Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
File:                     ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json)
Hash identifier:          +GinAL9f5mQpwgCws/rA82GfLc45V0l/GZsh+xj7pe0=
Subject key identifier:   25:53:C1:E1:E7:1B:22:11:98:1F:31:36:38:33:10:35:88:BB:E1:E7
Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7
Certificate issuer:       /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
Certificate serial:       34AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
Manifest number:          348F
Signing time:             Fri 28 Mar 2025 14:46:02 +0000
Manifest this update:     Fri 28 Mar 2025 14:46:02 +0000
Manifest next update:     Fri 04 Apr 2025 14:46:02 +0000
Files and hashes:         1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: oJBkrqIYM7+eec77PImpELbacYsfgjx/v5Ub5Q565Ws=)
                          2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: Gk1l67dg5FNqnZfalpzkFwLJz8/jIZg966YRagGgh6M=)
                          3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: hQzBarqE7y1xhvVkKj4n1pe4CbqvYvdULHNvM+oOS2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13487 (0x34af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6FC3
        Validity
            Not Before: Mar 28 14:46:02 2025 GMT
            Not After : Apr  4 14:46:02 2025 GMT
        Subject: CN=67e6b62a-4e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d4:4b:7c:44:51:c3:ba:d2:73:5c:bf:fe:e6:
                    34:65:24:e2:54:dd:db:78:4f:e9:e0:06:99:fc:e2:
                    b4:e1:00:fc:ee:fe:7a:44:ed:ae:3a:96:26:f3:c7:
                    a5:ad:7f:0b:a1:50:9b:ec:a2:01:f1:0e:5f:1f:4f:
                    f5:e2:54:0a:01:29:74:b9:de:70:10:aa:e5:16:21:
                    d2:ba:25:c9:f3:fb:bb:5f:f1:f2:15:26:86:f2:7f:
                    24:15:09:de:fa:a9:22:f6:5c:f8:f1:eb:cc:fd:21:
                    5c:88:8f:af:bc:a5:0c:22:c6:b2:4e:4d:50:af:db:
                    7d:d8:d0:50:1c:b4:df:5a:0c:4f:65:dd:3e:d3:bd:
                    be:f5:6d:fc:33:4f:0a:61:5a:50:e4:9a:74:a3:42:
                    dc:b8:51:0d:27:b7:2e:cd:d2:e8:c9:f0:ef:61:5a:
                    f1:80:26:a1:99:76:64:0d:6a:05:24:fb:47:ce:6d:
                    ef:70:98:32:ab:a1:55:db:9a:11:2f:c4:c4:5f:b2:
                    37:3d:82:2a:bc:45:21:62:40:50:d9:fa:82:f8:ca:
                    29:96:51:8b:61:15:ba:24:18:d5:58:4b:fc:93:4a:
                    2c:d1:f3:eb:ba:64:28:55:73:57:1b:bb:e2:d9:bf:
                    ce:75:fc:33:6c:8c:d8:f8:57:42:e3:29:0f:c8:c5:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:53:C1:E1:E7:1B:22:11:98:1F:31:36:38:33:10:35:88:BB:E1:E7
            X509v3 Authority Key Identifier:
                keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d0:cb:0c:6e:f8:4c:62:ac:52:af:90:71:9a:d0:31:84:df:
         8c:5b:02:9b:0f:58:89:87:99:84:25:28:ef:35:21:32:fd:e3:
         3f:55:44:db:7e:e0:42:d6:fa:02:92:44:c4:a0:02:27:98:9b:
         11:71:8c:79:24:b3:df:ea:72:c5:75:79:48:9d:c1:ae:bd:82:
         4f:8a:48:b4:ec:39:8f:3c:42:a4:1b:0c:0b:ba:c2:bc:71:86:
         db:7e:41:c8:a8:a6:14:f8:66:93:55:d2:9e:ab:01:5d:ea:4e:
         6b:39:d6:f2:30:5a:91:b7:16:84:f5:8e:07:27:b6:60:6f:08:
         68:6f:35:4a:04:94:91:5a:7d:96:45:12:46:36:11:5e:0f:63:
         c0:01:d3:b5:39:e9:0e:e7:9c:df:e9:43:07:5f:c0:11:80:1e:
         6f:0e:c9:81:9c:ce:15:1e:2c:a7:0f:4e:b6:19:99:16:1d:da:
         b8:07:4a:1b:18:e1:79:e4:67:f0:c3:8f:83:9b:3a:a9:8a:9b:
         be:3e:9b:91:3c:25:e5:63:92:ae:f2:a5:af:b0:11:d2:db:77:
         c3:90:c3:03:b4:4e:6b:de:0c:57:94:01:0b:0b:6d:b8:ef:94:
         bd:de:14:c3:9f:f2:fc:73:6f:01:94:54:f2:71:b8:75:d2:00:
         77:50:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:54:57 2025 by rpki-client