Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File:                     A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier:          /VNOkjLiYek9GZBV772KO1bBLfqezuCtGpwVdCrfHrM=
Subject key identifier:   E4:BE:7F:E9:D3:F7:24:64:C6:54:B1:04:F0:60:25:D5:A4:EF:EE:9D
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer:       /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial:       0317
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number:          0311
Signing time:             Sat 29 Mar 2025 01:28:28 +0000
Manifest this update:     Sat 29 Mar 2025 01:28:27 +0000
Manifest next update:     Sat 05 Apr 2025 01:28:27 +0000
Files and hashes:         1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: +3/irM5/BjuOUEfsXIA6q/80p2E1m9SY5AcDlJc7REM=)
                          2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: 6JpjDff62wDTfk1naPEndRnRsudFZskUVlbVd/hGOl8=)
                          3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: +vJahyBsj/iwD6Uf+V5LVvoqUetqk1SrdYTgQvG1J8M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6DB3
        Validity
            Not Before: Mar 29 01:28:27 2025 GMT
            Not After : Apr  5 01:28:27 2025 GMT
        Subject: CN=67e74cbb-826c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:df:11:40:0d:3d:58:b4:3a:a0:a0:b2:94:
                    a6:ee:a9:3b:01:b3:3c:99:66:3e:a5:91:67:f2:e9:
                    9c:b5:bd:24:00:d5:d6:b1:38:e4:86:f3:56:cf:5b:
                    3c:58:8d:d7:0d:1d:fd:73:d7:27:c2:c6:32:9d:99:
                    17:18:cf:05:4b:a0:9a:5a:e4:36:2b:61:68:16:24:
                    76:1f:16:b1:49:7f:f3:27:d8:df:5b:d4:60:30:8c:
                    11:b7:ca:87:ea:6a:71:56:cc:30:12:62:0f:ca:76:
                    4e:10:b7:de:9f:d5:a6:27:b7:e9:04:a0:5e:c3:62:
                    ff:61:1f:7f:0c:dc:2d:ee:2f:f8:6e:a1:d0:c1:72:
                    4c:4a:40:cc:f1:b8:c1:5b:8a:e0:72:7b:25:b9:42:
                    dd:1d:18:e9:1e:53:58:05:01:c1:58:4e:eb:ae:72:
                    b2:a8:42:4e:d3:a3:e6:e1:e2:f8:43:03:af:16:c7:
                    65:17:78:33:ec:30:5e:0c:41:5f:5e:2e:f8:81:6f:
                    23:23:80:1f:d0:b4:cf:d7:ac:57:e0:37:c7:43:cb:
                    c3:24:34:6e:f7:a0:3b:c6:90:88:bc:6f:17:bf:c1:
                    87:c0:8c:61:8c:fa:b2:60:ad:2a:28:73:ed:da:5d:
                    2a:00:b8:5c:7a:bd:db:84:93:40:a3:d6:b0:14:ce:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BE:7F:E9:D3:F7:24:64:C6:54:B1:04:F0:60:25:D5:A4:EF:EE:9D
            X509v3 Authority Key Identifier:
                keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:61:07:d9:50:bc:bb:0a:a1:0d:5a:a2:76:b3:76:a3:19:14:
         f6:95:da:77:46:7a:76:18:04:28:8a:be:c5:e9:76:44:00:67:
         30:02:51:e3:7b:29:5c:97:9f:28:fa:e6:9e:13:a7:d3:ca:da:
         f0:fb:54:95:86:12:e9:ef:97:0c:57:b3:91:6b:4a:5d:17:b1:
         83:11:a8:54:f9:97:db:04:b4:be:cf:98:68:ab:15:14:08:1d:
         38:bb:8b:eb:ab:37:5c:f5:6c:7f:a5:43:de:a6:87:a9:88:72:
         41:52:37:d5:cd:98:2e:c9:3b:7b:f7:58:2a:25:83:db:b1:50:
         54:de:85:b2:44:e5:df:92:a3:92:cc:f4:79:7f:fe:d0:43:71:
         c4:ff:14:aa:d8:87:f8:c0:ab:82:96:4b:6c:14:5b:aa:ba:f4:
         ef:64:6b:11:6d:f8:1d:38:e5:92:b7:5d:32:38:64:dc:1c:54:
         f0:69:f8:18:82:81:f9:1f:2c:0d:06:0d:68:4a:7b:51:23:c0:
         77:bb:58:5b:14:18:61:fa:39:67:f7:09:ab:3f:fe:a4:f7:79:
         7e:a6:f8:0b:42:b9:90:07:4c:5d:01:24:a7:5a:82:92:01:9c:
         3b:e8:9d:36:c6:9f:61:fc:97:69:44:41:9e:78:77:75:cf:4f:
         ed:e7:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:40:35 2025 by rpki-client