Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
File:                     Yl7U298nRjIvVZOFco6Ojl_4usI.mft (raw, json)
Hash identifier:          QyEcecHHSTuHAjGCuz266Z5CxRERwVui7ATLO76cC3g=
Subject key identifier:   F9:E9:70:B8:62:23:91:CF:86:D7:FC:4A:C1:3F:8F:55:FB:7D:8A:D2
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Certificate issuer:       /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial:       074C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
Manifest number:          0740
Signing time:             Thu 30 Jan 2025 21:36:34 +0000
Manifest this update:     Thu 30 Jan 2025 21:36:34 +0000
Manifest next update:     Thu 06 Feb 2025 21:36:34 +0000
Files and hashes:         1: Yl7U298nRjIvVZOFco6Ojl_4usI.crl (hash: GOjSXCz59GzpVV1ceXrwDpjwG/MS77sFq0J7GbvPvLA=)
                          2: 9050992ACE5511EF877FEC0EC4F9AE02.roa (hash: WhASUO2rn82E9eTtKy6K0UYNm6vsNn6eqXgBxi2qBDM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
        Validity
            Not Before: Jan 30 21:36:34 2025 GMT
            Not After : Feb  6 21:36:34 2025 GMT
        Subject: CN=679bf0e2-08c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:c1:64:d2:ee:86:06:e3:08:c1:82:1a:ce:
                    00:97:ea:ca:fe:c5:df:69:8b:eb:74:ee:7f:78:94:
                    27:7d:ed:7c:cb:4f:81:4e:f2:d6:0f:df:01:37:db:
                    cd:71:9e:d3:93:d6:49:63:e0:b6:47:f9:63:70:ac:
                    d8:50:fe:e6:9b:85:61:d2:c7:c7:1a:09:48:d2:14:
                    40:5e:ad:3e:af:a2:fb:75:70:91:62:d4:af:5e:7a:
                    e1:74:d7:8e:25:1d:b4:86:6f:c5:5e:21:82:b4:8f:
                    22:c9:b8:bf:18:d4:56:34:59:c3:4b:8b:dd:b2:a8:
                    df:a0:f2:f3:9c:95:a4:80:50:41:1d:7e:51:7c:39:
                    ef:64:fd:d0:f2:72:bd:a7:ff:fd:53:87:5f:4a:2a:
                    ae:04:22:ad:6d:b5:2f:a5:95:c0:72:82:b2:ac:77:
                    2d:4c:f9:bf:a8:89:c0:d0:c7:d6:6d:1e:0f:ec:a3:
                    cc:d7:cf:4d:9e:42:77:71:1d:78:e3:22:00:ae:ad:
                    61:3c:4b:48:8b:58:fd:b2:b8:ad:eb:83:09:0a:1b:
                    cd:3d:85:cf:ad:41:0c:2b:80:01:d2:9b:b5:5c:aa:
                    47:01:c4:f6:3b:e5:4e:57:34:13:76:2d:38:25:8a:
                    96:8e:b9:1c:eb:4c:2a:89:4e:07:e2:0d:31:6d:51:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E9:70:B8:62:23:91:CF:86:D7:FC:4A:C1:3F:8F:55:FB:7D:8A:D2
            X509v3 Authority Key Identifier:
                keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:60:48:44:40:6c:43:9f:9a:bf:ab:2d:55:e5:6b:b9:66:e7:
         d2:4e:5b:27:70:71:ee:70:23:13:21:e1:77:91:8e:47:ff:99:
         9c:bd:a0:e2:1e:82:71:80:fc:3d:41:09:0d:89:6d:92:41:96:
         8b:77:54:45:ea:e3:3e:8b:79:2a:da:c6:5e:f5:23:08:da:d1:
         73:0c:90:87:c4:8c:ea:9c:a3:da:23:88:77:63:7d:60:f3:3a:
         cd:29:c7:51:7c:9a:11:43:f3:08:40:17:ae:9b:86:d7:8d:e9:
         96:a0:81:7d:53:16:6e:39:b5:99:29:3a:53:d4:f1:94:88:3e:
         ab:8e:71:21:cc:f8:12:25:a2:d6:00:08:72:48:d1:e2:22:63:
         63:e4:00:11:e2:c6:aa:16:54:bf:de:e4:e1:26:29:86:cf:47:
         9e:b0:9e:3e:26:60:e9:66:4a:46:b8:b0:7f:70:2b:06:ca:6b:
         04:79:bf:7c:65:e5:f0:8f:ab:34:50:b1:c2:d7:70:52:98:6f:
         4d:29:28:fd:1a:e2:f1:5d:68:66:e7:1e:a8:3d:37:2a:5d:aa:
         e9:d2:21:d0:2c:7e:a8:17:b5:dc:d5:38:d9:2b:c7:b8:23:20:
         6a:18:37:84:00:a5:99:f8:1c:ed:1b:d6:b6:43:60:01:a8:bf:
         71:1a:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:43 2025 by rpki-client