Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
File:                     GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json)
Hash identifier:          4q6Efasg57odN1LFZ25XKgRHxhAH3Uou5okBH2rhutA=
Subject key identifier:   E7:C3:6C:F9:F6:2F:0D:A7:F0:2D:82:53:09:60:77:83:AB:75:0B:37
Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
Certificate issuer:       /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
Manifest number:          07
Signing time:             Fri 31 Jan 2025 07:14:40 +0000
Manifest this update:     Fri 31 Jan 2025 07:14:40 +0000
Manifest next update:     Fri 07 Feb 2025 07:14:40 +0000
Files and hashes:         1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: KQbZTX+McpdMJ8Z6kGU53FTHCC58LAKK3eYvdycUNkU=)
                          2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: Fo5VkT431J+zLy9igbQ3SFfIsb+FgMetIU9BycrAICA=)
                          3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: ftkSUsDxtIg6s2jX13CXTFZ0keaCV5YjPDUyQbqNBxE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
        Validity
            Not Before: Jan 31 07:14:40 2025 GMT
            Not After : Feb  7 07:14:40 2025 GMT
        Subject: CN=679c7860-4754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:c7:0e:38:c9:12:72:8b:52:bb:e5:bd:5b:
                    65:de:54:3d:1f:7b:bd:c8:b6:16:c0:08:3c:5d:d0:
                    8f:d8:44:92:25:ad:ed:1b:48:e1:f6:37:de:6b:51:
                    bb:30:1f:a6:d4:5e:f9:5c:d3:98:3d:cc:39:c7:2d:
                    a4:ce:ef:bb:ac:0a:f6:9e:36:7e:f7:16:46:50:22:
                    17:5e:03:c8:45:eb:27:e2:5b:91:14:d9:16:d4:b4:
                    cf:fc:24:6c:e0:73:d4:ba:26:c7:91:c0:27:ee:4a:
                    3e:53:64:d9:ec:f0:1d:d5:d6:6f:e8:a1:77:3d:90:
                    7e:e7:7a:dd:0f:27:67:de:84:d3:7f:6c:d5:cd:12:
                    a4:da:6e:fd:80:e5:9e:42:62:a5:6c:83:f5:26:60:
                    0c:60:b0:4d:81:6f:a6:5d:34:5a:c3:9f:35:01:d3:
                    7c:ca:84:f2:a5:a6:a7:94:79:d2:5a:f4:b6:1d:ab:
                    44:3a:2c:ab:4c:27:47:6e:09:aa:84:22:c4:6c:4d:
                    60:41:a0:40:06:81:db:26:ec:75:a6:39:a1:87:2e:
                    60:38:1e:d8:3f:a9:bf:70:40:86:21:89:70:92:6e:
                    cc:af:62:6f:37:0e:22:9f:10:ec:63:49:2a:a8:3a:
                    3b:ac:78:2a:00:e2:67:53:31:4b:36:b4:b9:3d:a3:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C3:6C:F9:F6:2F:0D:A7:F0:2D:82:53:09:60:77:83:AB:75:0B:37
            X509v3 Authority Key Identifier:
                keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:82:52:bb:fb:6f:a8:32:b6:20:f2:74:39:e9:59:99:c3:2c:
         c4:ef:eb:2f:b2:45:a4:b3:3e:35:17:1c:e8:c9:09:7b:88:79:
         a1:2e:5d:55:0e:aa:eb:cf:e6:34:72:b0:d4:49:d4:1d:14:ab:
         c7:ce:8c:0c:da:1a:3d:8f:4e:e5:26:e2:62:99:d1:70:a7:bb:
         9c:fb:85:b6:c5:50:b9:17:54:b5:5d:e1:d9:78:5d:9c:ad:1b:
         3a:0a:e5:20:44:c3:65:43:ab:18:73:09:40:72:c3:1a:a6:55:
         7e:a9:32:e8:8e:e3:ce:04:06:d1:4b:da:21:05:ec:59:19:71:
         39:7c:70:f7:92:02:b3:b5:f1:22:08:65:eb:95:26:dc:f9:b8:
         58:a1:34:86:4d:6f:cf:3a:03:12:28:5c:15:b4:cf:13:cf:4c:
         0b:7e:9f:ad:c7:93:83:74:e7:1d:d2:a3:65:93:6c:c0:03:7e:
         94:c0:f4:b0:20:6a:24:e8:fc:6f:e8:8e:9c:91:91:7a:64:f8:
         d1:d3:bc:8f:22:4b:2a:b7:58:c3:cb:da:ef:e3:ab:c2:14:82:
         79:7a:06:8e:37:09:ee:60:53:d6:ea:0b:b9:67:6e:16:3f:4e:
         fe:ab:37:06:a4:b9:a0:27:bd:37:71:2b:68:02:01:c5:8c:b9:
         33:f0:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:04:57 2025 by rpki-client