Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
File:                     EMapar_laJvHveWr6KZtlSRT-xg.mft (raw, json)
Hash identifier:          5tomDfhtFbRvArYDbjvs1BnVJsd+sMHXRotK6f7m8y0=
Subject key identifier:   AA:DF:91:73:F4:3C:09:19:36:0F:1A:A5:3D:A3:50:C0:AE:F5:B1:66
Authority key identifier: 10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18
Certificate issuer:       /CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
Certificate serial:       122E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
Manifest number:          121C
Signing time:             Fri 31 Jan 2025 17:08:33 +0000
Manifest this update:     Fri 31 Jan 2025 17:08:32 +0000
Manifest next update:     Fri 07 Feb 2025 17:08:32 +0000
Files and hashes:         1: EMapar_laJvHveWr6KZtlSRT-xg.crl (hash: EkJCNpNok7wA1DlMRrMA/aSXWocGQoTK9GHh3J5zSIA=)
                          2: C6CD392C951111EFB906EE25C4F9AE02.roa (hash: MNDMDJlCyirPaUsQSuMDU67Qsy9JImq4E9fRXZouKVM=)
                          3: F31D6E84951111EFBEBB2926C4F9AE02.roa (hash: RYETi0zkwG+1OYC+IAx2GdRhn5XJnpnss76zM5O7Tmw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4654 (0x122e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
        Validity
            Not Before: Jan 31 17:08:32 2025 GMT
            Not After : Feb  7 17:08:32 2025 GMT
        Subject: CN=679d0391-849f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:d3:b1:f8:53:ab:d5:dd:e5:5a:7c:a7:c1:
                    50:ca:22:05:8e:54:87:06:66:73:4b:1d:50:1c:69:
                    e2:41:7c:90:01:1b:83:d9:10:e8:47:03:7d:d7:16:
                    56:7d:b2:09:f9:d0:d4:ba:b8:b8:24:63:dd:0c:fb:
                    ad:76:18:dd:03:a3:de:14:02:31:cc:46:77:96:38:
                    6f:6f:0e:9f:dc:5a:2d:fa:9a:83:3a:9b:82:e2:04:
                    0f:fe:0c:ec:3c:53:05:18:4e:f8:97:ac:0c:0a:cb:
                    87:e6:ac:b7:0f:06:01:04:4e:d2:ad:78:cd:25:39:
                    b8:81:2d:54:9a:2b:62:45:d0:a5:97:83:5e:84:4a:
                    1c:28:68:b6:41:54:4b:f2:04:f2:73:db:63:6a:d6:
                    68:e9:95:c2:64:29:b6:b8:67:cd:72:ea:0a:0a:29:
                    87:95:c4:4c:65:20:8a:76:9b:d0:de:fc:d4:40:4f:
                    7e:8e:51:53:4a:0b:e2:a7:5f:e6:24:74:1d:aa:6b:
                    f9:87:b3:aa:67:3d:8c:4c:e9:9a:5c:d3:b0:42:b0:
                    14:50:ec:41:25:65:37:59:74:01:8c:cb:2b:86:b1:
                    70:5a:9c:46:95:c5:c7:be:e6:dd:54:01:cb:cf:f1:
                    12:58:ba:48:52:41:1f:6c:d1:0e:33:d4:6a:05:c2:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:91:73:F4:3C:09:19:36:0F:1A:A5:3D:A3:50:C0:AE:F5:B1:66
            X509v3 Authority Key Identifier:
                keyid:10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:11:a0:7e:87:69:5d:e9:db:fd:0e:43:5e:2e:a6:a8:c5:93:
         e1:36:0d:75:fd:c3:63:06:77:9c:83:eb:45:ab:a1:9d:bf:e4:
         49:09:5f:a7:29:6c:24:6e:3d:b8:a4:65:ea:13:7f:62:38:fb:
         ad:a0:73:80:ed:7d:27:e2:cc:bb:77:f0:0b:a4:16:1c:28:fa:
         65:86:81:50:8b:91:f8:56:0a:1c:64:71:14:f0:ec:24:d8:bf:
         03:97:c8:e0:6a:45:58:5f:70:01:e0:c6:87:52:68:4d:7c:ec:
         f9:1a:01:11:a5:92:b7:f0:40:66:10:bb:64:b2:d6:04:70:99:
         5e:0c:35:dc:95:5b:68:29:17:97:11:fa:4a:98:d3:13:ab:20:
         bd:ac:b6:c5:a7:70:dc:88:df:4b:9b:c2:75:a7:47:27:aa:34:
         a1:11:b0:55:5f:2d:4c:aa:86:38:43:89:68:77:0f:f7:3b:b7:
         8d:ef:7e:65:2a:73:d9:41:21:3c:ce:fc:6b:e1:bf:9d:94:bf:
         d8:04:2c:31:3e:bd:10:53:ce:55:95:2b:9c:fa:6f:3b:2e:ba:
         ca:74:89:78:56:ee:d4:7b:42:f5:82:36:87:72:5c:c8:dd:f2:
         6e:92:05:f4:ae:e0:ed:31:e6:8b:d2:e8:66:23:af:7e:15:e6:
         a1:75:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:05 2025 by rpki-client