Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
File:                     rN673IrqemETaTGDOGOx454Bfic.mft (raw, json)
Hash identifier:          CVhmfPkc9iTv5P0i9fpflQMi1L0HMgUH0dq9g+QPQKc=
Subject key identifier:   D3:A6:70:93:64:D0:1D:73:3A:38:E0:D3:9B:58:40:31:76:29:16:8A
Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
Certificate issuer:       /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Certificate serial:       0ACC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
Manifest number:          0ABF
Signing time:             Thu 30 Jan 2025 19:35:01 +0000
Manifest this update:     Thu 30 Jan 2025 19:35:01 +0000
Manifest next update:     Thu 06 Feb 2025 19:35:01 +0000
Files and hashes:         1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: hDN2BT7D5neXrC4CaPAh66MMRgbRJSttKcMqcvWBRUE=)
                          2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2764 (0xacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
        Validity
            Not Before: Jan 30 19:35:01 2025 GMT
            Not After : Feb  6 19:35:01 2025 GMT
        Subject: CN=679bd465-9701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:bb:6b:7e:b0:32:ec:3a:56:3f:a1:35:72:
                    1c:12:98:2a:af:60:20:6c:e6:36:c5:a3:69:ab:aa:
                    df:d5:f7:a9:6a:56:1e:6e:b7:01:24:77:33:30:2f:
                    ed:2c:a0:6c:7b:70:dc:ab:dd:e0:cf:b1:42:d8:3b:
                    51:dd:97:a1:05:12:4c:19:2e:c2:c0:6f:75:57:8c:
                    5f:8a:5a:48:0a:0d:9e:b9:87:e3:e0:8d:fd:76:80:
                    c1:8c:3e:fd:b4:c2:b7:63:4c:2d:cf:55:56:9a:a0:
                    79:2c:80:d0:f5:a9:a1:12:77:a5:a3:28:e1:ff:79:
                    3e:93:00:80:c9:8d:dc:40:20:02:aa:49:93:08:3d:
                    ce:ae:a7:66:a4:1b:e6:0d:f9:ba:25:c1:58:fc:c5:
                    1b:7e:9a:13:82:2a:86:4e:3c:b7:96:d1:64:b4:7d:
                    d0:6a:44:6c:a0:af:03:10:68:48:07:40:9d:35:ec:
                    7b:04:d3:2f:98:06:e6:5f:22:d4:86:9f:7c:9a:a3:
                    73:c6:85:73:f5:6d:d3:dc:d9:95:ec:d6:b3:09:77:
                    5e:27:76:79:4c:dd:9f:f7:7d:cf:6c:0c:62:6e:f9:
                    67:c8:87:6e:bb:ce:d7:57:77:96:37:e1:cc:fa:af:
                    e4:e0:32:d7:51:40:42:d2:d9:f5:c9:62:85:f5:14:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A6:70:93:64:D0:1D:73:3A:38:E0:D3:9B:58:40:31:76:29:16:8A
            X509v3 Authority Key Identifier:
                keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:59:d3:eb:97:c8:18:0c:50:16:f5:4b:ee:cf:95:73:58:a7:
         cb:e3:aa:91:3f:04:80:10:d7:69:b6:d8:61:91:33:fb:80:b3:
         ac:dd:f2:7f:4e:e1:02:77:5c:1a:dc:17:bc:20:c4:81:ce:c3:
         ce:a5:62:4f:c8:ba:85:d9:e3:16:6b:42:28:6e:74:06:8b:e6:
         a2:fb:9f:5c:33:9f:ae:5e:66:e5:8e:29:5a:13:e5:c8:75:bb:
         b1:12:cc:14:5d:ff:89:8b:3f:64:10:a7:92:54:a2:4d:60:16:
         78:e7:cc:82:40:68:4b:9e:6f:b4:14:00:68:1e:07:48:25:d9:
         5d:f2:0c:ed:02:78:44:30:06:ff:a3:90:80:eb:74:5a:c2:97:
         9e:5b:96:53:d2:54:71:95:66:b6:c4:ec:38:b5:a5:bf:8f:58:
         3f:53:41:b7:63:da:f6:a9:cb:21:7d:00:db:35:8d:ca:03:ee:
         71:0e:6f:4f:13:c8:b8:9e:99:10:83:fd:bf:06:a7:fb:7e:2e:
         1c:1f:8c:81:64:ee:44:05:e8:7b:57:f4:4b:91:9c:8b:03:9f:
         cb:4b:79:96:5a:b2:de:5c:05:fa:bc:cd:1a:51:96:f2:de:d5:
         fe:26:7f:65:7a:28:2b:95:44:19:e0:d6:32:ec:e0:63:4b:5a:
         91:ca:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:52 2025 by rpki-client