Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File:                     rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier:          49lDxdQZq/axXwx4WAAx/ZpD8BWEg8alm5knW1UTwq0=
Subject key identifier:   75:9C:D4:61:29:47:B3:D3:98:A7:38:5A:76:A1:35:65:EF:6E:83:5B
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       0500
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number:          04EA
Signing time:             Fri 28 Mar 2025 16:29:59 +0000
Manifest this update:     Fri 28 Mar 2025 16:29:58 +0000
Manifest next update:     Fri 04 Apr 2025 16:29:58 +0000
Files and hashes:         1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: ZgMiKKjQnsG8IqihFz9QKbEhFJxDhIjvWRUxppWiLVs=)
                          2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: yR/rS2v+MnuPsp4IAeWDDgPbPiNnjwU9wDh4QYZV4SU=)
                          3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: qkuJyiuag7r0VmHzzxIeNNPZvE1YemZEbkXs9TYwx5o=)
                          4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: YZwNutRVemyQTlte1eEv/AcDXWm1xtlx4204L/kTObo=)
                          5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: ACLXZnrak+BWFZVdvvziA50vZItebg8EqCvB342Th1I=)
                          6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: Cywfb2Rnt+MB9wFrcD0/BbNel0gnNnVhinHv2K8l9OM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09
        Validity
            Not Before: Mar 28 16:29:58 2025 GMT
            Not After : Apr  4 16:29:58 2025 GMT
        Subject: CN=67e6ce86-7de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:f3:54:b4:c2:82:b0:34:03:e0:4c:48:b2:
                    32:0f:71:6d:40:71:25:ca:e3:28:eb:d7:2a:db:3f:
                    b5:79:dd:e9:12:72:12:bb:fc:25:ab:36:cd:90:9b:
                    bb:46:f8:63:02:b0:a0:50:9d:0a:38:67:e3:61:39:
                    dd:1f:11:c5:5d:b4:3a:fd:8b:a6:b3:f2:9d:16:c8:
                    fc:48:f7:1b:f0:9e:6e:f1:90:c3:23:16:3b:37:2b:
                    ee:db:1e:a6:5f:17:d2:b6:df:31:30:f4:cd:7f:38:
                    2e:9d:7a:e9:71:b1:3e:df:23:e8:b7:62:44:4e:b7:
                    38:08:3f:70:24:e4:77:5d:97:39:29:af:ad:05:6b:
                    2c:39:87:1e:13:be:b3:d0:37:f2:21:03:a8:d3:cd:
                    3a:1d:07:7a:b5:d0:fe:96:2e:80:87:e9:b0:17:c5:
                    81:40:a0:27:2d:e0:e6:c7:df:cc:fc:e9:9f:f9:07:
                    cd:ec:f8:61:fe:80:e7:b2:db:50:e6:4c:53:e5:60:
                    b4:f0:ff:26:2b:b7:c8:e0:a9:f6:b4:2e:b6:79:7b:
                    50:36:0f:0e:93:00:81:76:d7:85:c5:dc:ac:96:21:
                    67:ed:e7:67:5e:1e:62:3d:5d:e9:d4:70:f0:ac:ee:
                    4d:1d:5d:77:53:c9:74:c2:7b:c8:ed:62:d8:75:b4:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9C:D4:61:29:47:B3:D3:98:A7:38:5A:76:A1:35:65:EF:6E:83:5B
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:59:8c:2a:d5:93:bb:06:37:3b:7f:fd:6d:51:7a:6e:86:33:
         e3:79:07:9d:6b:e7:8e:20:47:2d:85:f3:6f:71:fd:15:69:24:
         13:fc:c7:18:bb:16:59:ea:0b:46:0e:b1:43:03:84:d9:f7:0f:
         2f:79:70:0c:6b:4a:a2:0a:54:76:69:7f:b3:82:ed:6c:6d:1a:
         03:da:31:2d:3c:7c:a3:a4:ad:49:01:35:9c:1f:3b:4d:4e:76:
         1d:99:41:c2:cd:e6:97:7d:ff:45:d0:bf:79:40:92:de:82:38:
         fd:bf:f7:f3:e3:38:22:4d:a5:5c:69:6a:60:bd:78:ac:0f:f5:
         e5:58:2b:61:e6:43:d8:58:c5:e1:fd:41:d6:3b:04:ff:0d:37:
         42:e4:62:08:b2:50:51:6e:85:85:59:9a:fc:80:e6:b4:e7:c2:
         2e:25:f7:19:a8:f1:67:1c:74:48:b0:28:29:19:69:c6:e9:17:
         07:fb:09:82:3d:3a:5d:cc:55:63:20:8c:04:12:82:2b:e3:6e:
         41:04:ad:af:08:ae:6a:08:ac:bd:1c:e7:cb:40:ee:7e:10:c8:
         b8:f0:53:7b:61:05:d1:41:96:e5:f3:0f:71:ca:e7:2b:45:02:
         21:71:5a:7e:3f:4e:68:9b:3d:65:5e:41:0c:90:60:d3:49:2a:
         fa:ca:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:24 2025 by rpki-client