Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
File:                     L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json)
Hash identifier:          9fiOPzvBw8xMYLQR9adNUAcWqEpzO6bG0SDqrzBUr8Y=
Subject key identifier:   50:49:FD:73:F3:EF:E6:BA:52:98:35:00:2E:9E:86:9A:E9:22:53:4D
Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
Certificate issuer:       /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Certificate serial:       3481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
Manifest number:          346B
Signing time:             Fri 31 Jan 2025 14:47:44 +0000
Manifest this update:     Fri 31 Jan 2025 14:47:43 +0000
Manifest next update:     Fri 07 Feb 2025 14:47:43 +0000
Files and hashes:         1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: b5vMbeHZG+1inHp4Uu0eLRM4lEyf4umWhRx+vjC0mEg=)
                          2: 90A91764A0C711EF99B35119C4F9AE02.roa (hash: IFfgeNWOmW48wT5wG379TZhXBQiEXiYFADpsIgQ6k3o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13441 (0x3481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
        Validity
            Not Before: Jan 31 14:47:43 2025 GMT
            Not After : Feb  7 14:47:43 2025 GMT
        Subject: CN=679ce290-d0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:13:88:89:09:0b:0e:6a:7b:e9:be:80:03:
                    b5:b5:71:50:3e:a7:7c:03:bb:77:6b:47:7d:ef:aa:
                    86:03:74:80:46:ec:73:71:da:69:8e:35:90:80:a8:
                    a2:6b:fb:a3:e1:2c:e6:bf:5c:c8:6d:d2:93:9d:d9:
                    57:8b:2a:e1:02:a1:0e:9e:1e:6a:74:a8:90:0c:e9:
                    77:dc:d7:05:4c:e7:74:ed:67:51:7e:fb:ad:6a:0f:
                    2a:5d:6b:dd:34:42:27:08:e0:d4:9a:de:12:09:23:
                    19:c7:56:1e:6d:f7:b9:05:04:d5:97:29:bc:c7:91:
                    1e:81:3c:ad:f2:ce:54:10:48:a8:17:9c:3f:d7:c9:
                    26:a5:3d:15:80:ba:e8:ae:41:1b:6e:60:59:b5:c5:
                    58:ed:fb:3e:ff:52:78:3e:5c:ab:64:f8:12:7c:16:
                    4f:30:6a:f2:ec:a8:de:b4:70:4c:9b:99:5e:98:f9:
                    f9:12:a8:b7:95:6f:d1:39:f9:a3:a8:db:4c:2e:f3:
                    46:b3:a3:6c:b4:7c:3d:dd:13:c7:f2:92:59:50:d7:
                    f7:3f:f8:c8:ca:b6:c7:e4:99:ef:3a:b7:f2:c5:f2:
                    f2:90:2c:c7:28:b7:51:98:d2:02:cc:19:71:21:5a:
                    93:92:19:83:cc:3a:a5:1d:ba:bd:24:c3:03:72:cb:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:49:FD:73:F3:EF:E6:BA:52:98:35:00:2E:9E:86:9A:E9:22:53:4D
            X509v3 Authority Key Identifier:
                keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:62:ea:48:e5:35:46:f8:79:fd:7f:36:b5:ca:ac:ff:e4:61:
         35:1c:af:45:e6:8d:f9:1a:c3:a0:d5:0a:1d:48:03:7e:ea:d5:
         b4:be:18:6f:26:f8:21:34:38:f5:33:8c:0e:9d:3d:9a:9d:fc:
         ce:3f:44:ef:69:92:3e:31:21:f9:86:58:50:d8:a8:fa:16:fe:
         5b:b7:e6:5c:d2:c6:a0:38:c4:e4:7d:d6:11:6c:e2:05:5f:dc:
         9d:f2:34:a4:35:db:e8:56:c3:8f:88:0e:92:f7:45:bb:a9:c0:
         b7:a0:fa:8c:f2:87:a7:1f:ba:de:99:39:55:e0:d2:a2:5a:52:
         91:26:91:d3:bd:4e:ee:cb:54:76:c0:53:40:84:20:e6:c4:b9:
         26:12:7c:bc:eb:e4:c7:fb:37:66:8e:80:d6:7a:dc:b9:29:81:
         a3:c4:ca:2c:54:12:53:bf:2f:84:54:4b:a9:eb:35:e9:92:3b:
         1c:7b:30:fa:6e:9e:9d:8b:6e:e8:da:a0:0f:5d:73:cb:f6:89:
         61:80:45:c7:ea:db:34:ad:1a:a4:86:2c:07:b0:2f:d0:e5:d4:
         6b:d5:64:48:c0:af:75:69:cb:45:1d:b2:1c:11:2d:c2:38:46:
         26:34:f8:61:a9:59:0c:53:12:13:d4:cd:f1:ba:e9:b9:62:02:
         3c:18:01:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:46 2025 by rpki-client