Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File:                     MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier:          uuVTl95gJTY0pWft5pIVOUtOdWoCR3DUV3yqdIP3nBI=
Subject key identifier:   32:8C:7D:87:F8:EC:CA:56:CF:85:51:81:CE:DD:94:67:9C:36:56:08
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer:       /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number:          0105
Signing time:             Fri 31 Jan 2025 04:12:38 +0000
Manifest this update:     Fri 31 Jan 2025 04:12:37 +0000
Manifest next update:     Fri 07 Feb 2025 04:12:37 +0000
Files and hashes:         1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: 4NvKnoOp3lgxb2QGZm2Vk60xdQsb6azr3+qDnZBxULE=)
                          2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=)
                          3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=)
                          4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=)
                          5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=)
                          6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
        Validity
            Not Before: Jan 31 04:12:37 2025 GMT
            Not After : Feb  7 04:12:37 2025 GMT
        Subject: CN=679c4db6-79af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:a8:20:c7:b2:00:6f:14:2a:a4:4e:87:78:
                    df:7e:54:91:d3:00:d0:0d:c1:c2:5d:ff:32:6c:6f:
                    5d:b6:8b:8c:91:8d:0c:08:8c:51:b7:e9:61:04:97:
                    91:91:fe:91:86:6c:4d:0c:50:4f:d5:5a:ab:9c:86:
                    34:f8:3d:78:b4:e3:82:a2:f2:17:53:40:47:ec:cf:
                    fb:af:d9:58:79:5f:18:c1:e1:8a:29:2c:1a:38:d3:
                    00:b9:45:d0:06:0d:30:d6:d8:45:a0:9b:5e:cc:5d:
                    45:be:b4:0b:3a:85:bd:4b:0e:6b:4d:ef:47:5a:c4:
                    38:c7:a8:eb:a6:e3:d2:5b:1a:cb:25:bf:81:c3:db:
                    2f:40:c5:ca:c6:10:99:04:36:69:94:e8:9a:bb:3d:
                    83:ef:04:a7:5f:49:de:02:ab:33:6d:ae:e1:3e:30:
                    cf:a8:03:b7:75:f8:21:11:92:e1:fb:16:e8:3c:9f:
                    67:97:8b:15:58:62:b0:17:f4:ef:e5:b8:84:7c:00:
                    fa:04:1f:c8:a7:ff:89:50:b1:49:41:4e:34:99:f8:
                    64:2a:b1:df:c5:21:40:24:ae:4f:59:30:74:2e:39:
                    2c:e9:d1:b8:7a:f9:d7:75:e7:90:c1:39:b2:27:02:
                    11:5c:1e:85:1f:54:98:fa:18:7d:9d:b6:52:6e:6e:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8C:7D:87:F8:EC:CA:56:CF:85:51:81:CE:DD:94:67:9C:36:56:08
            X509v3 Authority Key Identifier:
                keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:76:f6:61:3a:bd:b2:41:4a:66:5b:5e:39:b6:76:c7:54:9a:
         55:98:98:4c:c3:43:37:ce:b1:65:77:44:5f:1b:fa:0d:91:dd:
         c4:24:76:71:7c:7b:ee:4e:5c:87:e9:95:2a:e3:cb:cd:56:f9:
         5f:5d:9e:04:9d:8b:7e:cd:86:48:78:d5:54:8d:94:8a:d0:62:
         2f:76:fe:05:61:27:c9:a7:d6:aa:13:cb:2e:b1:e8:20:aa:d0:
         47:db:62:b6:b7:3b:31:43:3e:8f:48:f7:90:88:b8:71:10:73:
         31:aa:7d:fa:87:24:77:a4:54:2b:cc:a2:4a:23:a0:bd:3d:d8:
         b3:35:71:98:28:b9:af:8e:8b:26:28:79:76:52:0d:50:bb:83:
         15:4c:2b:0c:30:9b:02:68:7d:8f:1e:6d:27:b5:8d:63:70:e7:
         70:81:ed:32:09:c9:ba:bd:e4:47:74:2b:fa:a6:ba:3d:16:32:
         64:84:db:69:ca:1a:d9:ba:df:a8:b6:52:2e:9b:af:69:37:af:
         3f:cb:64:46:ad:4a:26:7e:24:9b:05:ae:df:88:0f:26:11:cc:
         93:e4:01:47:00:73:c5:65:d9:08:e8:cd:34:ea:b1:e1:6b:c6:
         59:43:87:4c:d2:67:ff:a9:fb:cc:af:37:47:f8:82:96:63:1e:
         25:1b:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:15:41 2025 by rpki-client