Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
File:                     eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json)
Hash identifier:          vwmb0i5KnCxE0AAnH1z/ZLdOfrKlU2vSIg1GQOlVQg8=
Subject key identifier:   96:AF:89:CE:69:01:02:C1:35:67:D5:43:81:14:F7:57:20:35:0A:4E
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       111B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
Manifest number:          10A4
Signing time:             Fri 28 Mar 2025 17:30:39 +0000
Manifest this update:     Fri 28 Mar 2025 17:30:38 +0000
Manifest next update:     Fri 04 Apr 2025 17:30:38 +0000
Files and hashes:         1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: mu4AedvYY1tkH4q3Cb/oAI59xsIlRmhPmlENbGZkmsE=)
                          2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 0hHBEEm/HjKSHJ/c4EXw8v/RaaEISVOgCOoGPVnERWM=)
                          3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: QIvHx1lGnmXU4nP1voDiDEApQWHWZM1DlOchOnP3WOw=)
                          4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: WxZPI2oPHz7gN6E65pAyKQEG7K9nNAiq+cLE8EnqxTo=)
                          5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: HF1+RDAS1FlFEU58BjvwPd+WQDRYReOKZwjB4KX5zdY=)
                          6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: UQYK8juqwFeTX1mHIM8DFtTw3S8uGHJwSP9wa1sR0D8=)
                          7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: FNiise5HlPMqJU88Oo2OfD6hA2hia5LOkeE3rDOQyAY=)
                          8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: mWBAiapeYfnVND9Po9P8sDo86htKY8o5XvxxC+Goraw=)
                          9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: 1Pv3exbH92FT9rIA1u787Oh2A+4UHd934ih4tmuh6mI=)
                          10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 3MSFHXUSgf0AKKXZWKrpEa1VTfu7VTdMazqelLMvGYM=)
                          11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: ySlmtl2wcCW6gEkXb9JScRCk7KmQx2Og/ntmePBVts4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4379 (0x111b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3
        Validity
            Not Before: Mar 28 17:30:38 2025 GMT
            Not After : Apr  4 17:30:38 2025 GMT
        Subject: CN=67e6dcbf-e706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c7:ae:a2:60:96:06:d2:1a:3b:7c:67:71:1a:
                    75:4d:18:4a:3d:d0:7c:56:09:3c:a6:73:73:dc:11:
                    6b:fc:f7:cb:a5:75:38:a0:ce:36:4c:7c:fe:c7:c3:
                    06:a3:fc:ac:69:20:02:8f:a0:a6:a8:3d:52:dc:67:
                    56:8a:0b:8c:30:55:b9:e8:80:1a:25:d2:3c:18:66:
                    7a:00:f6:5a:d2:28:7d:50:46:72:6a:0f:74:a8:f0:
                    55:7b:b5:19:ea:ce:31:f8:60:18:f0:11:02:c9:c7:
                    f6:4c:f1:09:a3:65:57:51:0f:90:32:ef:88:71:c3:
                    61:4a:51:97:9a:c7:c9:6d:fb:f2:33:c8:8c:53:f3:
                    d5:9c:51:ed:95:3d:ae:58:6d:8a:01:04:73:f9:38:
                    e1:a8:ad:7e:28:de:7c:dd:17:fa:9f:3b:62:4d:ce:
                    fd:5f:e6:75:cc:1e:0a:45:58:a5:50:02:5a:1c:8e:
                    a4:59:a4:5d:3d:87:b5:61:91:3b:e6:75:2a:fb:af:
                    b3:39:5d:19:d0:b4:15:16:a8:b8:a1:9c:82:29:5b:
                    2b:cf:94:88:ed:08:ed:c1:b2:2f:7c:b1:f0:c7:4b:
                    e3:a6:33:71:38:54:60:3c:48:8b:72:d3:02:87:95:
                    83:c0:ed:12:4f:9f:71:08:ee:20:d6:5f:e8:36:8c:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AF:89:CE:69:01:02:C1:35:67:D5:43:81:14:F7:57:20:35:0A:4E
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d3:ea:4a:cd:17:76:94:86:ca:af:b4:0d:c0:a7:f5:33:88:
         ca:3c:a9:a5:46:c5:ed:b9:14:4a:b6:ff:ec:8e:ed:f1:2e:de:
         c4:12:39:dc:59:6a:27:b5:5c:a2:29:7c:81:72:9b:6d:2e:fa:
         ff:29:9f:78:1e:44:07:0b:6a:ab:d3:35:80:c5:7e:6b:f7:7f:
         55:cf:d2:0c:91:4e:de:c5:97:62:9c:31:3b:54:4d:04:e3:2a:
         66:dc:1c:e1:63:e0:f6:c4:f7:82:33:5a:30:8a:86:69:ad:fe:
         1e:e4:a8:1c:df:42:cc:af:a1:bb:69:01:e5:62:4a:45:ee:ed:
         fb:dd:b5:4d:a1:4b:4c:09:3a:2d:c2:bb:93:9c:d3:41:09:88:
         34:8c:36:bc:93:9a:1d:af:8c:c6:18:4f:25:62:f0:a5:75:b5:
         9f:cf:9a:7c:b9:76:ec:f1:78:f3:cb:aa:88:8f:36:f5:29:00:
         e4:c9:17:57:74:16:79:d1:b4:6e:ff:f4:f9:3c:8e:00:0a:37:
         94:43:bf:8d:10:5e:61:a1:dd:11:78:86:05:72:26:8d:fc:0b:
         5c:82:64:7d:f0:32:56:6e:2c:c3:cb:c1:18:bb:cc:74:6d:29:
         9a:2c:5a:16:aa:20:b4:3c:ff:20:38:1e:8a:6d:dc:75:5b:c5:
         8e:73:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:08 2025 by rpki-client