Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File:                     Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier:          MM3cyEWukYqwii74Ooj4Ho5P/XV+/tTST9rbD9E2ajI=
Subject key identifier:   4A:F9:D2:DD:A1:98:87:4A:26:82:5C:1D:F4:BF:A5:63:D9:27:F8:27
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer:       /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial:       0C14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number:          0C0A
Signing time:             Fri 31 Jan 2025 18:25:25 +0000
Manifest this update:     Fri 31 Jan 2025 18:25:24 +0000
Manifest next update:     Fri 07 Feb 2025 18:25:24 +0000
Files and hashes:         1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: ayFoXVmoOwXNcGumtzDcySwKchQNW0fhR3Oah7RcrZQ=)
                          2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: RucjPZzTbGDJdlGQIFIquuY8AQ91dPmBUeP0p5s4V7E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3092 (0xc14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
        Validity
            Not Before: Jan 31 18:25:24 2025 GMT
            Not After : Feb  7 18:25:24 2025 GMT
        Subject: CN=679d1595-0736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:c2:64:29:7a:bf:4a:7a:00:9b:e0:73:06:
                    31:8a:cf:c6:e1:b2:72:1f:1e:5f:13:65:20:e6:ab:
                    00:15:15:fd:d6:f6:ad:34:f9:39:c7:eb:d5:8a:fa:
                    93:18:f0:7c:d3:a7:ae:9f:ba:23:0e:fc:48:84:c9:
                    24:ac:ea:6f:74:9c:4c:84:56:dd:cf:62:6f:15:4f:
                    e6:ea:1a:84:3c:a4:10:62:d6:9f:e3:26:10:d4:d7:
                    f1:07:2b:9a:45:95:0a:b8:13:c1:c3:9c:31:da:25:
                    6e:4b:0a:79:f8:3e:af:05:20:53:cb:b2:ee:59:22:
                    9f:b0:e0:37:80:8d:bc:53:9f:6a:0c:f3:bd:de:fb:
                    40:89:df:cf:4b:da:c2:50:46:83:4f:4f:4b:8f:26:
                    7a:7d:03:d4:5c:ce:59:19:26:60:10:bc:b8:d9:cc:
                    99:cb:0a:3c:f0:9c:97:a2:06:01:e2:93:8f:a4:39:
                    7d:d5:4d:b3:37:d4:e7:70:1c:43:03:76:45:40:7c:
                    75:91:2e:41:23:a4:c4:98:b1:b0:45:00:1f:a8:7c:
                    5d:0a:f0:09:dd:9e:de:a5:82:c5:ef:19:65:de:2a:
                    e3:b5:90:43:00:41:77:40:d9:e7:60:4d:50:af:d7:
                    7b:9d:b0:32:e0:40:56:a6:75:f2:df:44:d3:38:07:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:D2:DD:A1:98:87:4A:26:82:5C:1D:F4:BF:A5:63:D9:27:F8:27
            X509v3 Authority Key Identifier:
                keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:44:83:fe:e8:79:7b:77:7b:f6:08:3a:60:a0:9b:a8:3b:6f:
         d4:67:8b:5d:3c:94:3d:02:6d:84:3d:83:b8:a4:8f:be:9d:82:
         91:5e:15:10:97:ee:a5:69:6e:18:55:94:5b:e1:07:e9:50:b9:
         fb:fa:d2:d7:c6:59:34:26:d1:d0:93:17:95:0b:56:af:a2:d3:
         10:4b:8d:10:de:eb:65:b9:6a:85:4a:a1:35:11:1d:d9:2c:bf:
         05:cf:71:52:68:82:02:e6:2d:22:30:1e:e9:8d:28:fe:3e:dc:
         a2:8e:1d:36:91:26:88:4b:80:ce:ab:de:2a:98:ee:72:cc:96:
         b9:93:37:78:bb:e3:3a:f2:10:d2:d6:f3:ce:9c:87:61:9b:7e:
         ce:c4:e5:ea:fa:ad:84:82:af:2e:e5:ee:30:89:8c:5c:e9:16:
         eb:5d:c0:27:f4:0f:1d:1a:5e:7f:76:38:14:ac:8a:aa:84:d4:
         f2:d4:3a:46:8a:1c:7c:a8:44:c8:d3:15:86:bc:0d:14:23:bb:
         fd:69:32:21:9f:1d:cf:33:68:e7:93:80:c2:f7:26:f2:fa:8b:
         8f:c8:61:7b:09:17:11:1f:6e:52:64:de:66:87:78:1f:22:c0:
         a7:02:5a:02:37:b2:90:6f:16:8f:0d:8b:98:48:6b:60:8d:93:
         f4:21:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:30 2025 by rpki-client