Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
File:                     dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json)
Hash identifier:          MRDKQn35RnISIMOVRQUuESkGD/vO8z5TlF3z7b68n/w=
Subject key identifier:   6C:B1:D1:31:75:44:65:5C:4C:E1:8E:F0:11:EF:9A:B2:C9:46:10:A4
Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD
Certificate issuer:       /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
Certificate serial:       0C0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
Manifest number:          0BFE
Signing time:             Fri 31 Jan 2025 18:32:38 +0000
Manifest this update:     Fri 31 Jan 2025 18:32:37 +0000
Manifest next update:     Fri 07 Feb 2025 18:32:37 +0000
Files and hashes:         1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: JotxjiKSMA1VR4xAxZUpTKGhV0Cr4+E4ZgN9sY1zlz8=)
                          2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: MeK9ET7gmT0HXM7WrsCFabf5Xt6ViCVNKTA3zZ5Z6Ss=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3082 (0xc0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD
        Validity
            Not Before: Jan 31 18:32:37 2025 GMT
            Not After : Feb  7 18:32:37 2025 GMT
        Subject: CN=679d1745-528f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:fd:15:03:c3:2b:72:6b:4f:4c:b6:62:e6:
                    2f:e8:45:6b:6e:0f:8d:fa:19:92:82:2a:4f:92:28:
                    14:11:01:38:2b:93:a5:03:76:13:bd:fb:a4:93:ba:
                    84:e2:5f:0a:c5:e0:20:d0:09:6c:84:15:f5:1b:b8:
                    c2:d5:16:d7:0d:ff:51:9d:c7:49:3b:03:b8:0c:9f:
                    7d:de:b3:60:b0:4c:99:4e:f9:43:ef:29:e6:8f:31:
                    b6:cd:c5:10:0d:20:fc:45:37:1a:e7:53:bc:a5:fd:
                    c3:33:3c:02:15:1a:ca:14:c7:17:8c:7c:ab:1a:3e:
                    be:3b:88:61:bd:63:46:13:a4:07:29:87:2d:b0:19:
                    64:20:66:ff:f5:eb:a2:28:3d:0e:a6:34:d5:40:4d:
                    de:e6:6b:27:27:ba:56:11:dc:7c:f7:0d:8a:ec:99:
                    10:ff:42:1f:73:41:f1:40:b4:2d:06:f6:73:7e:d1:
                    b5:ce:47:2e:4f:b8:85:59:dc:3b:14:58:33:46:dc:
                    80:f2:53:73:1b:4d:97:7b:5c:1c:30:96:67:e2:a0:
                    6c:7f:19:f7:22:31:59:99:fc:25:22:dc:25:29:9c:
                    f8:0c:7a:61:25:cc:12:d9:bb:db:6f:0d:cf:de:f2:
                    60:a6:01:48:ab:bf:30:0f:dc:aa:11:27:75:c3:0e:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B1:D1:31:75:44:65:5C:4C:E1:8E:F0:11:EF:9A:B2:C9:46:10:A4
            X509v3 Authority Key Identifier:
                keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:cc:f3:15:c3:91:59:c6:16:3e:03:a6:15:34:52:fd:40:70:
         4f:38:b4:21:24:24:14:64:ef:c8:e7:38:f5:5c:1f:5b:b3:ca:
         93:b1:e0:b2:d2:4d:15:72:f2:74:03:a5:f7:55:13:83:ee:34:
         71:22:16:f6:8e:a6:eb:b4:2b:0c:2e:2b:fd:67:1c:f0:46:c6:
         72:0c:72:69:b5:02:40:3f:87:5c:86:ed:1d:51:54:c2:9a:8f:
         34:b8:7d:9d:76:9b:56:e4:72:ba:8d:4f:22:d5:d7:af:9c:f0:
         fd:d0:75:8c:7d:e2:4c:9f:b2:11:69:78:dd:70:db:d0:b2:4e:
         ee:92:4f:4c:64:32:10:aa:bc:2c:57:c5:01:a9:e3:eb:f0:ea:
         3e:ee:00:e3:6e:73:e9:e7:e8:39:3f:c7:f9:90:e5:b8:56:17:
         7a:2f:9d:6c:1c:ac:62:af:74:f2:50:ac:04:a0:c3:d6:fe:0e:
         ca:72:67:11:ba:bf:02:23:2f:0e:3f:60:aa:17:60:d6:60:94:
         91:a1:24:10:c3:50:ec:b5:de:ba:3c:fd:10:6a:36:4c:dd:0c:
         0b:2d:6f:79:b9:58:f6:48:a3:c7:bb:a8:d7:7c:9b:9f:49:b5:
         52:b7:c3:4d:17:30:08:e3:65:92:ea:70:a3:36:e0:81:c5:5f:
         15:e5:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:06:00 2025 by rpki-client