Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft
File:                     bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json)
Hash identifier:          vCl9BrigYrPZp6V5CijyathbsJRlJEZ+uXJYxvT6UYM=
Subject key identifier:   2A:AA:4C:23:E2:F0:D9:38:AB:2D:EF:FE:63:DD:C1:11:DD:F2:10:BA
Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC
Certificate issuer:       /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC
Certificate serial:       0BFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft
Manifest number:          0BEF
Signing time:             Fri 31 Jan 2025 18:38:24 +0000
Manifest this update:     Fri 31 Jan 2025 18:38:23 +0000
Manifest next update:     Fri 07 Feb 2025 18:38:23 +0000
Files and hashes:         1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: PUrPeuzfwYwNV6XgU6tBnumWJjX5UIjDceCGfijh1M4=)
                          2: F597C6BA0C3A11EA8BA9C679C4F9AE02.roa (hash: j7ecdL2z6s8RZ1KieigSOS0/4+EV2YJtrRrSKHYN0ls=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3066 (0xbfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC
        Validity
            Not Before: Jan 31 18:38:23 2025 GMT
            Not After : Feb  7 18:38:23 2025 GMT
        Subject: CN=679d189f-3f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:8f:ee:76:b5:6c:aa:c8:f5:6c:e7:7f:ae:
                    9f:b2:7a:6e:77:5c:cc:9b:c8:3e:b0:c9:e4:91:fe:
                    78:91:0a:b9:47:a8:0a:0e:8e:7d:af:24:2b:98:97:
                    8c:89:6f:02:e4:f1:7e:5f:1f:3a:ec:22:89:2d:91:
                    7c:0d:39:51:5e:e1:29:7c:a4:98:ab:ea:db:35:c0:
                    a2:8e:3a:44:45:07:20:69:7c:16:92:8d:a6:e7:fc:
                    45:75:a7:96:0e:4c:22:df:96:81:dd:7a:c4:70:99:
                    e3:7a:b9:bd:87:3c:ad:56:2c:69:ac:c5:7f:17:53:
                    35:d8:15:e3:66:7c:ce:15:41:ff:77:90:44:47:56:
                    83:0c:93:89:d4:df:b0:51:48:29:a6:fe:b8:01:6b:
                    c8:77:13:e3:7d:b0:a0:21:80:9d:a5:ff:dc:20:8a:
                    38:9d:24:9a:3e:f9:ed:f7:68:68:e2:bb:ab:f4:33:
                    de:d2:64:01:d8:f5:c7:16:fd:5c:67:36:ae:cc:c1:
                    92:43:b8:c8:ec:b5:68:fb:8f:79:ba:c1:02:8d:bc:
                    45:de:2e:74:eb:62:87:1f:ea:82:8c:9a:b7:56:d4:
                    6e:5c:ab:b0:37:ba:33:e8:71:2c:2f:74:27:98:93:
                    72:a5:1c:1d:d2:d4:6a:5e:d1:48:52:04:c4:b1:b3:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AA:4C:23:E2:F0:D9:38:AB:2D:EF:FE:63:DD:C1:11:DD:F2:10:BA
            X509v3 Authority Key Identifier:
                keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:51:a1:07:34:59:b4:45:73:e8:5d:3d:a1:5d:75:2a:43:6a:
         63:76:1e:14:bd:c7:90:43:92:5b:bc:19:40:c1:d2:6a:2c:3b:
         6d:19:d8:39:a9:0a:a0:6d:6e:2a:7b:e8:70:10:6f:90:c3:7e:
         b4:a7:85:9b:a2:a4:03:a4:f4:88:ff:d1:e9:aa:d7:56:a6:84:
         db:68:0f:9b:9b:53:aa:04:f0:05:70:ea:ba:5b:a3:7e:80:36:
         06:73:f4:e4:f9:1f:7d:f9:9f:bb:7f:e2:62:64:f5:03:a9:54:
         dc:e4:74:97:5d:37:c5:c4:df:be:41:27:3e:b1:20:85:d9:f7:
         ed:1b:5b:11:c8:b3:dd:c6:f7:3b:23:81:fa:1c:d8:87:6f:6f:
         02:25:c0:47:a3:85:cf:21:92:57:28:dc:66:bb:5c:8f:0f:bf:
         7f:61:30:11:01:3b:e5:a4:25:66:36:f8:06:ab:4b:e6:fd:00:
         a8:66:1c:81:7f:1d:3a:2f:3d:c7:c4:7c:3a:b9:25:df:af:af:
         92:71:ca:8c:e1:45:bf:33:ce:96:ab:e7:b0:14:7a:9a:14:4f:
         39:35:95:f1:be:1e:d3:a9:ea:11:56:7d:7b:b4:78:56:ee:66:
         f5:6e:b1:ed:17:05:97:80:ca:32:81:a5:cf:01:b2:7f:e1:13:
         bb:df:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:10:01 2025 by rpki-client