Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
File:                     iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json)
Hash identifier:          cT33Ok6tkIZcMkbhZLhQhFawL6vroVButKBXm+Kjfcw=
Subject key identifier:   31:7C:78:6C:F1:BE:C4:E2:48:E6:E4:4A:8D:76:6E:C8:D0:CB:D3:D2
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Certificate issuer:       /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial:       0459
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
Manifest number:          0455
Signing time:             Fri 31 Jan 2025 00:14:45 +0000
Manifest this update:     Fri 31 Jan 2025 00:14:44 +0000
Manifest next update:     Fri 07 Feb 2025 00:14:44 +0000
Files and hashes:         1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: Dz4CWzokcU1RB8kTknRnQzE+PGz2zNuRRLVwBZx2e34=)
                          2: F9343F063B0911EC82AE0828C4F9AE02.roa (hash: pIsS/aAz3NlTfiRznLCHJWwJfZnRVJbtBleuPSnoEO4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113 (0x459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
        Validity
            Not Before: Jan 31 00:14:44 2025 GMT
            Not After : Feb  7 00:14:44 2025 GMT
        Subject: CN=679c15f4-20fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:84:bf:1f:0d:bd:61:73:c5:e3:f4:20:eb:
                    6b:89:e6:ab:37:a5:50:66:ce:8a:70:00:ca:01:bf:
                    49:67:e5:2b:55:77:d1:24:29:b1:5c:08:91:a1:2a:
                    92:0f:88:61:03:73:bf:41:a2:c5:35:67:c2:fe:f4:
                    f3:75:44:af:ca:49:9e:95:a9:fb:56:d1:68:83:e5:
                    77:b6:97:b7:c4:b5:6e:9d:f7:ab:53:e1:f6:0e:e0:
                    a1:db:bc:41:e4:53:50:17:1d:96:29:30:0c:fa:72:
                    10:b4:10:5b:c8:8e:0b:f6:75:5a:04:8b:59:5e:5e:
                    af:70:7a:f4:bd:2c:87:62:ea:82:0b:07:e1:9d:73:
                    30:b9:40:87:12:56:e8:ee:80:75:65:af:2d:2b:0a:
                    f4:71:17:53:d6:32:10:74:99:95:4b:28:ec:13:96:
                    0b:98:f3:3b:e7:4f:9f:a4:d8:f3:37:b4:60:a8:7c:
                    6c:d7:85:05:57:e8:bf:5c:1e:8a:87:e1:50:2b:1a:
                    c1:82:2a:bb:9d:af:5a:5d:8e:00:c5:cb:97:cc:1b:
                    39:8d:25:52:78:bc:3b:b4:9d:0d:88:c6:01:36:01:
                    76:4d:30:57:3a:e9:90:6f:15:13:3b:8b:96:5d:bc:
                    18:32:84:7c:c6:35:5d:3d:a2:b9:80:f8:4c:29:27:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7C:78:6C:F1:BE:C4:E2:48:E6:E4:4A:8D:76:6E:C8:D0:CB:D3:D2
            X509v3 Authority Key Identifier:
                keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d0:4c:89:f5:51:6a:91:32:3b:eb:21:fd:44:7d:48:1e:fd:
         f5:9f:47:99:20:e6:87:b1:76:15:0d:1a:45:a6:a7:72:a1:52:
         7d:8a:ce:74:e9:85:a4:15:23:cc:26:4e:1e:14:cf:88:c8:b9:
         f8:81:8c:2c:be:9e:f1:ca:1f:1b:80:e1:4e:dd:bf:91:93:4d:
         99:3c:34:f3:0d:24:54:1f:8b:84:e1:ee:97:13:66:29:c9:42:
         93:5e:f9:ce:0d:6a:f0:ba:e1:9d:99:11:55:80:d9:59:9b:dc:
         41:c8:e1:36:f8:9f:34:49:42:ba:34:b1:67:3a:3d:0a:d1:dc:
         50:d9:52:e3:09:4b:62:6f:4f:c2:f7:91:15:03:8d:03:14:cf:
         9a:87:58:ad:74:b3:e2:9c:b9:34:c6:da:78:2b:e8:d9:12:64:
         f7:2d:35:ea:72:4d:a0:a1:c4:76:04:5d:17:57:a6:f1:a3:54:
         96:d8:27:4e:da:74:16:d0:20:5a:a5:a4:6a:11:cc:9d:0a:95:
         7d:c3:e2:d9:22:a9:a0:2c:bb:ed:81:5d:74:a9:89:32:5f:cd:
         44:5d:f8:cb:99:03:7e:a2:42:e3:f6:3d:2a:a0:02:19:35:b4:
         8a:89:f7:20:a6:73:09:71:fd:cf:23:e9:09:8b:9f:a1:ec:71:
         01:1a:a9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:34 2025 by rpki-client