Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
File:                     yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json)
Hash identifier:          zT+5oYmxFTVsuhvvAdAguNLFMEqieQCAgYnBkke0GO4=
Subject key identifier:   55:A3:93:CD:57:E6:FC:94:BD:60:12:7C:93:EA:18:BB:69:5E:12:16
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Certificate issuer:       /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial:       03D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
Manifest number:          03CD
Signing time:             Fri 31 Jan 2025 00:41:33 +0000
Manifest this update:     Fri 31 Jan 2025 00:41:32 +0000
Manifest next update:     Fri 07 Feb 2025 00:41:32 +0000
Files and hashes:         1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: IVAYaLStKMCRnFhuoZTkS0vJrFNE04QLxsbZfFp2XMQ=)
                          2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=)
                          3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
        Validity
            Not Before: Jan 31 00:41:32 2025 GMT
            Not After : Feb  7 00:41:32 2025 GMT
        Subject: CN=679c1c3d-c8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:e3:d0:54:e2:67:9c:52:31:65:96:00:d7:
                    b0:de:bd:b9:79:8c:b3:08:ce:3a:dc:84:a2:ef:63:
                    80:ce:af:ca:51:88:a8:eb:31:87:df:fe:b7:d4:8e:
                    e6:81:2d:11:a9:21:cc:4a:b4:c1:01:59:29:91:db:
                    57:10:c2:53:d7:4e:10:df:88:30:a6:dd:fb:a4:c8:
                    69:5e:5e:c1:05:4f:46:0b:30:91:6f:a2:5a:da:2e:
                    c8:15:13:c0:90:87:d9:46:c0:e6:b5:da:d4:fb:5e:
                    0b:5e:2d:d6:c2:ae:11:ca:9a:e8:b8:a8:3b:0a:6b:
                    07:29:a2:a7:4b:f5:62:1c:12:a8:31:14:ee:c3:d9:
                    24:1b:d9:2b:69:2e:90:2c:3c:43:f6:60:03:5d:33:
                    5a:12:e1:dd:28:7d:aa:3d:47:79:be:0f:00:00:5e:
                    4c:e2:7b:e0:d2:2c:f4:bd:16:eb:41:7b:ec:ae:95:
                    38:5e:44:ba:33:89:d8:7f:13:4d:e5:92:7f:1a:95:
                    d1:79:9c:52:21:88:87:02:c0:cb:d3:f1:c7:0e:a4:
                    99:ed:5b:ec:00:a9:c2:b4:1c:ae:45:c0:67:75:92:
                    ab:e6:ff:b3:29:04:72:74:8f:6a:6a:87:f1:49:21:
                    d9:54:c6:27:4e:83:f2:18:6f:77:fd:fe:fa:31:c4:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A3:93:CD:57:E6:FC:94:BD:60:12:7C:93:EA:18:BB:69:5E:12:16
            X509v3 Authority Key Identifier:
                keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:25:d3:db:f2:08:d3:f8:b5:e7:2d:6a:df:c7:3e:97:55:
         42:76:78:a0:8b:68:87:ff:d6:9c:e2:ab:45:6b:00:02:44:e3:
         d6:77:7d:94:a1:1a:af:8a:15:41:de:84:62:90:6c:cf:13:51:
         5c:da:ec:ba:22:e7:ee:03:90:79:b8:81:86:16:f3:c3:48:15:
         75:22:20:c8:3d:f8:f7:4d:9e:a5:4d:94:0c:38:22:19:34:29:
         fe:87:7b:40:b8:ce:a6:ff:d9:6c:6d:89:95:13:14:a7:77:62:
         85:a6:bd:94:18:b1:21:bf:9f:95:04:ed:2f:71:fc:84:e7:f7:
         e1:db:72:d8:d7:a0:9a:1d:b2:41:f5:64:59:eb:27:b0:8b:be:
         f0:e0:a7:ad:28:17:51:c7:db:e6:c8:92:9f:8b:94:42:34:8d:
         68:ac:cf:ad:a6:e6:45:24:28:5e:83:69:e1:1d:eb:08:d4:6e:
         67:ac:09:24:7f:aa:3f:25:b3:b6:3b:97:d0:b9:b3:20:f8:b1:
         31:da:23:68:d0:0d:e5:e5:4b:5e:fa:f1:1b:9d:39:f5:19:61:
         c6:0f:d9:b7:4b:69:f2:f0:68:4c:c0:08:29:f4:64:b1:34:87:
         1f:82:78:61:33:85:f1:8f:78:7d:2a:de:af:84:8b:81:4c:dc:
         bc:77:b0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:01 2025 by rpki-client