Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
File:                     C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json)
Hash identifier:          78Xo3AGeB6XEgGdqq57bIbpLMziHtwBeg2ssgpoGL/A=
Subject key identifier:   D5:BE:78:E9:0E:73:43:DB:D7:AB:D1:36:FE:BE:B1:8D:FF:FD:A9:BA
Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F
Certificate issuer:       /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
Certificate serial:       0502
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
Manifest number:          04FD
Signing time:             Thu 30 Jan 2025 23:42:09 +0000
Manifest this update:     Thu 30 Jan 2025 23:42:09 +0000
Manifest next update:     Thu 06 Feb 2025 23:42:09 +0000
Files and hashes:         1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: TwEYYVN/zgVwIJgOUFSN4BomiQxX/sng9jecrUVWdBE=)
                          2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: gIqEUytD692JqpeV91M06iKGJH68vEW3s4YtICieKE0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
        Validity
            Not Before: Jan 30 23:42:09 2025 GMT
            Not After : Feb  6 23:42:09 2025 GMT
        Subject: CN=679c0e51-dab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:07:25:50:f6:a5:43:f1:9b:de:18:74:18:
                    da:ac:00:92:03:1c:c0:e4:5a:c5:f8:93:57:5d:8b:
                    ce:f7:18:77:2d:f0:f4:19:5b:4f:7f:b0:8e:36:ba:
                    54:bc:42:49:0f:f2:6c:ab:2b:81:36:d7:eb:c4:04:
                    56:28:aa:e9:8a:92:10:f2:87:b4:c5:4e:cb:e9:2b:
                    d0:43:16:05:e3:13:4c:6f:77:2f:c8:68:48:0e:8b:
                    c6:e2:81:11:d3:f1:15:8e:48:21:8b:19:5d:c4:94:
                    d9:c7:95:b2:10:9e:a1:69:54:f7:94:9f:20:f7:ae:
                    60:f6:11:48:e7:5d:a2:f4:cd:18:7c:22:97:25:54:
                    cf:68:3b:42:93:ff:6c:d0:f3:00:e3:aa:f3:ee:93:
                    02:52:e7:c7:bb:48:6f:ea:ba:33:f8:a9:25:10:95:
                    b5:b7:db:64:58:68:82:46:45:91:fb:71:46:02:e4:
                    ae:35:08:29:11:49:36:b3:03:dc:87:2b:a6:03:23:
                    5e:2b:c6:f0:0e:66:cc:f4:0e:57:e1:5d:61:02:b2:
                    5e:ee:9b:4b:3a:27:59:60:7d:8e:86:8d:86:b7:f9:
                    3a:a4:f2:ce:46:92:1b:2e:55:76:b3:d9:10:2a:95:
                    13:d6:98:15:4a:b0:2c:76:82:62:db:23:90:87:94:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BE:78:E9:0E:73:43:DB:D7:AB:D1:36:FE:BE:B1:8D:FF:FD:A9:BA
            X509v3 Authority Key Identifier:
                keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:88:29:57:1f:62:be:84:bd:1d:87:07:a6:b9:59:ae:0f:f0:
         1a:cf:20:b1:06:04:d0:1c:ab:94:31:b1:34:a9:e9:17:36:e4:
         47:61:5c:fc:0d:3e:7e:15:80:fd:86:fe:d2:12:89:98:bf:17:
         46:8b:53:f1:2c:2c:cb:3e:3c:bb:f4:ae:23:5e:df:2e:cc:79:
         5e:22:49:a4:6d:75:3d:da:29:25:fd:58:ff:c0:c6:48:5b:b8:
         9a:c9:77:52:f7:6d:88:f3:2b:95:ed:1d:45:2f:42:9d:0a:57:
         bb:88:79:69:5d:ad:7d:a5:04:94:77:f2:3b:bc:cb:a3:bb:a5:
         a7:5d:cf:69:47:66:4f:6b:5a:74:36:c9:cb:19:49:53:57:8f:
         c2:b9:8b:6b:e4:a8:6e:0a:02:51:6b:0b:49:bf:03:80:f3:ac:
         62:50:20:d0:fc:e3:9b:ca:2d:5e:57:45:d9:f0:13:38:48:b0:
         15:c1:e8:37:36:7a:60:2f:f2:67:73:f6:c8:3d:0a:f8:1b:80:
         62:a8:9e:d6:61:c7:3f:f4:6a:9c:a4:c7:c8:f1:45:61:6f:15:
         37:74:2e:c0:e9:4c:2c:3c:0e:70:01:4e:7c:dc:3a:ea:4a:2c:
         08:e7:6d:05:95:44:a1:e4:9d:79:e4:38:1a:90:4a:33:d5:6f:
         82:32:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:42 2025 by rpki-client