Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File:                     _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier:          zqGq/TOKkUrOk79BZJ3Y+GZVY42eQIdjTAA5rk2PMMk=
Subject key identifier:   1B:BC:F0:3A:1F:15:1C:9C:C1:9C:19:C4:A6:CF:B2:12:B6:41:6C:83
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer:       /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial:       04BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number:          04B7
Signing time:             Thu 30 Jan 2025 23:56:07 +0000
Manifest this update:     Thu 30 Jan 2025 23:56:06 +0000
Manifest next update:     Thu 06 Feb 2025 23:56:06 +0000
Files and hashes:         1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: fDl3KvfwTdq+PVEYax+0kWfzw7EkiHhEiNAREA7OfY0=)
                          2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: rWRqJhH4y787QjbpEE2hN3YZgixRs8J4MQqNG/pdZs8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
        Validity
            Not Before: Jan 30 23:56:06 2025 GMT
            Not After : Feb  6 23:56:06 2025 GMT
        Subject: CN=679c1197-18aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:62:23:1c:b4:e1:7a:ae:44:89:ed:34:1a:
                    53:e1:32:07:fe:09:f1:95:67:9d:78:c0:84:4b:ce:
                    e3:80:5e:31:99:6c:b9:e8:c2:b7:66:06:fa:94:af:
                    85:98:bd:23:71:4b:75:e5:2a:64:b0:b7:5b:6d:45:
                    de:14:00:1a:c1:d7:8a:3d:14:3d:08:cf:61:03:42:
                    cd:68:22:37:df:37:0f:77:6e:50:ec:ad:ab:ec:f3:
                    43:a7:54:01:ef:dc:a5:cb:ce:eb:9e:e9:7d:39:f8:
                    71:6c:a8:68:5f:3e:e9:dd:42:52:23:75:a2:49:46:
                    6c:fb:a0:a5:02:f6:3d:4f:2c:f1:48:05:1e:df:c7:
                    d7:05:ee:ab:b4:1d:34:ee:ed:1b:25:d6:07:96:71:
                    00:03:77:d4:c6:34:03:66:aa:13:9d:f6:de:19:b6:
                    db:11:c7:86:48:2a:79:c1:c2:60:6a:eb:c1:73:be:
                    0a:d6:4a:cb:e7:ee:92:d5:13:2e:b7:6d:ff:f6:75:
                    ed:05:7d:36:f3:0e:26:8b:64:e5:67:d5:53:5c:d0:
                    54:02:74:38:5e:99:a8:c6:1e:52:6d:90:2d:04:15:
                    e1:24:70:60:47:fe:e6:29:34:88:5f:da:47:b5:44:
                    ba:9e:a1:87:c7:7b:b2:55:3d:22:90:5c:0d:13:6f:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BC:F0:3A:1F:15:1C:9C:C1:9C:19:C4:A6:CF:B2:12:B6:41:6C:83
            X509v3 Authority Key Identifier:
                keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:99:b9:18:37:17:5d:cc:9b:54:79:2b:eb:b3:d3:e3:c5:
         22:ef:ae:97:c7:04:0b:fe:86:61:88:5e:aa:ad:fd:6e:56:cf:
         78:81:cc:08:8d:d3:05:12:33:a3:c1:b1:c6:0e:3f:38:ea:0b:
         a4:2a:43:6a:bf:7b:ef:5f:a1:70:51:70:17:17:e2:a9:f4:b8:
         3b:2e:29:33:cc:ef:5b:2b:eb:14:24:cf:34:41:68:f3:7b:d3:
         49:a8:c2:3f:10:ca:22:ac:a2:65:af:b5:b8:7b:6f:7b:aa:1b:
         e2:f0:37:e6:ac:e4:c7:de:71:d8:00:6d:b2:9c:5a:9b:bd:01:
         0e:26:40:03:8b:88:ab:a7:06:ae:8b:fe:02:57:60:2a:99:7c:
         49:10:3a:68:d3:a5:78:79:f3:7e:c1:fb:1e:2e:17:ab:a5:66:
         e6:8a:78:3b:71:00:3a:9b:66:c0:6b:55:7e:70:41:07:ac:48:
         e5:1c:e0:7c:56:db:0e:95:2c:16:a5:33:9a:67:30:04:be:ce:
         c6:fc:3e:22:38:29:cc:b0:66:63:d9:b6:bb:35:fb:85:d3:45:
         ae:0a:20:ea:8f:5b:b6:f1:38:42:b1:86:b6:d2:01:01:55:3c:
         28:f0:25:a6:f2:00:ee:3e:ca:b0:75:8d:8c:a7:bd:47:78:a9:
         ff:21:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:25:54 2025 by rpki-client