Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
File:                     BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json)
Hash identifier:          edow4zX+OxBTHgRmModKnDj0E4g9KWo8mfzG51p3O/Y=
Subject key identifier:   D7:AC:04:83:E3:A3:2E:60:E8:FE:67:A7:F6:9D:1D:78:3D:BB:D1:41
Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0
Certificate issuer:       /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
Manifest number:          0236
Signing time:             Fri 31 Jan 2025 02:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 02:00:13 +0000
Manifest next update:     Fri 07 Feb 2025 02:00:13 +0000
Files and hashes:         1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: aAZdboF3PUZLhycXYQAExpTK0qlMDMr3lTkwVfEmtww=)
                          2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: mcE/IJHhNlxSeNevkXhbHkK77FCAYAyssZWA6yEpRCo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
        Validity
            Not Before: Jan 31 02:00:13 2025 GMT
            Not After : Feb  7 02:00:13 2025 GMT
        Subject: CN=679c2ead-3e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:9e:9d:87:4b:07:b3:7f:c5:e9:70:52:f8:
                    16:07:0c:dc:9b:c6:e7:7e:8e:17:cc:9f:6c:f5:1b:
                    dc:44:07:a6:02:fc:b9:26:58:cb:aa:53:7a:b5:48:
                    48:53:96:8a:24:49:06:08:0f:28:8e:28:7a:21:99:
                    5f:fc:ff:d1:b8:d4:4b:24:47:e0:f3:4e:c4:17:96:
                    f1:70:f8:62:8a:84:e2:5f:e1:c4:40:cc:b1:8d:cb:
                    21:66:de:72:27:be:0a:b3:b6:87:2f:95:f0:dc:bf:
                    2c:3e:e9:57:e5:ad:fd:a8:25:63:91:dc:bf:a0:a6:
                    d5:86:97:7a:4d:5c:e5:75:e2:f1:94:a6:01:e3:76:
                    49:5c:2a:e1:cf:57:b7:e6:d3:ce:cb:ae:2b:f1:72:
                    31:56:6c:aa:9f:79:64:b7:61:e5:80:c8:e3:f5:8e:
                    e8:a5:92:7d:e9:66:da:ea:21:af:3a:b2:fa:75:aa:
                    84:ca:51:be:45:f9:87:d4:4b:d3:8f:f6:bc:d9:50:
                    f9:e7:ed:80:0e:84:b4:0d:3b:56:81:88:c8:b7:83:
                    cd:f3:26:55:ba:06:34:69:4a:09:4b:f9:d3:81:6f:
                    c7:d3:30:47:cb:0c:c4:3f:fa:87:92:49:23:f4:93:
                    f7:91:e0:42:0a:35:48:b7:cb:75:30:21:94:7d:44:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AC:04:83:E3:A3:2E:60:E8:FE:67:A7:F6:9D:1D:78:3D:BB:D1:41
            X509v3 Authority Key Identifier:
                keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f6:7f:54:c8:41:f8:34:7f:a5:3a:d9:b0:8b:d5:28:6a:0f:
         40:c3:2a:c8:4d:c3:0a:91:03:6c:4f:c4:fa:a3:0a:67:4c:34:
         e6:21:08:96:9d:57:63:bd:69:a2:4d:e5:a8:e1:64:36:ab:e0:
         8f:d8:5d:19:24:8a:ff:92:5a:a1:79:20:76:77:15:09:43:55:
         b0:76:0a:58:75:7b:be:34:bb:6b:27:5f:4f:02:c3:6a:9c:b9:
         c1:40:1f:74:d0:38:e4:1f:bf:63:5e:7e:d3:1a:44:a2:6d:bd:
         7a:3f:23:ee:43:bf:db:6e:01:53:5f:7f:af:b2:d6:cb:22:70:
         9c:41:ef:7d:a8:fc:f3:4c:0b:69:84:11:92:a0:0d:13:fa:18:
         8f:89:ae:28:7b:3c:c5:9d:7f:05:60:aa:bc:17:3f:a2:84:3b:
         77:47:3b:42:30:eb:21:20:1d:be:c7:1f:e0:f6:d4:b0:69:bd:
         0f:61:31:cc:87:4d:34:75:1a:52:a3:ac:d0:9e:15:a7:dd:a8:
         53:bc:0a:40:8f:b6:60:f4:62:6f:b4:c3:8f:69:c1:45:58:06:
         63:cf:29:8c:39:98:d9:93:9f:64:2d:0f:ea:f7:ec:32:2d:70:
         15:3d:d2:d0:75:a0:13:9b:80:9c:57:40:1b:06:37:96:16:cd:
         b0:92:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:15 2025 by rpki-client