Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
File:                     K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json)
Hash identifier:          FbW9+rldDRumbADS+nTDEas3iw8PpKkNRK4m2RzP0AM=
Subject key identifier:   C1:5D:87:1A:CA:50:47:C2:EC:7D:C6:80:5B:B4:A5:33:71:3D:3D:CC
Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Certificate issuer:       /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Certificate serial:       0DAC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
Manifest number:          0D9F
Signing time:             Fri 31 Jan 2025 15:39:25 +0000
Manifest this update:     Fri 31 Jan 2025 15:39:25 +0000
Manifest next update:     Fri 07 Feb 2025 15:39:25 +0000
Files and hashes:         1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: OlAhAbPjxrraUZ6psJacRjHjkJVMpA7b51Q/zQfNKm0=)
                          2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: QaiwA0ii3swzDmEn5ZYRLYQTMUg0WLwS1y2KJOPdMzg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3500 (0xdac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
        Validity
            Not Before: Jan 31 15:39:25 2025 GMT
            Not After : Feb  7 15:39:25 2025 GMT
        Subject: CN=679ceead-bd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:dc:bf:88:13:24:83:4b:5b:1c:52:9e:6e:
                    48:6e:54:01:f3:0d:b6:24:ab:31:6e:d6:e5:fb:49:
                    4d:2e:8c:03:1f:b0:9f:d6:61:08:a4:8b:94:e7:9a:
                    29:d6:c3:56:65:24:ee:57:ab:40:43:4c:2f:83:f3:
                    27:3f:a9:93:5c:c1:67:b7:b5:65:c1:c6:85:47:82:
                    7f:e9:d3:b9:fe:eb:1d:a8:a0:67:d5:cb:7c:82:d7:
                    3b:68:05:6b:e3:80:2b:d6:5f:a0:f7:35:2f:53:d5:
                    bc:1c:cd:96:75:86:4e:05:9c:92:e7:49:73:35:2d:
                    7a:05:4a:bf:1d:fa:f2:8a:a2:4b:38:2d:45:ba:2b:
                    82:04:74:7c:a0:ac:a7:19:2a:10:78:c1:5a:22:df:
                    85:39:17:ec:df:9d:73:94:65:18:c3:a6:21:66:85:
                    a5:b1:10:61:14:0c:50:0b:e9:1b:43:6b:d9:82:1a:
                    96:ee:d2:cc:de:13:32:f3:d0:5d:b6:71:ac:1d:b3:
                    2f:36:4d:8b:35:05:83:2e:a6:f5:cc:e8:88:dc:0a:
                    cb:4c:ec:37:3d:e2:21:7c:07:00:04:33:29:d2:40:
                    04:ab:e1:49:2b:78:f5:61:79:cb:fe:cd:16:2f:7e:
                    65:f4:c1:b6:48:4c:49:15:fc:20:c5:0b:d1:3e:e4:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5D:87:1A:CA:50:47:C2:EC:7D:C6:80:5B:B4:A5:33:71:3D:3D:CC
            X509v3 Authority Key Identifier:
                keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9b:17:e8:b0:83:7d:0d:c1:cb:94:13:7b:3a:ab:9d:ce:00:
         b5:2f:bf:d6:ac:21:c3:1a:fa:b6:d3:b8:1b:12:89:44:48:73:
         a2:ed:bf:c7:89:63:62:c4:f8:25:07:33:66:27:97:84:96:de:
         f9:a7:15:89:09:45:47:a6:ac:5f:8f:5c:8a:68:53:ae:6c:fe:
         3d:68:06:6c:e6:13:0f:82:7c:b1:31:85:d3:9a:b4:53:e7:31:
         36:74:00:b2:eb:9b:62:f7:81:d1:3f:85:5d:8b:96:cd:cf:52:
         10:91:eb:67:10:91:8c:79:65:32:3b:04:76:82:d3:41:ef:e2:
         1b:34:b7:0d:e6:84:02:8c:0e:c5:a7:5e:d1:1b:32:d7:8b:6f:
         c5:73:48:e0:22:c8:d2:ee:39:f4:4c:31:d0:a5:3d:6a:9a:22:
         83:4a:55:33:1f:a8:85:71:7c:d0:67:c9:7b:bb:bb:43:02:eb:
         af:60:2d:ea:32:9f:2e:ae:4b:d6:b3:32:2d:d3:cf:5f:2f:a0:
         48:4e:ad:5b:b4:ea:1f:75:99:cd:32:fe:2d:59:b6:9a:97:6e:
         33:62:d6:fa:11:ab:a6:1b:ad:3b:e2:02:bd:58:a0:4f:2c:84:
         db:d4:fa:0c:5c:e5:8a:6e:31:09:fb:65:c2:a9:cf:a7:55:48:
         68:2f:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:10 2025 by rpki-client