Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
File:                     bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json)
Hash identifier:          JewAcaSPTPhtWVqszfaJUoaPKL47WIJ0RHEG+VE0dM8=
Subject key identifier:   F6:14:16:91:6C:74:90:89:F2:D4:57:D5:F9:43:7B:F8:27:70:E3:73
Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D
Certificate issuer:       /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
Certificate serial:       08BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
Manifest number:          08B1
Signing time:             Thu 30 Jan 2025 20:34:07 +0000
Manifest this update:     Thu 30 Jan 2025 20:34:06 +0000
Manifest next update:     Thu 06 Feb 2025 20:34:06 +0000
Files and hashes:         1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: 6eiKo4GPeeQITWRvkSLMSAbx0LUl8bOyZGvLGhbckBs=)
                          2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: BidxYSVmBabzb42KTEQRZnYy7Sbks/SN1w8y9yUGtJQ=)
                          3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: OlzMxXAfrSP6Nj86W0pq9Qh2aWjxJmFySgPE4i+83ow=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237 (0x8bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
        Validity
            Not Before: Jan 30 20:34:06 2025 GMT
            Not After : Feb  6 20:34:06 2025 GMT
        Subject: CN=679be23f-fe9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:8f:bf:69:bc:7b:e0:07:b1:65:6a:99:4a:
                    da:09:78:dc:48:a2:b7:8a:51:45:4c:6b:df:cb:b5:
                    58:b0:6b:bd:67:d8:8f:5c:27:bc:3c:90:d5:0b:f8:
                    5b:1f:99:a2:cc:e7:35:6a:e0:1d:89:6d:9f:9f:ad:
                    5f:3a:46:aa:0a:c2:28:de:12:bb:e4:b3:a7:d8:0d:
                    fe:78:60:a4:0e:f3:2d:7c:93:cd:04:dd:42:bf:1a:
                    e8:9f:84:75:0c:d8:da:19:0a:ab:46:1a:bd:d1:a4:
                    57:0f:eb:df:63:4b:aa:10:9b:5f:1b:08:3f:3f:02:
                    7a:2a:1d:81:f4:52:da:49:a2:f8:09:ff:9a:15:4b:
                    47:6c:48:d8:4c:fc:5b:c3:f1:3d:3b:a3:00:43:9f:
                    1f:6c:fa:f7:dd:fb:7d:50:f2:34:f6:69:d9:99:88:
                    10:ed:f4:ec:11:c4:f5:eb:e0:0c:a0:6d:c7:2a:c6:
                    16:b7:55:6e:b4:0f:e1:37:c7:37:72:c1:6f:da:07:
                    8b:e3:fc:94:73:fe:fd:3d:b8:63:bb:f0:f2:1f:f6:
                    fa:ef:13:bb:7a:9b:3b:66:af:60:00:dc:77:11:30:
                    07:cb:76:d0:f4:d0:2d:c4:e6:68:8f:b7:9b:88:b4:
                    c0:7d:f7:59:bc:c2:c9:78:f4:54:d0:1d:f4:2a:06:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:14:16:91:6C:74:90:89:F2:D4:57:D5:F9:43:7B:F8:27:70:E3:73
            X509v3 Authority Key Identifier:
                keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1a:1e:b8:50:bb:60:fa:b6:e9:b5:31:7e:05:36:67:d7:95:
         71:09:c9:d2:98:19:7a:04:da:7a:41:b5:6b:7c:19:c9:01:56:
         6d:68:74:3a:f2:7d:36:b9:b0:e7:35:22:23:02:d0:3a:81:af:
         ab:6c:3e:24:c2:66:42:04:23:84:fb:1d:8d:a3:09:b9:ef:03:
         02:e6:8b:f3:43:8e:e0:d5:2a:5a:07:51:f2:62:c3:ae:16:8d:
         53:b9:a0:0e:43:04:2d:75:fb:ab:f9:3d:8d:aa:29:96:5d:d9:
         9f:c6:6a:1b:60:b0:bb:36:99:03:bf:0e:86:a3:3f:f5:7f:d2:
         76:67:8a:0f:39:95:cc:c2:36:1a:d8:b3:80:03:a2:52:0b:c2:
         c7:15:61:5b:15:ee:94:cb:2d:a9:52:e6:3d:51:cc:0c:42:c1:
         c6:f8:d5:66:c6:4c:6a:43:5d:8a:ab:73:62:62:62:1a:61:03:
         cb:fd:ba:3e:3e:da:a3:3a:85:3b:a4:a0:2d:ff:a2:2a:e7:94:
         40:93:06:37:1f:53:3e:5a:d7:cf:65:85:1f:e2:f0:41:2a:0a:
         bd:1f:7a:22:2b:92:2a:88:26:30:47:e0:e7:4d:11:15:3f:26:
         ae:c2:e8:25:5a:b3:04:a9:6e:d1:72:21:28:5d:cf:8a:ea:53:
         de:f5:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:52 2025 by rpki-client