Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
File:                     dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json)
Hash identifier:          T+pYJvWcbCO/KXrtF9fYFvGmKPXOuq6vIZMURL3d7SU=
Subject key identifier:   55:2B:C1:9E:EA:0E:42:02:56:13:78:CB:F3:1A:24:28:7D:79:45:E5
Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
Certificate issuer:       /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
Manifest number:          94
Signing time:             Fri 31 Jan 2025 05:30:23 +0000
Manifest this update:     Fri 31 Jan 2025 05:30:23 +0000
Manifest next update:     Fri 07 Feb 2025 05:30:23 +0000
Files and hashes:         1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: 35mqXn/CaHTSY3YYbvowoVg9huwZW+Q7VaE17mDtj64=)
                          2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: SVtEtagldlvERL46wSvdbr/iqqig+8tKes1xS1nFqcs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
        Validity
            Not Before: Jan 31 05:30:23 2025 GMT
            Not After : Feb  7 05:30:23 2025 GMT
        Subject: CN=679c5fef-bfc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:3d:bb:bf:6c:91:3a:c6:6f:f1:65:d5:94:
                    15:f8:27:33:49:42:66:44:bd:14:4e:16:c8:19:06:
                    cc:53:d9:ea:f6:b9:55:59:da:06:89:e6:5f:7d:09:
                    35:49:0e:c0:29:07:7c:14:65:03:ce:ca:62:a5:00:
                    c9:21:46:ae:64:8a:ba:5c:50:67:1b:55:7e:99:a0:
                    63:27:aa:11:2e:22:3b:3f:17:06:e4:94:50:7b:e5:
                    ed:29:c1:8a:55:95:62:c5:d0:59:71:47:61:36:80:
                    2a:78:4b:44:9c:e9:2f:85:00:ff:f6:cc:bb:7d:90:
                    12:e0:7c:12:0a:ba:eb:12:65:08:35:55:48:63:bc:
                    56:86:5e:82:71:9b:f5:b3:e0:c7:db:d1:f5:50:f8:
                    44:ba:13:37:56:41:88:93:9a:ff:f4:dd:56:44:36:
                    9c:58:6f:4e:4f:6e:df:36:69:47:cd:7d:8a:b5:c7:
                    06:b5:2b:82:d9:99:e0:a2:a4:00:1d:57:85:be:77:
                    6f:77:89:10:d1:05:a5:71:cb:2d:14:d6:49:37:f4:
                    f2:e9:60:6d:39:96:ac:fd:3c:69:4b:1b:98:10:bc:
                    d6:49:9f:6e:fe:36:05:2a:a3:53:32:5b:90:57:35:
                    eb:bf:61:06:cb:dd:f7:ac:74:4c:c4:07:09:66:50:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2B:C1:9E:EA:0E:42:02:56:13:78:CB:F3:1A:24:28:7D:79:45:E5
            X509v3 Authority Key Identifier:
                keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:32:cb:04:67:ef:06:06:a1:c4:3c:7d:2f:64:f3:85:b8:1c:
         a9:a4:a1:08:07:00:0a:bb:14:ef:eb:fc:af:ae:b1:29:23:fc:
         b0:15:3f:b4:12:94:e7:03:7b:ed:30:e3:aa:8a:7a:f7:73:06:
         3f:83:cf:1f:76:ad:fd:02:58:c8:f7:f8:94:72:15:5c:a3:a2:
         83:71:09:a0:14:a8:3c:80:0d:5d:dc:e0:59:d4:c4:75:79:70:
         60:8d:23:09:f3:d5:af:d1:34:61:d8:cc:1d:55:0b:c7:23:5f:
         5d:51:b8:5a:b4:a4:a2:24:3c:1a:f9:88:47:04:af:55:fd:2f:
         ef:b8:df:af:4c:3c:41:46:4b:30:e1:33:c1:e1:69:23:50:79:
         53:da:5f:b5:81:e1:62:bd:12:99:2c:bb:93:36:0c:28:85:e7:
         69:ac:98:6e:cb:76:94:59:2f:2b:d8:c4:9a:b6:2f:e1:a6:2a:
         c6:f2:dc:dc:87:ea:42:ff:97:b0:ca:78:47:0c:9b:22:26:a1:
         a7:32:20:73:6c:f8:7c:fa:fe:7c:6a:6c:69:0b:1c:dc:66:03:
         1e:00:d8:49:cc:19:27:38:22:f5:2e:6b:43:a6:28:2c:9b:55:
         aa:02:cb:00:6b:3f:68:7d:21:45:dd:73:d6:2c:a9:8c:a9:52:
         3d:a4:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:08 2025 by rpki-client