Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File:                     l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier:          mJtkPzHh+ZCkxT+KFvLpmbFu6V06EHVdnwEq5jquQOQ=
Subject key identifier:   F8:76:BB:49:43:32:AB:8C:82:D4:D7:32:47:ED:26:7F:0D:19:72:6A
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer:       /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number:          15
Signing time:             Fri 31 Jan 2025 07:04:37 +0000
Manifest this update:     Fri 31 Jan 2025 07:04:37 +0000
Manifest next update:     Fri 07 Feb 2025 07:04:37 +0000
Files and hashes:         1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: andTirL0e/m6dL0G8p7HWFmZEW8vN2VElSCKOY2u/+g=)
                          2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
        Validity
            Not Before: Jan 31 07:04:37 2025 GMT
            Not After : Feb  7 07:04:37 2025 GMT
        Subject: CN=679c7605-49f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:56:40:da:43:89:5a:db:cb:b8:da:dc:1d:
                    3d:68:a0:40:65:e7:f4:a8:0e:e0:b4:20:48:24:da:
                    e1:7d:42:16:93:50:f8:2a:2f:11:12:f5:1c:81:ab:
                    39:a2:22:85:0e:4b:33:46:0f:fc:b7:a9:78:a6:76:
                    d2:e1:d5:a6:65:23:ce:1b:16:ed:7a:67:70:21:01:
                    be:de:20:68:6d:d9:c1:9e:5d:e1:3b:59:ba:1e:7a:
                    f8:f2:c9:f3:50:7f:74:56:99:c9:5b:02:03:71:05:
                    54:1d:cb:97:10:b5:22:81:80:82:25:f2:94:23:b8:
                    94:c5:c5:ac:3b:b3:6f:76:4b:02:9a:6a:83:c0:3c:
                    ea:05:d6:83:2a:88:0e:b4:84:fb:d2:6a:64:ce:82:
                    0b:b6:86:2d:b7:8d:6c:f4:5c:f2:32:3d:aa:af:8c:
                    02:b0:8d:ae:dc:19:d9:8f:f7:e2:cd:95:6c:13:c3:
                    67:be:1d:73:15:3a:f2:1e:1f:e4:6d:69:e6:b6:26:
                    bc:d5:67:2b:a3:42:c0:f8:d6:41:c8:1f:3a:f6:35:
                    99:83:14:b1:72:c8:24:21:fa:28:cf:b8:57:4f:f5:
                    81:2a:b5:d3:c7:09:c3:e2:6c:0e:05:c4:91:58:00:
                    88:ff:ff:43:63:19:5e:56:00:25:9e:9b:b9:f2:6e:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:BB:49:43:32:AB:8C:82:D4:D7:32:47:ED:26:7F:0D:19:72:6A
            X509v3 Authority Key Identifier:
                keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:3a:4b:c5:73:6d:41:48:61:e1:07:12:01:39:91:31:23:
         1a:82:3c:11:0e:30:85:04:7d:c6:85:ce:df:5a:40:7d:7a:7a:
         fe:21:3c:93:07:74:21:d9:cf:dd:80:c4:ac:93:3f:6f:b0:d8:
         19:84:51:43:b7:90:ec:c0:10:98:98:75:9a:e2:21:19:ec:61:
         aa:5d:ea:c5:2d:00:2c:b6:43:f6:62:30:12:78:fe:2c:af:02:
         63:bf:ff:e8:1a:dd:5f:c3:67:f6:e0:d6:28:0d:72:4b:24:e7:
         a9:01:0a:39:ea:01:c2:d8:d0:08:ec:46:d0:bf:b4:5e:8d:41:
         b8:f9:cc:b2:86:b5:27:ae:40:9b:6c:4c:c6:ac:8f:f1:68:3c:
         64:91:db:c9:44:44:98:39:9a:de:a8:16:1d:cc:1f:d7:49:34:
         c5:f5:7f:e7:85:dc:b7:0c:f8:4c:a7:fc:ef:ed:cd:50:53:3a:
         9d:33:86:9f:70:03:6e:1f:40:0b:90:3d:21:20:f2:34:a9:d9:
         59:de:dd:cb:98:52:a8:cb:ca:e7:1e:96:42:de:52:99:c3:b5:
         f1:d1:48:8d:cf:3a:f2:5c:f0:45:bd:1e:3f:d2:4f:45:87:ce:
         5f:47:a0:f5:7a:af:70:f7:75:e0:86:00:32:fe:83:08:20:65:
         07:80:fc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:28:29 2025 by rpki-client