Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
File:                     ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json)
Hash identifier:          /t8WZ43/qJzak1/oPQQIdeYjXBgIvVe8r8JVoJoeb2Y=
Subject key identifier:   0E:36:AB:33:4F:9B:98:8B:7E:A2:FA:2E:51:80:BF:CD:66:68:A5:4A
Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
Certificate issuer:       /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
Manifest number:          0149
Signing time:             Fri 31 Jan 2025 03:46:52 +0000
Manifest this update:     Fri 31 Jan 2025 03:46:51 +0000
Manifest next update:     Fri 07 Feb 2025 03:46:51 +0000
Files and hashes:         1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: EUEXCtynWx4l+/UGgIalxo8O7vBWHg6okiX5Iag3CYo=)
                          2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
        Validity
            Not Before: Jan 31 03:46:51 2025 GMT
            Not After : Feb  7 03:46:51 2025 GMT
        Subject: CN=679c47ac-2c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:02:46:16:46:66:99:1a:f8:9d:76:34:3b:
                    d3:b1:6c:a1:ab:44:3c:1b:fa:f3:1f:43:8a:2d:ca:
                    59:e2:04:e9:95:cd:87:e5:ad:a1:6e:44:2d:81:3a:
                    16:86:73:cb:04:93:99:d0:a9:3d:2f:c0:6b:67:2c:
                    8f:a2:c1:49:8f:16:f4:e6:1f:ca:bd:d0:ef:fb:94:
                    9d:d4:92:83:ca:cf:45:d9:bc:34:3a:b4:b7:26:58:
                    ee:54:49:c0:5c:33:0e:dc:6a:c3:c4:4c:e1:18:ca:
                    59:89:12:20:40:e0:a4:a1:52:7d:cb:c9:75:2d:bd:
                    60:67:a8:22:dd:3f:3f:09:43:24:ef:8f:66:46:2b:
                    f9:9c:02:a0:1a:a9:73:38:2c:99:44:9e:f6:15:88:
                    b7:d3:82:19:54:2a:5b:8a:22:7f:1e:30:2c:5d:69:
                    7a:39:d1:43:fb:53:c9:78:25:90:f9:1e:13:cb:e0:
                    7b:07:73:28:a3:25:92:8d:3f:5a:0e:6c:f4:3c:a1:
                    5f:8a:d0:0b:ff:62:fe:de:3d:4a:82:67:5c:ed:92:
                    1a:e2:31:27:ea:f5:d4:26:bc:95:cb:51:29:4a:f9:
                    f7:72:00:5d:a0:8c:b7:87:5c:81:47:c7:91:eb:8b:
                    fa:46:63:1d:e6:40:51:90:d6:90:82:fb:5d:96:78:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:36:AB:33:4F:9B:98:8B:7E:A2:FA:2E:51:80:BF:CD:66:68:A5:4A
            X509v3 Authority Key Identifier:
                keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:fd:ff:46:38:a3:b6:c7:fb:2a:0d:03:a9:41:95:c2:c8:14:
         38:f8:89:09:63:55:f0:1d:a1:75:28:58:10:7d:0a:e7:94:ca:
         2a:d8:06:b2:77:c7:b2:c7:af:b8:71:46:a4:de:8f:e4:da:f7:
         f5:ec:9e:80:24:4e:ab:69:a4:f4:e7:7e:c7:52:6c:97:72:8c:
         97:69:1d:2d:e8:dc:3f:3c:4a:63:0f:e9:99:bf:fe:00:b2:19:
         2f:aa:84:27:a8:59:e3:90:c2:1a:bc:f2:51:c0:37:21:56:f9:
         7c:e9:ad:fc:73:0e:16:21:14:c7:60:bf:1b:17:d5:9a:6d:fd:
         05:38:b0:3e:28:c6:ae:76:22:a8:63:39:40:16:05:3f:53:87:
         71:1b:be:c5:61:0b:1a:e4:f4:15:f8:e0:97:95:c2:64:91:85:
         0e:36:12:84:7e:25:ba:36:1b:35:94:9e:58:ca:d2:7b:d7:63:
         55:e4:76:d8:9a:a9:93:38:2f:8b:1b:f6:e8:63:f1:c3:7f:fc:
         fd:5b:23:14:39:87:15:2b:aa:15:80:bd:69:37:9b:1c:8d:fe:
         73:22:63:8c:e0:8b:15:0b:28:d2:f8:d7:0c:50:c2:44:d4:93:
         55:8d:81:80:63:cf:2b:40:ad:25:e9:db:ac:be:43:31:e1:8c:
         0b:65:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:31 2025 by rpki-client