Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File:                     cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier:          emwtTEotwoyTwOLFGPzDsjO1t862WS71jAqr4pVwk1A=
Subject key identifier:   32:7F:30:45:BE:E4:C7:9B:DE:58:08:00:74:53:74:4C:6E:25:A8:2A
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       074C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number:          073D
Signing time:             Thu 30 Jan 2025 21:38:31 +0000
Manifest this update:     Thu 30 Jan 2025 21:38:31 +0000
Manifest next update:     Thu 06 Feb 2025 21:38:31 +0000
Files and hashes:         1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: L1CC62sw8jgxNpOb3nsmG5mTQy0vub004z0Tz4s0h+o=)
                          2: B5CD0B4A7E9911EFA0499366C4F9AE02.roa (hash: 28hMG3cjCpxNcowPwmPrRX+d2rPppFIIvSs9qF4JX48=)
                          3: 5C1E69E043E011ED96455A4BC4F9AE02.roa (hash: xHZ7/Ay2BLjPyLaYUPZt3dR4RHXQX55WueUgcbk/XTY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Jan 30 21:38:31 2025 GMT
            Not After : Feb  6 21:38:31 2025 GMT
        Subject: CN=679bf157-1312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:40:0b:17:2d:26:20:37:ed:b0:1d:0f:9b:
                    30:f9:d5:ec:82:09:53:8d:c2:b0:bf:8f:53:3f:5d:
                    63:d2:9d:b3:54:3e:37:8a:b0:8d:11:5b:fa:05:e5:
                    a0:a3:b4:12:a7:c8:99:f5:e5:3e:6e:87:e2:5e:da:
                    04:8e:14:cc:b2:19:ee:78:7c:b4:61:94:27:9f:5e:
                    a5:db:37:b0:c8:55:d5:d6:47:56:67:de:ae:56:72:
                    eb:ed:fb:7f:5f:9a:06:10:6d:f8:68:f4:cc:81:ac:
                    67:c5:3c:3c:9c:b0:b3:60:f1:98:73:65:db:f8:5a:
                    c9:8c:17:70:ba:c9:61:53:4b:37:e9:ec:69:f2:c0:
                    86:5e:b2:28:a5:71:21:f2:f5:93:24:cf:bf:f5:24:
                    68:10:42:eb:8e:3c:a5:23:54:65:d2:d9:ee:4b:2c:
                    30:e4:ca:da:cb:ed:d0:01:36:e2:a4:e8:2d:e1:27:
                    bc:6c:7a:8d:53:5f:74:33:4e:ac:ce:4c:5c:1d:f4:
                    1c:8d:af:d3:37:70:72:ae:7f:1b:7f:b1:79:4f:81:
                    6f:e5:71:0e:3c:a6:3b:cf:1e:31:36:2a:35:d2:7b:
                    4c:07:50:96:75:3f:b3:d6:42:4a:cc:0a:d5:cb:9b:
                    b7:30:f3:ca:88:af:1a:78:bc:20:9a:6d:89:66:f2:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7F:30:45:BE:E4:C7:9B:DE:58:08:00:74:53:74:4C:6E:25:A8:2A
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:02:ea:5f:f5:de:b3:8c:3e:46:92:5b:72:35:34:23:72:73:
         ac:af:3f:a5:3a:ae:64:98:d1:7f:a0:65:9a:20:a9:76:31:8d:
         8c:4e:7e:42:18:68:eb:b7:c9:00:f6:47:90:d9:2e:51:a1:0e:
         c3:c2:98:75:1e:23:57:b6:1b:f7:e6:6f:73:c3:41:93:99:b1:
         d4:99:69:19:6a:8d:af:e9:3d:00:90:5a:75:04:67:00:95:e3:
         87:7c:51:8e:f2:f3:7b:54:1a:99:f1:57:85:bf:83:a2:d3:6f:
         d9:9a:f2:4d:e8:0b:9c:ad:12:8c:32:2f:ba:bd:b0:da:a3:db:
         ff:2b:d0:bd:a7:de:e0:68:9c:72:3c:63:1c:45:1f:24:8d:80:
         78:15:21:97:2b:d3:af:0b:ef:3a:8e:3b:50:6f:ab:1c:e1:94:
         e3:64:38:4e:cd:e5:a6:ae:0a:f6:c1:a1:ff:c9:c7:09:dc:80:
         09:27:c3:13:a5:68:05:5b:9b:cb:2e:7f:6e:64:a8:6e:70:28:
         1e:b4:4f:bf:87:09:dc:2e:d0:1e:9e:ec:1e:ba:51:9e:4c:3d:
         b1:e0:75:51:f1:3e:a9:65:b2:c3:19:2b:c2:ce:c5:85:e8:29:
         1d:0a:d1:94:9b:83:b0:20:e9:40:2f:dc:03:98:b2:2f:90:19:
         09:9b:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:07 2025 by rpki-client