Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
File:                     chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json)
Hash identifier:          mLFhWtwfHqccbmiM+7cPk34b6ryBzlg8ttiCRWGa5Mo=
Subject key identifier:   13:19:7F:E3:A0:69:D9:83:81:C0:55:82:FD:C2:52:E2:9C:BF:7F:25
Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71
Certificate issuer:       /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
Manifest number:          5E
Signing time:             Fri 31 Jan 2025 06:06:52 +0000
Manifest this update:     Fri 31 Jan 2025 06:06:51 +0000
Manifest next update:     Fri 07 Feb 2025 06:06:51 +0000
Files and hashes:         1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: fbnu4s1xWoSSqyOwBxSctA1SFh8YyLjHOvlE0TmfSvo=)
                          2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: E5suk2cFemWvaevEKzcTmHU5tWd+iiNDKFUohuI1SXE=)
                          3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: spLMbb3mjNqo3JOAdT4XdnGINqr0/vPrWt9FF24zq10=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671
        Validity
            Not Before: Jan 31 06:06:51 2025 GMT
            Not After : Feb  7 06:06:51 2025 GMT
        Subject: CN=679c687c-262a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:14:ce:d3:3a:8c:e1:63:a2:ab:d3:55:11:
                    79:50:f8:50:72:c4:f9:48:e9:e7:f4:83:af:67:2a:
                    86:c7:72:8d:52:a8:c8:ae:4b:e8:a0:cd:6b:05:d9:
                    f1:c8:25:a0:63:8e:ff:fa:6a:49:56:00:d4:94:8d:
                    0f:6d:ab:11:ae:bf:aa:ad:26:54:58:25:08:0c:e3:
                    7d:c0:8d:29:69:92:f3:04:89:ae:08:11:bc:6f:51:
                    2e:f0:9b:7f:ad:54:47:55:7e:db:5c:ab:06:a1:65:
                    d1:8e:ac:32:52:a4:c8:82:bc:29:ac:6d:73:02:1c:
                    b1:d2:e3:fa:f7:89:05:f6:be:d9:42:d3:61:12:50:
                    8e:47:3d:85:e0:83:4b:a5:2b:81:24:33:31:eb:d4:
                    b2:87:5c:35:1f:6f:54:2e:ab:4d:6a:ce:2c:a6:fe:
                    23:0b:a2:89:b9:de:85:0d:a9:ac:d5:40:3c:e4:95:
                    82:17:0e:4a:aa:32:22:b1:a3:07:7c:2b:a8:6d:25:
                    7d:4b:e3:0e:e3:5f:38:53:f5:1c:5d:8f:26:b2:45:
                    11:3e:08:1c:55:2f:91:f5:08:42:16:d7:6e:c7:07:
                    b8:b6:20:c1:3f:81:8f:87:aa:db:b6:ba:fa:e3:04:
                    9a:61:4b:75:9d:b7:67:27:18:dd:a2:dc:29:47:da:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:19:7F:E3:A0:69:D9:83:81:C0:55:82:FD:C2:52:E2:9C:BF:7F:25
            X509v3 Authority Key Identifier:
                keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:64:25:29:60:b7:5b:55:26:64:3c:28:6f:b9:1e:76:2a:4f:
         41:dc:ae:bd:1e:f4:9c:ce:e2:64:b1:48:9b:a6:a4:24:c6:27:
         b4:45:d0:a4:49:90:31:1d:ca:bb:4a:18:d9:8b:2f:32:77:c6:
         ad:32:01:a8:d2:fa:f4:fa:c1:ad:dc:ed:bb:5a:55:dd:00:1e:
         3a:f7:8c:d4:49:b0:05:b2:a2:e9:86:fb:03:88:b1:55:f1:c1:
         fa:d0:22:fa:a5:a0:76:b0:85:99:0d:59:ea:b2:b0:a9:ea:a0:
         6a:e6:6a:1f:03:08:12:4f:7b:af:a4:33:ef:69:3a:2b:43:ff:
         82:94:0d:8f:fe:14:3b:c6:f2:b2:64:e2:73:32:c1:19:51:90:
         c3:64:7f:0d:9b:75:e0:c8:44:88:0b:e8:2a:ac:b1:ba:b3:ed:
         1f:b9:18:f9:6c:7d:67:2a:93:30:24:ca:35:73:be:c8:0d:5f:
         04:88:ba:5d:ae:34:ed:82:68:1d:a5:e4:f5:c0:d7:7f:ee:6e:
         9a:99:45:52:12:bc:ba:b7:05:b9:ae:9e:0f:a3:2d:91:8f:b2:
         8b:10:26:a7:a7:45:75:e1:e7:0b:a4:8d:d8:90:63:cc:d8:b1:
         17:d0:6a:c4:9e:54:2b:78:c7:7e:9f:b6:0c:59:e7:82:1c:f5:
         e2:d4:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:48 2025 by rpki-client