Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
File:                     YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json)
Hash identifier:          BKY81bIM8/sVZmpwlGFlXEDN1ajar6EOfsOPP+l2wfk=
Subject key identifier:   EC:EC:05:EF:66:E2:2E:A4:FB:A8:41:48:2E:64:B5:FC:52:6A:15:D4
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Certificate issuer:       /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial:       06D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
Manifest number:          06C8
Signing time:             Thu 30 Jan 2025 22:03:40 +0000
Manifest this update:     Thu 30 Jan 2025 22:03:40 +0000
Manifest next update:     Thu 06 Feb 2025 22:03:39 +0000
Files and hashes:         1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: HbWIhAY0MM1TSLxBNSknn/UyHzwbGIAjI81EL+k4Rso=)
                          2: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: zn3yB42jw2hzH+xn19p165uLAUG2n0kqHzuj3/mwn8o=)
                          3: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
        Validity
            Not Before: Jan 30 22:03:40 2025 GMT
            Not After : Feb  6 22:03:39 2025 GMT
        Subject: CN=679bf73c-2e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:e9:20:d9:1f:18:2a:86:1e:42:70:c5:cd:
                    f1:ca:38:90:4d:24:a4:06:8e:c1:bf:ab:0f:d7:4d:
                    bd:fd:ac:1d:c0:7b:c9:10:2f:18:12:bb:16:45:a4:
                    40:6b:fb:59:45:61:43:e4:33:f3:99:53:a3:b5:8e:
                    3a:67:b9:47:74:36:4c:ec:5f:35:63:9b:3d:79:36:
                    09:87:36:fb:7f:56:b3:80:4f:f2:ce:22:2c:c4:b3:
                    ce:c6:32:ac:6d:bb:20:0d:9e:fe:21:7b:34:c0:af:
                    bb:fc:56:6c:1e:c7:19:24:43:81:38:6c:29:1e:11:
                    11:96:f2:1c:52:31:d2:1a:cb:c4:bf:36:1a:60:6b:
                    c4:32:95:a6:46:be:d0:e3:eb:75:c1:75:e5:73:f4:
                    b3:3f:f2:66:44:19:5e:0c:08:e5:18:a9:cf:2d:e2:
                    4a:f0:70:27:f0:1e:f5:98:38:a2:5a:78:6e:53:3a:
                    2d:58:0a:9d:17:ee:26:b4:de:72:46:51:01:a0:f0:
                    4b:d0:cc:7b:ae:7f:ff:70:eb:91:5b:8f:7b:20:01:
                    43:09:0d:fe:96:dc:46:c6:75:bc:60:41:91:31:d5:
                    24:57:03:4e:fd:46:c0:13:6b:fe:fc:19:69:72:db:
                    5a:47:8d:e8:dd:26:90:89:2f:76:38:14:9a:5d:41:
                    24:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EC:05:EF:66:E2:2E:A4:FB:A8:41:48:2E:64:B5:FC:52:6A:15:D4
            X509v3 Authority Key Identifier:
                keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:55:82:b6:af:1e:1b:28:0e:2a:d0:3f:41:8e:cc:b5:37:f3:
         f5:b3:cb:d3:2f:17:a0:7a:79:9d:e7:90:a4:9d:6e:b9:cf:6e:
         80:22:16:a9:5e:79:7c:5c:cb:3e:ea:af:82:94:38:81:e8:33:
         d8:a1:b9:b8:98:33:22:8e:c1:cf:3d:52:57:39:c4:db:fa:e3:
         28:85:96:6f:65:bd:41:02:f8:6f:c7:4a:ba:84:28:2b:05:aa:
         1a:22:76:7a:79:ae:57:8d:cf:d6:61:1d:b8:5b:9b:e5:25:69:
         4b:59:ce:b1:92:58:ce:42:32:cd:5e:ea:c4:bf:1b:f1:18:f1:
         8e:57:b6:a7:da:a2:0c:ef:c0:9a:90:c0:f0:55:6f:dd:4a:bd:
         73:0e:35:7d:0a:73:a4:1a:62:4a:54:0e:c1:7c:82:87:32:3a:
         c9:6e:6a:c2:96:e7:5e:ae:f7:18:a4:6e:f2:61:75:ba:ee:ea:
         4c:ba:bc:4e:2f:a7:df:69:fc:b8:1c:ac:7c:b9:05:93:e2:eb:
         e5:d9:5b:89:93:03:46:18:ea:82:15:b4:60:16:84:58:d7:f4:
         c9:16:4f:da:2e:96:68:79:61:21:ff:2f:23:55:a6:a7:ca:31:
         b6:67:5b:ec:ab:d4:06:ab:b1:bc:e2:c3:87:a5:8d:bf:cb:8e:
         06:d8:b3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:23 2025 by rpki-client