Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
File:                     Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json)
Hash identifier:          FjGX/tPNHOx9xz1VPeZY9qQefg/dvTdwXgJT1jrakbM=
Subject key identifier:   E1:ED:E5:89:39:18:79:5F:7E:23:CC:2E:69:7B:5C:63:52:6B:13:EE
Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8
Certificate issuer:       /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
Manifest number:          E8
Signing time:             Fri 31 Jan 2025 04:33:26 +0000
Manifest this update:     Fri 31 Jan 2025 04:33:25 +0000
Manifest next update:     Fri 07 Feb 2025 04:33:25 +0000
Files and hashes:         1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: 8WfiL5WOTBmYewoAnsXm9EoJJF86MY47BgX+C0jt2Ys=)
                          2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: DpGOi0sB2sMQxf4ZO7IGNHJMX8cIMnNNE4SuDpT2FAo=)
                          3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: RSiHqX4rb/XiO/VoDBBhBwIwk/xvfX+c6El0AIzq620=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
        Validity
            Not Before: Jan 31 04:33:25 2025 GMT
            Not After : Feb  7 04:33:25 2025 GMT
        Subject: CN=679c5296-e187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:d3:6c:84:21:f7:31:68:ca:d8:37:da:86:
                    eb:e8:52:8a:60:81:42:ee:0b:b4:b1:27:80:1f:89:
                    01:c7:23:89:d5:8d:c9:42:e7:b4:3a:bf:3b:c4:90:
                    da:fd:c0:97:0e:57:7f:f1:99:1b:9a:0f:ac:a5:dd:
                    4f:f4:75:2b:6f:03:bb:a5:24:58:09:42:43:68:a3:
                    c5:39:aa:f9:57:39:2a:97:9a:6c:ee:1d:66:58:45:
                    88:f9:2c:72:6f:bd:56:28:ca:2f:a5:e9:5a:02:b3:
                    c7:ae:69:6a:16:23:7b:68:fd:bb:fd:cb:6a:c2:14:
                    b4:55:e1:6e:86:49:21:90:a5:2d:71:0c:ef:d1:6b:
                    aa:21:27:95:a7:06:a2:b5:c7:35:fc:a4:48:d4:a3:
                    91:d3:76:c7:35:63:aa:10:32:2d:29:67:f1:66:c9:
                    41:04:60:5d:a9:f1:7e:1e:70:c8:29:67:b7:fa:1c:
                    de:85:ce:5e:2f:49:ce:42:34:6e:97:d5:09:07:94:
                    ef:67:e7:3a:d9:45:3c:68:23:00:ae:a9:ff:02:69:
                    b5:f2:6a:4e:4c:00:c2:55:77:59:f3:33:8a:ce:18:
                    0b:c2:1c:31:1f:d6:72:61:1f:a7:b3:05:30:79:98:
                    45:87:a6:bb:72:58:23:b5:08:5f:f1:7c:af:d0:1a:
                    07:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:ED:E5:89:39:18:79:5F:7E:23:CC:2E:69:7B:5C:63:52:6B:13:EE
            X509v3 Authority Key Identifier:
                keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:24:03:d9:45:4d:09:8f:82:ea:1b:3c:38:ea:30:a5:92:38:
         71:41:c0:2f:67:24:ac:35:66:33:da:40:2a:77:28:86:12:52:
         58:60:f5:ff:7a:83:5a:5b:3c:c2:2c:44:bd:e7:7b:b2:cd:30:
         a6:51:7d:8c:69:e0:64:f0:da:20:40:30:49:e9:bb:0d:0b:c1:
         06:e4:87:d3:20:b8:91:23:7a:a7:7e:dc:a4:42:a0:3e:52:db:
         35:22:b7:a8:3a:76:d1:3f:04:86:66:42:65:5c:7c:11:ef:73:
         ff:65:8d:0f:6e:5b:10:a7:01:a0:b3:fa:5b:3a:eb:20:d2:b9:
         24:41:c5:0b:49:ae:54:e4:c8:5a:29:1a:e2:56:ad:3e:a2:78:
         45:62:e1:2f:57:4c:8e:2c:16:22:1c:7f:d2:db:65:5e:89:a3:
         2a:84:7a:22:0a:44:ae:a9:ee:c2:6b:de:51:eb:c3:5a:44:a1:
         d1:a4:1e:c6:fa:e7:18:42:65:24:dc:a7:55:76:cd:b5:cf:0d:
         e5:b8:57:29:02:af:3a:f3:e4:2b:1f:e3:54:02:dc:7b:37:c2:
         e5:c7:c7:93:75:1f:66:41:c1:3f:41:80:12:41:a4:32:a6:68:
         15:0f:d3:34:41:5e:bc:d2:5b:9c:0d:20:4e:0f:60:a4:ae:0a:
         ad:74:7e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:44 2025 by rpki-client