Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
File:                     1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json)
Hash identifier:          uvYEvAe5W66V+uoKe9vtEd1yE9JOKSVWqysuRMS3fOk=
Subject key identifier:   D5:D8:26:8E:C1:2F:9F:A5:23:98:F8:5E:27:56:0E:DF:48:F1:B8:46
Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
Certificate issuer:       /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Certificate serial:       04E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
Manifest number:          04E2
Signing time:             Thu 30 Jan 2025 23:48:44 +0000
Manifest this update:     Thu 30 Jan 2025 23:48:44 +0000
Manifest next update:     Thu 06 Feb 2025 23:48:44 +0000
Files and hashes:         1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: +DN1l7XejEJvF6ujaj9kjsqsFk4IB/nVY+rdthQCx+I=)
                          2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: lwH3/LI1XgonY5xgqpT7sakTv0eerZuuX+aDEUruDuA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
        Validity
            Not Before: Jan 30 23:48:44 2025 GMT
            Not After : Feb  6 23:48:44 2025 GMT
        Subject: CN=679c0fdc-c640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:7d:5f:c7:f9:24:8d:f4:26:f0:71:cf:19:
                    92:8c:11:14:91:29:d9:49:c1:6c:e2:3a:62:c2:1c:
                    ad:7d:c4:3b:29:55:b6:53:d6:40:0a:62:f3:2a:f1:
                    50:18:7b:88:55:9f:fe:d0:b9:52:e2:b0:c4:78:87:
                    f6:1a:0d:f8:5a:4e:10:76:02:1a:99:11:f4:12:fe:
                    60:37:35:2f:d6:0c:8c:09:08:8f:11:b9:4f:5a:14:
                    aa:bd:da:04:72:e9:5e:d6:b6:14:e7:01:42:0f:36:
                    07:59:ee:ed:b5:b9:28:e4:ce:6c:43:49:aa:30:da:
                    e3:cf:42:7b:56:a5:d2:d0:6f:f7:5a:91:cd:0c:c3:
                    ce:62:d3:a6:b4:0a:e4:45:f2:29:e8:69:a3:62:5e:
                    6c:48:53:c1:6e:4b:ad:28:01:de:4d:fe:ce:01:24:
                    80:ac:a1:b7:75:e9:e7:87:ca:4d:8d:2a:80:e1:12:
                    50:63:28:87:19:25:c3:52:97:fc:62:c9:ef:00:c7:
                    f1:75:87:c3:56:46:87:3e:b9:d4:14:34:67:bb:5f:
                    03:b4:06:3b:a7:4a:02:1d:4d:09:dd:81:93:30:3c:
                    4d:fb:c1:4e:9b:a5:7d:e6:4f:8c:f7:3e:a7:bd:a2:
                    3a:68:69:c8:27:62:5a:a6:54:98:2a:ac:d8:1d:ff:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:26:8E:C1:2F:9F:A5:23:98:F8:5E:27:56:0E:DF:48:F1:B8:46
            X509v3 Authority Key Identifier:
                keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:99:28:54:b7:33:2e:d2:30:49:83:6c:d8:41:bf:95:17:cc:
         f4:3a:6b:8c:5c:ba:58:82:3b:a3:85:72:11:cf:7c:47:66:9c:
         69:73:10:94:42:51:e1:77:e8:0d:9c:03:95:90:65:3d:fc:fa:
         12:86:5c:af:66:63:19:a1:a9:43:bc:b9:28:bb:0a:f5:04:da:
         1b:48:9e:c1:df:ec:d6:96:78:e8:cd:f9:16:80:cd:ec:77:95:
         7e:2a:ce:1a:c2:3a:df:d2:d1:eb:96:34:08:64:55:10:81:d4:
         10:6a:0f:d4:8c:fb:8f:50:3e:0f:b3:b7:5d:3c:b6:f5:4b:c6:
         b2:48:e2:77:2c:49:82:4c:03:ec:89:03:10:0b:d0:aa:cd:55:
         5a:d0:90:f6:01:4a:22:53:33:d1:73:69:6d:c2:fb:1c:62:b9:
         f0:04:9e:0b:b0:f7:a3:8a:b3:a7:3a:e5:4a:d9:70:2b:22:76:
         30:2d:fb:7a:df:00:88:d9:5d:26:23:d7:2b:6f:09:30:5a:e8:
         64:db:93:86:4d:5f:db:94:71:74:c5:a0:75:03:97:e7:14:a4:
         98:9a:11:19:6c:22:c1:a2:10:d4:65:f6:44:37:4c:73:3a:d8:
         72:d0:84:38:65:ab:aa:e9:d7:42:e0:bc:b4:16:9b:83:99:7e:
         f5:aa:66:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:08 2025 by rpki-client