Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File:                     hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier:          sUiIgosikI3k4cEI7zzTpu0GoTBIQbqEbquyNhsgEn8=
Subject key identifier:   1F:15:08:9B:B3:95:51:14:67:BD:C1:82:DF:DF:E0:8B:A8:EF:AA:F2
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       0314
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number:          02C3
Signing time:             Fri 31 Jan 2025 01:38:23 +0000
Manifest this update:     Fri 31 Jan 2025 01:38:23 +0000
Manifest next update:     Fri 07 Feb 2025 01:38:23 +0000
Files and hashes:         1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: O1WsfAo4c9RPCnjNoYI5suaK9xgpMDcwmXgJiW1WVd0=)
                          2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=)
                          3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: c8x4WauwQnDwDqZuEAJ4h64A3YhZdzAuusRUf8JYYN8=)
                          4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: itBUJ/NWTISnHVYwiSk058o8wCPmgPPTXD1wCEm1HPU=)
                          5: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: /6/vPtizZYxr5v7ORtDfd8JRwZk7T9USDbBUeYwxyPg=)
                          6: BE4B3228691411EFB573C120C4F9AE02.roa (hash: FluzuCEVsK4WA6irM+7AYglOFW70dV1BU5TUHFD621E=)
                          7: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: t9M7T3kGK/bHK5ZGPmj0eAYe1o0Vh2EqcoFWaTSjMIE=)
                          8: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 5R/vByP+bLJ/gauluwV0ijjw0b2SOL4DSiyRAY6Etqs=)
                          9: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=)
                          10: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=)
                          11: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: cN/u2ghL7Ty5H0rMkH3B9dtMoGNw2oNZ5rkn/Hb9xkU=)
                          12: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 7Kj+4WHxVaVF82sSnOwl9LxBArA7W70r8lzjmBc5kVs=)
                          13: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: H7xrZOzZPQxCuJob9N/j2hDDJP833H9T1/f50kmyI3U=)
                          14: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=)
                          15: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: 9FLrfM7I4+bVcqyGWmEPmZO9HbNgyq3TURv3crH+HFI=)
                          16: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: 3IXJ2kT9nZjjXNHHgzGLrJIGKkUtdsBH6PxdM1Y97ec=)
                          17: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c=)
                          18: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: cAER3YKLvVpIlFa2HmbUxYe1iz95sgNYpvM/4V9O1FM=)
                          19: EA792108690E11EF9396CC48C4F9AE02.roa (hash: umWQN4kGqAHPIk4w+IQl09gKoDRTIfMgnHpo1DCC4Pw=)
                          20: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: eF1xrltNfnruVqxNMjD44+JutJBXSUDGILKtju+n9dE=)
                          21: B35D540E68F611EFB785D145C4F9AE02.roa (hash: oyIjz/XYfgr26Spk6RY9XOtfUIT6X7uMOPMW03yZfAM=)
                          22: 218211CA68F911EF986C8281C4F9AE02.roa (hash: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo=)
                          23: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: Y3bQNy1ojyOB4N21qfu+0X9uUvLU+z0WanHBys0zBlU=)
                          24: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: HQ71fsK6HJEx6JB43+BRDscF/a1IXcYLFxyQuU5FBnw=)
                          25: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: kqYwhkwqrnPwUBbzCMbRJ6+BU/s1Jp8YtMASUL3cC6Y=)
                          26: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: d/aMw06UKvCrIDovTtwhw18Yfx0jjxX2eyRA38OLxcQ=)
                          27: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: +1sHzrOMqBbheGIlr1WPdNiSvR59VAOdWWIJJa+mgHk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Jan 31 01:38:23 2025 GMT
            Not After : Feb  7 01:38:23 2025 GMT
        Subject: CN=679c298f-a034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:af:3e:88:83:72:19:02:9d:bb:f3:53:08:44:
                    9b:85:84:1a:71:14:3c:ef:39:6f:48:02:5f:81:1c:
                    10:13:75:ca:29:f9:c8:a9:38:03:af:5b:7d:4f:89:
                    5f:35:04:c2:3b:bf:c8:fc:99:f5:2a:47:5c:74:22:
                    04:69:87:26:ea:97:d9:47:b7:e6:09:32:7f:5c:83:
                    58:16:e7:4f:d1:33:95:d2:64:44:ba:61:8b:78:c2:
                    99:88:4f:83:72:9e:54:5b:76:0b:82:e9:56:4b:98:
                    04:08:5f:a6:8b:f4:95:a9:73:a2:c9:70:f1:18:d9:
                    84:0e:14:ca:39:13:bf:19:7e:31:c5:ac:8a:f9:e6:
                    66:e3:2a:a2:2e:88:34:f3:b2:13:14:3d:c4:91:05:
                    a0:82:d9:27:82:f9:41:aa:d0:47:45:09:12:1d:d9:
                    7b:e7:c2:4d:89:f1:5d:24:b6:04:1f:ac:58:49:fb:
                    1d:21:c6:97:8f:19:c6:34:be:5b:71:8f:b3:0e:8a:
                    37:b4:5a:a4:aa:ae:2d:da:3b:6e:1c:88:87:7b:16:
                    7e:51:3a:be:d9:02:30:52:1a:1a:34:da:b0:c1:6c:
                    d4:6d:09:b6:08:6d:7e:8b:79:67:6a:f6:de:2a:e9:
                    3a:f0:bc:d3:c6:65:56:04:56:d7:b9:69:7b:fd:29:
                    20:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:08:9B:B3:95:51:14:67:BD:C1:82:DF:DF:E0:8B:A8:EF:AA:F2
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:41:51:e5:3a:06:96:85:b1:a0:f8:a1:63:a9:9b:30:7b:
         12:b4:d7:09:90:71:95:9d:4a:72:c2:08:70:38:12:d8:7c:06:
         dc:d1:29:8a:4b:ce:44:f2:b7:c7:dc:ee:5c:ae:c4:8d:4c:66:
         23:ab:83:e4:e7:57:60:94:0e:d3:3b:da:02:9c:6e:cd:2d:b7:
         eb:0f:67:ed:fd:d6:5f:47:95:1d:4f:b3:14:1b:eb:12:86:33:
         32:cc:7c:5c:dc:1d:6a:51:83:3d:10:f8:18:cf:65:10:4c:e3:
         75:aa:e5:1f:88:0b:b7:3b:84:58:5d:df:b1:24:30:f3:18:a7:
         5b:f1:ae:2d:4f:13:3a:bb:7c:e1:eb:5b:38:bd:60:57:02:f7:
         b7:73:6f:ed:94:7e:fa:e4:9b:65:7e:1e:8c:d1:0d:3b:f4:00:
         4a:86:b4:9d:7a:bb:56:28:3c:86:ad:bf:9e:7d:76:30:fc:bc:
         fd:d4:ab:1c:53:84:82:ec:56:ec:32:0a:6f:87:00:ef:47:86:
         65:3e:c7:ef:31:fd:81:cb:09:e6:1f:32:19:44:e9:8a:79:7b:
         0f:48:a8:82:db:c8:62:ae:e3:ec:83:c7:f2:fb:e5:88:cc:23:
         02:d7:52:98:78:44:a6:a5:df:98:a6:c6:23:59:56:9d:5f:97:
         1d:da:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:09 2025 by rpki-client