Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
File:                     VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json)
Hash identifier:          bKZmS/VT2pLO19RLuOA6ogmnTA/1hJfjAlSLZpYVPgg=
Subject key identifier:   CF:86:ED:EB:D5:42:1B:14:A6:00:92:09:E8:22:9A:52:D3:7E:CD:C4
Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A
Certificate issuer:       /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A
Certificate serial:       0BDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
Manifest number:          0BD0
Signing time:             Fri 31 Jan 2025 18:41:55 +0000
Manifest this update:     Fri 31 Jan 2025 18:41:55 +0000
Manifest next update:     Fri 07 Feb 2025 18:41:55 +0000
Files and hashes:         1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: Kq7ovNtj6bYiRjsQ38baPFpM0YTRYikH6vUHKXgwKcQ=)
                          2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: Rf0IxEkwLDNapXsuJXAuul060sZSSoGxkC1k36Bzzhw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3034 (0xbda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A
        Validity
            Not Before: Jan 31 18:41:55 2025 GMT
            Not After : Feb  7 18:41:55 2025 GMT
        Subject: CN=679d1973-03f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:c1:3b:ce:79:2e:8f:d2:f4:3a:d0:85:ce:
                    2c:ea:70:3c:98:1f:7e:74:14:bb:94:c4:b1:52:9e:
                    d0:74:3e:e0:fe:b5:df:11:a7:f6:0f:eb:c9:22:59:
                    5f:47:e8:92:c4:e3:e1:79:ba:1a:be:88:03:67:2e:
                    72:1a:4f:78:68:77:11:3b:03:e2:3b:42:1b:c7:72:
                    79:23:d0:da:01:8c:fa:e5:48:ab:93:31:fd:19:c4:
                    78:e5:6a:a4:73:8c:d0:8e:43:6b:b4:f0:f5:e0:f2:
                    f8:68:42:76:5b:c9:90:0a:11:1f:49:8f:01:53:37:
                    81:f5:5c:11:7c:9f:c4:84:c2:f0:08:40:56:33:e9:
                    34:b2:13:5e:f6:33:fd:d1:3d:51:a0:95:49:4e:67:
                    aa:b2:f7:92:dc:32:b4:3d:18:ff:7c:70:e5:e7:d1:
                    14:38:53:38:79:77:92:df:d4:78:ee:ff:ea:d4:44:
                    74:c8:89:a2:75:92:56:d3:fd:16:ca:78:91:66:5a:
                    de:29:07:07:ca:bb:0c:dd:4c:89:b3:13:b9:61:db:
                    c3:fb:6d:ea:d5:b8:91:fb:88:68:0a:3a:96:5f:40:
                    23:f3:82:ea:bb:a8:ac:44:b1:f1:a8:00:1d:61:fa:
                    cf:96:58:e7:c8:28:04:62:e6:36:e3:64:c4:09:0c:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:86:ED:EB:D5:42:1B:14:A6:00:92:09:E8:22:9A:52:D3:7E:CD:C4
            X509v3 Authority Key Identifier:
                keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:45:35:f2:b4:16:31:7a:6a:4b:b7:94:55:de:de:5f:2e:a4:
         66:08:5f:f2:2c:4e:06:3f:ae:37:b9:cf:71:40:45:96:80:aa:
         e9:db:a4:ef:a2:82:8f:1e:06:10:2e:e4:e1:b3:ed:4b:3f:49:
         c4:35:22:fc:d5:4a:d1:0f:7d:48:68:10:9d:ac:0f:51:76:36:
         19:98:aa:d8:d8:59:7d:f9:c4:a1:db:26:d5:67:e6:6d:13:45:
         5c:6f:9c:00:3d:2f:9f:5f:62:1b:e3:78:c7:02:a7:57:97:42:
         c6:82:1f:67:c0:d4:06:45:42:47:9d:ad:af:bf:0e:d2:e6:cf:
         a2:fd:d9:99:f2:81:b6:cf:c8:43:c5:1d:99:56:f2:b6:91:ce:
         35:25:0a:15:34:9d:20:d5:f3:1b:66:51:7c:10:14:47:d9:74:
         31:40:af:a5:12:48:ff:b9:c4:84:3d:b0:21:c8:48:90:a5:a7:
         20:c0:5e:97:b8:01:87:2d:6f:c4:2a:d9:93:5c:12:4c:da:41:
         b9:be:87:ab:8f:07:94:74:21:70:be:35:69:c5:bb:77:dc:b0:
         04:f5:2d:51:9c:35:6e:32:36:e0:18:d1:6b:5a:cd:c7:e0:32:
         8b:60:1c:f1:4f:f3:bd:b2:42:5a:dc:a6:c0:0b:8e:56:3d:ab:
         76:ff:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:00 2025 by rpki-client