Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
File:                     -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json)
Hash identifier:          CY/y+iGND1zs2/AO2iUB8mdisj3470+fWVfMBHNEKDs=
Subject key identifier:   38:39:FB:06:0E:12:66:0E:C1:4C:01:65:6F:73:C8:E1:1D:55:B4:CB
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Certificate issuer:       /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial:       05E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
Manifest number:          05D3
Signing time:             Thu 30 Jan 2025 23:04:14 +0000
Manifest this update:     Thu 30 Jan 2025 23:04:14 +0000
Manifest next update:     Thu 06 Feb 2025 23:04:14 +0000
Files and hashes:         1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: NZcVQXpBmVeSFe5hEevUCji1odtgULaRN00BeKkSweU=)
                          2: 93E364468FC111EFA7695485C4F9AE02.roa (hash: l40SoBbVMbccw1MSf6F6VE2N6tSNsGG3U/26S05rROc=)
                          3: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: WwU6SoQDG+8gwXxtD5WuoKkjOwOvaEm4Y976SHnYcTk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
        Validity
            Not Before: Jan 30 23:04:14 2025 GMT
            Not After : Feb  6 23:04:14 2025 GMT
        Subject: CN=679c056e-47b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:e5:1f:6d:a4:50:9b:b2:e0:a0:9c:d1:36:
                    99:e6:19:54:8d:3c:76:e6:11:98:6e:47:12:dd:5b:
                    e3:07:1c:e7:0b:05:c0:20:63:16:d9:39:3a:6b:ef:
                    93:24:59:16:1c:17:23:6e:0a:c9:d8:04:41:55:ad:
                    e7:10:28:fa:5b:1c:f2:a7:c2:f5:a9:1d:e9:10:db:
                    64:c1:12:8f:63:43:76:eb:7b:40:07:85:b8:47:46:
                    96:4a:dd:9f:78:5b:47:ea:f8:0f:f6:55:22:13:1c:
                    cd:18:e7:50:4e:55:df:e7:51:88:74:a1:18:d6:ad:
                    66:19:16:8b:2e:82:c2:b9:2c:b8:4c:88:89:ec:29:
                    3f:a5:92:99:cb:c9:ee:e1:8a:31:b9:84:16:78:8b:
                    20:b5:dc:22:05:e1:78:46:52:12:83:fa:44:e6:a4:
                    fb:a3:e9:e4:97:f6:4d:dd:af:e2:80:e5:b3:62:61:
                    f9:50:fb:b2:75:1c:e8:25:f4:90:9b:a8:a5:b8:bf:
                    8a:ad:09:d3:cc:28:23:21:ad:ce:bd:13:9a:a2:59:
                    9e:3e:08:2d:fd:7a:5d:7b:c0:50:27:53:e6:0d:af:
                    b1:3f:1a:6f:db:0f:71:1b:48:75:fb:79:06:63:00:
                    12:3a:97:c2:86:80:72:54:fc:28:30:3e:2c:7a:61:
                    00:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:39:FB:06:0E:12:66:0E:C1:4C:01:65:6F:73:C8:E1:1D:55:B4:CB
            X509v3 Authority Key Identifier:
                keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:ee:ae:e1:27:0d:14:4a:4a:2f:57:bb:f5:16:53:72:b6:
         ea:eb:4e:8a:e2:e8:a1:ce:1c:67:1f:47:70:f6:ec:3b:9a:2d:
         ca:ef:8e:25:3a:75:eb:dc:14:79:ab:a2:af:64:33:0e:16:1d:
         e5:48:93:27:3a:4c:fb:c1:71:7c:53:0a:d5:18:37:44:d9:62:
         f6:f9:22:0b:b9:1c:c9:8d:49:33:bb:0c:31:37:5a:3d:c5:25:
         49:06:6f:c3:ce:06:66:30:17:f2:9f:a4:e0:f9:0d:01:40:45:
         be:88:4f:4c:38:b3:c0:00:9c:7f:1e:75:b2:5a:64:cc:1f:bb:
         a0:f1:8a:49:20:6b:38:af:21:b4:9f:68:ab:0b:6d:5a:49:04:
         a7:8a:71:a1:bd:d6:af:39:bc:f2:1f:cd:50:c9:08:a6:32:e9:
         00:2c:0a:8d:8a:bd:84:6f:bb:bf:f4:ef:17:07:be:98:d1:dc:
         41:72:79:d3:5e:10:99:fc:5e:15:eb:ab:e8:79:b2:be:d7:74:
         57:12:e2:cc:11:f3:db:78:b1:e1:df:44:bf:ee:18:b4:a7:fb:
         e5:ae:36:d3:80:8d:a6:26:70:fe:b1:2d:bd:00:ff:7e:ee:43:
         c0:38:e1:6b:f1:81:c0:1d:25:c3:ff:4b:06:a5:2f:74:fe:fc:
         45:63:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:52 2025 by rpki-client