Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
File:                     8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json)
Hash identifier:          Fkbpg59rzilB3DCzBMWNGwGYti5to2shI4yjQ6f9k8g=
Subject key identifier:   63:8C:55:85:D3:CA:10:E1:C3:2D:75:5D:EC:74:14:68:BF:CA:0D:51
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Certificate issuer:       /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial:       0980
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
Manifest number:          097B
Signing time:             Thu 30 Jan 2025 20:11:35 +0000
Manifest this update:     Thu 30 Jan 2025 20:11:35 +0000
Manifest next update:     Thu 06 Feb 2025 20:11:35 +0000
Files and hashes:         1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: rf725BBVX1JxEk89nr8ruOSpiZjoqn4JsPzwZWbV6Es=)
                          2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: va8pqMs4sYFejLTjLiG9L4kNj9tDd61/iWoaglCLNt4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
        Validity
            Not Before: Jan 30 20:11:35 2025 GMT
            Not After : Feb  6 20:11:35 2025 GMT
        Subject: CN=679bdcf7-423c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:82:7a:dd:6b:7f:95:d3:c6:63:e4:60:6c:
                    77:4d:1c:ae:ee:4b:12:7c:47:e4:d0:06:89:cb:79:
                    ca:c6:f1:f4:72:af:50:5a:7a:e9:f0:f9:17:47:37:
                    c6:c1:11:32:ea:15:d4:46:b3:58:87:83:7a:f5:94:
                    25:4b:ac:db:83:4a:5f:b7:79:ef:c1:b9:8c:9d:b9:
                    8f:e4:35:be:e1:7b:7f:9b:d6:b5:e1:d1:c0:c0:f8:
                    71:4f:f7:a2:79:1e:15:d0:ec:20:97:2a:93:0d:2a:
                    5e:e6:8a:a5:86:1c:e4:0a:9e:ff:e9:65:c9:ab:1a:
                    14:95:1f:fd:09:aa:25:29:de:39:ba:cf:f0:98:ae:
                    bd:3b:7f:7d:9c:fc:6c:86:e7:8c:df:0e:d9:06:8c:
                    01:d1:05:59:1b:ff:d7:2b:9c:14:87:a8:ab:7b:39:
                    a1:8c:38:e0:2e:7b:3c:6e:57:ee:65:a9:99:6c:60:
                    ae:ad:64:86:d5:12:b9:36:70:43:98:53:07:42:40:
                    c2:de:79:ba:56:b6:b9:3b:ec:d1:47:ff:5c:d2:3a:
                    5c:33:0b:4a:0a:44:4a:c4:43:34:91:6f:de:85:b6:
                    31:83:1a:f6:a5:dd:36:5e:5a:65:54:af:dd:e2:33:
                    e3:56:7e:73:27:50:9b:1f:92:a7:c1:46:1f:78:92:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8C:55:85:D3:CA:10:E1:C3:2D:75:5D:EC:74:14:68:BF:CA:0D:51
            X509v3 Authority Key Identifier:
                keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e6:01:54:f6:c8:a4:bf:21:fb:3d:31:ef:0f:7a:04:bd:78:
         4b:b8:87:15:3f:0d:02:88:ce:81:f4:f1:fd:c1:63:34:45:78:
         49:da:20:6c:62:a9:63:87:10:df:ed:f0:7f:df:cd:7d:7c:52:
         82:da:b5:f6:1b:3e:4b:1d:ea:36:54:a8:ab:14:8f:0d:ae:2b:
         e4:ea:59:a5:aa:52:4d:9f:f9:d4:0e:ff:27:2b:b0:de:2e:5a:
         48:a2:5d:8f:e5:45:5d:06:bd:52:c3:a8:29:7a:95:be:4b:90:
         63:86:92:74:45:88:9d:06:3f:8c:a7:9f:bc:3d:06:47:88:4b:
         ff:4d:40:9a:1a:47:07:83:98:d5:e0:23:df:18:39:eb:96:6a:
         96:cd:38:a1:b0:92:74:85:f4:e2:6c:8a:7c:96:24:d1:ff:77:
         1c:5e:52:f1:94:f8:c1:70:ac:54:8c:65:dd:8b:df:f3:a5:c8:
         a3:4a:02:b0:57:bc:30:bf:5b:23:05:3b:de:f9:c7:98:22:47:
         7b:9d:3d:1a:8d:89:38:73:e2:9b:5c:97:0a:d8:78:62:6d:5e:
         16:b7:b3:45:2d:30:d7:56:79:04:47:11:88:1b:db:82:80:4b:
         cc:53:f6:38:bc:b7:39:f7:1f:f2:3a:24:c9:53:41:65:aa:21:
         02:40:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:34 2025 by rpki-client