Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
File:                     MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json)
Hash identifier:          DKrDDUSuIINJ18R9ulZKwE0/man8s72HFVwC8HzvZ8A=
Subject key identifier:   7D:22:78:F6:A0:50:6A:76:B1:5F:93:2F:F2:6A:C5:52:23:DA:11:0D
Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
Certificate issuer:       /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Certificate serial:       149A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
Manifest number:          1490
Signing time:             Fri 31 Jan 2025 16:52:08 +0000
Manifest this update:     Fri 31 Jan 2025 16:52:07 +0000
Manifest next update:     Fri 07 Feb 2025 16:52:07 +0000
Files and hashes:         1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: juIjHwqegcPThuy2shZq88lGBeR8nyY/5YN3ZpO3NCA=)
                          2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: s6vtNQQIQsupRxsuHL5whiOvZL5AmFIPdveK43lCi0M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5274 (0x149a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
        Validity
            Not Before: Jan 31 16:52:07 2025 GMT
            Not After : Feb  7 16:52:07 2025 GMT
        Subject: CN=679cffb8-6127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:8f:6c:31:ba:cb:48:a7:f8:b4:b5:3e:15:
                    2c:16:4f:ab:25:d8:04:6a:90:b3:d2:58:58:e8:e1:
                    ea:d4:a0:4f:91:a9:63:37:e8:a7:36:d1:d0:eb:6a:
                    48:c2:39:38:b1:d2:1d:d1:b1:0d:9d:30:a5:81:00:
                    ee:76:59:f1:8d:88:15:d3:82:3f:36:cf:54:7b:50:
                    79:02:d8:73:c8:68:15:14:19:85:ff:a3:ed:66:7b:
                    60:96:95:bd:b2:c5:e1:25:ef:3e:06:1f:5d:23:74:
                    d0:41:b7:5c:24:4e:a1:cb:87:07:a4:16:16:51:d3:
                    75:00:fe:2b:9b:b4:6d:bb:b9:de:dc:6c:9d:c4:38:
                    2c:b1:c9:f7:b7:14:e1:32:d4:ef:69:16:19:8e:3d:
                    a0:fd:0b:51:08:90:bd:e2:df:c6:3d:bb:c3:56:c5:
                    ff:83:3b:52:a0:23:47:10:77:11:d5:35:2c:da:c3:
                    e9:bc:cc:8b:e2:8e:d3:26:5b:96:34:25:0d:fb:db:
                    29:0b:2d:58:d1:1e:6c:fb:d9:ff:7e:67:b6:bb:c4:
                    83:d7:11:74:02:70:b9:ba:20:6d:8b:52:0a:b2:67:
                    17:e6:ae:14:91:f8:73:92:9f:7b:a7:86:97:4f:e5:
                    fd:04:16:8a:6f:11:d0:3e:45:b1:68:2e:02:5f:90:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:22:78:F6:A0:50:6A:76:B1:5F:93:2F:F2:6A:C5:52:23:DA:11:0D
            X509v3 Authority Key Identifier:
                keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1b:02:0f:77:8b:4d:77:0a:a7:74:0b:63:cf:69:4f:48:b4:
         55:56:3d:19:e2:d3:19:cc:76:c0:2f:fa:e5:51:70:19:14:57:
         30:9d:4c:80:01:95:6f:a2:c0:7d:e6:ec:00:51:79:72:f1:12:
         83:b9:65:f3:0b:1c:8d:fb:75:4c:2b:67:65:9c:0e:c3:58:b7:
         02:29:d0:87:d7:ac:52:c4:c5:10:0e:28:58:04:af:b6:2c:de:
         a0:ae:2a:9f:12:d2:63:0a:23:b4:63:da:b8:35:69:2e:45:01:
         00:1e:50:e1:4a:ad:d8:f8:b7:66:04:36:32:43:3e:19:e3:d6:
         b1:1b:07:b9:ee:b2:10:94:f9:a2:1d:6a:38:1b:3b:72:d1:c0:
         cd:33:6b:2d:c9:35:ae:ec:3e:f2:6b:b7:a6:08:da:b8:94:af:
         3e:35:b2:1e:33:a6:37:90:0c:c8:0c:56:1c:c8:5f:9c:06:55:
         2f:b7:b9:db:2b:83:e3:f6:d6:a3:ee:83:ee:d8:14:50:c0:28:
         bd:4c:4a:b2:5a:e3:cf:06:bd:9d:ef:bb:ca:87:90:35:9d:a5:
         64:b7:40:77:66:e8:e3:48:22:c0:b7:9c:d2:df:1d:66:f8:5e:
         93:74:bb:53:67:aa:f7:90:e1:ce:0a:23:20:ce:dd:0f:39:e4:
         ee:1f:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:05 2025 by rpki-client