe:44:a8:52:2d:70:e5:f4:99:4e:46:
         d2:c7:60:00:4b:38:bc:78:fc:2c:f3:78:c0:12:0a:8a:c7:ce:
         33:47:3c:95:2a:0c:ee:58:80:67:fc:60:85:41:16:d7:c4:8c:
         b9:05:21:af:fd:af:2e:c7:ce:09:a9:48:56:8a:2e:9d:7f:5f:
         b8:54:4a:99:90:0d:7f:6d:fb:89:b3:df:79:6d:e1:fa:85:29:
         55:1c:5e:93:df:08:b2:5d:2f:87:8e:9c:e2:5e:fa:e5:52:29:
         2c:ce:05:ae:1e:d2:4b:84:bc:b0:35:18:35:ab:9d:19:ef:52:
         36:a1:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:55 2025 by rpki-client