Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
File:                     buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json)
Hash identifier:          Usu9SMfFlaQIBOdKgEiObOu2TfAqa54Qrg32M1EJSDc=
Subject key identifier:   D6:40:C8:F9:47:74:A5:C9:0E:73:50:55:65:95:17:41:22:AE:BD:D8
Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
Certificate issuer:       /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Certificate serial:       05A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
Manifest number:          05A0
Signing time:             Fri 28 Mar 2025 23:28:16 +0000
Manifest this update:     Fri 28 Mar 2025 23:28:16 +0000
Manifest next update:     Fri 04 Apr 2025 23:28:16 +0000
Files and hashes:         1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: MzigRrbLr1O6XDSJgTizm9nGR5TbJhERbL4fZ0cu59g=)
                          2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: vvGapGaGNGJH4S/SUbpLb9IjES+dem4UiH0RpBmA3po=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446 (0x5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D5D
        Validity
            Not Before: Mar 28 23:28:16 2025 GMT
            Not After : Apr  4 23:28:16 2025 GMT
        Subject: CN=67e73090-ad09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:11:15:fa:ac:a2:4a:95:58:77:62:dc:ce:5e:
                    f6:e1:51:01:14:de:1f:fa:47:51:7b:79:aa:01:e7:
                    07:1c:86:23:0f:88:32:65:70:3d:10:bc:d7:51:0d:
                    19:1b:55:89:44:b4:ed:30:7f:5e:8c:88:1c:39:c4:
                    7a:81:c9:c4:fe:ea:da:09:38:3e:8e:94:06:bb:28:
                    7b:7e:bc:96:cc:0d:ab:b7:5a:a0:83:bd:12:45:93:
                    69:03:78:9b:7c:d7:2e:14:ed:ac:a8:49:b3:4c:d0:
                    96:bc:33:ec:12:22:2c:dd:81:5e:f6:5a:ae:e0:c8:
                    a7:23:9d:2a:93:f3:9e:c4:1b:cb:54:68:a1:cc:ae:
                    d6:c4:04:36:1c:cc:6c:0e:b9:2d:dd:e4:15:80:15:
                    7b:13:8a:0e:f4:04:cd:94:dd:3e:da:bf:d5:13:e6:
                    ef:11:1c:60:3f:e4:74:97:21:ea:95:6f:03:77:8a:
                    30:c5:63:90:1a:5b:e8:69:8b:6f:97:73:c0:7a:50:
                    b0:bf:ab:62:5d:86:43:c2:86:f9:2b:cc:bf:2e:8b:
                    88:87:a8:01:b1:60:43:38:da:dc:17:50:73:3f:36:
                    b0:3a:96:85:fa:6f:76:2d:68:56:d5:34:a5:7b:55:
                    91:fd:9a:f7:46:c4:bb:e9:89:0f:39:2a:b3:20:bc:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:40:C8:F9:47:74:A5:C9:0E:73:50:55:65:95:17:41:22:AE:BD:D8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:52:32:4e:bf:de:bb:cc:99:f1:d9:87:e2:77:5f:71:de:90:
         a8:10:79:e6:49:d6:e8:d9:79:a8:a3:c4:1f:6c:e7:4b:0d:7b:
         9b:99:eb:06:f4:5b:96:f8:26:93:09:41:7a:05:7f:9e:5d:12:
         38:4b:bf:4f:f0:19:68:d2:fb:41:70:6e:e7:ef:9b:61:ef:b9:
         57:de:69:d5:d3:2a:b9:a2:90:96:bb:31:e7:b2:c8:86:b7:64:
         71:9b:d3:e8:30:4b:97:d7:dc:38:b4:12:ae:32:1c:02:da:f2:
         ec:aa:3d:c9:3f:b5:ce:3a:bd:ca:b5:6f:10:09:69:02:33:ea:
         07:e8:3d:07:74:65:45:52:43:16:4c:40:1c:c3:50:0b:4a:85:
         58:42:6c:76:d7:0e:7f:cf:96:13:41:e8:90:c2:9e:24:5f:2a:
         15:bd:8a:fc:21:b1:ca:a4:0d:7f:2f:4e:6a:95:a1:64:c2:32:
         33:9f:d9:0c:86:27:e0:c3:01:f8:d5:04:ef:37:ac:2a:9c:58:
         50:15:d5:0d:28:8d:64:ad:e6:85:b9:24:2f:d6:4a:36:c5:21:
         1c:71:f3:2a:92:d1:90:b7:70:79:cf:23:d6:da:3f:51:de:4b:
         f8:b4:55:0a:6c:02:95:12:d2:94:45:5c:9c:27:26:8b:93:4c:
         29:13:06:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:09:04 2025 by rpki-client