Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File:                     IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier:          919hkrBNPbyhgkxc/EfxTjnwu0XPB5F0uLKlgDJ9tPo=
Subject key identifier:   DA:2D:D5:19:1D:5D:DC:B0:54:75:22:0C:87:58:10:55:86:34:A0:79
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       0836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number:          0801
Signing time:             Fri 28 Mar 2025 21:16:41 +0000
Manifest this update:     Fri 28 Mar 2025 21:16:41 +0000
Manifest next update:     Fri 04 Apr 2025 21:16:41 +0000
Files and hashes:         1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: h3kyT/01c88jUbmSdkeqORGGlAhUc728pj2fYH+fgGI=)
                          2: EF40C4AC404611EFA2014651C4F9AE02.roa (hash: czaYuAZrmltxjeFq6mD06OZKMChDyKz2TsFDBFMIxYw=)
                          3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: IR0gL9HuGQPasCSDeDXOONGQSnX5FqddD0h9jerJFTk=)
                          4: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: RgPF5melWGZf5AFZ9hv+NJPKC/EOsjcNRxGMLnUAhvk=)
                          5: 35D16082404911EFBC4C610EC4F9AE02.roa (hash: CZyYnpg8fZRv7/01XkAyfUiNYVCaEIGt11t+Ww7CLyk=)
                          6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: 5tsj3TAsFxb8qTqVXGn9He+Eq077vpR4YIaSiSHaTqQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9
        Validity
            Not Before: Mar 28 21:16:41 2025 GMT
            Not After : Apr  4 21:16:41 2025 GMT
        Subject: CN=67e711b9-beba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:26:7d:6e:04:2f:0d:71:ca:65:76:37:39:
                    b5:b4:83:55:9f:98:95:f0:72:3e:2d:08:9f:10:ad:
                    96:6a:91:a8:95:a4:8b:f0:de:3d:d2:c9:c8:09:f5:
                    04:03:cc:a5:0f:89:39:d0:76:a4:9c:c6:01:62:e5:
                    2e:2c:eb:36:73:28:ee:f3:99:34:88:06:b9:c0:1f:
                    30:5c:8e:53:f4:ec:69:d1:d8:86:01:b6:4a:65:9b:
                    fc:2f:e6:17:bf:3e:e1:19:6a:46:4e:cd:a9:57:2c:
                    00:ac:e0:53:2d:d3:d2:e6:c2:1b:c1:8a:76:72:84:
                    b0:ec:a5:f7:ec:92:02:ca:64:04:a0:f0:77:51:e3:
                    0f:cb:17:ec:b7:7b:4c:5c:6a:0e:20:57:8a:55:1c:
                    92:43:e7:e4:94:c9:47:26:32:cd:77:4a:6e:1a:a6:
                    88:18:89:a7:58:50:5e:d8:d5:88:d1:de:77:df:e5:
                    8b:93:f2:df:d7:25:9f:99:0a:2e:b6:f1:1b:7f:08:
                    96:ea:c7:47:49:c1:10:44:54:ea:f5:ba:5c:c4:4d:
                    1e:97:0a:f3:40:85:07:66:5d:ca:ee:4a:0a:b1:7e:
                    c1:0b:ae:46:f7:c0:44:30:fd:ac:39:70:f1:0d:1b:
                    64:16:2c:55:09:9c:46:3b:39:f6:5e:5a:26:90:14:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2D:D5:19:1D:5D:DC:B0:54:75:22:0C:87:58:10:55:86:34:A0:79
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:a3:f5:b0:dd:85:fc:e1:8f:33:88:a7:de:b3:41:37:e9:
         91:11:68:80:19:bc:a3:dd:56:09:c1:e3:1c:aa:c4:81:07:e9:
         2a:4a:79:27:8a:9a:3c:a4:ee:b5:f1:4b:03:02:da:05:28:62:
         f9:8a:8d:c8:e7:2d:42:74:85:46:24:19:4d:94:c6:d7:29:67:
         a7:fa:03:b1:f4:aa:8d:3b:b1:85:1a:8d:1a:8c:c3:24:22:87:
         5c:0f:cc:e8:97:b8:0b:32:cf:25:18:da:16:e1:d1:03:ab:39:
         f5:85:b2:0b:78:19:50:be:d5:5e:21:eb:49:09:91:a6:f4:1c:
         84:11:0a:fb:02:41:65:47:70:61:3d:04:f7:b5:7b:d0:0a:6d:
         fd:b7:b1:d9:7a:ef:47:79:2c:9e:b7:64:81:ca:29:3c:92:3a:
         84:97:b8:12:99:72:cd:34:d5:21:a7:80:9c:21:b6:cf:da:df:
         d4:a6:47:42:f1:01:bc:60:22:ee:b5:49:ce:16:bc:35:2b:17:
         ba:d9:a3:47:31:11:09:a9:db:f7:3e:24:11:a4:d1:1a:50:78:
         30:5e:31:04:8e:4c:44:01:00:f4:21:82:a2:b7:15:04:af:28:
         ed:8c:16:03:87:97:a3:fc:2a:3a:a7:09:8b:e8:22:a0:54:c9:
         59:e3:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:33 2025 by rpki-client