Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
File:                     nte69j9VTx_qVw4Zuvae3tDZ5L4.mft (raw, json)
Hash identifier:          EGjDenj/KjqNe7bUbM/9G8RV7FNxtsjm6WPBrrUiHC4=
Subject key identifier:   58:17:76:0E:29:DA:AD:8D:B7:6B:B9:77:6F:9E:1B:56:84:92:22:70
Authority key identifier: 9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE
Certificate issuer:       /CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
Certificate serial:       0B32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
Manifest number:          0B2A
Signing time:             Thu 30 Jan 2025 19:15:10 +0000
Manifest this update:     Thu 30 Jan 2025 19:15:10 +0000
Manifest next update:     Thu 06 Feb 2025 19:15:10 +0000
Files and hashes:         1: nte69j9VTx_qVw4Zuvae3tDZ5L4.crl (hash: G5ss66CFkz8rAj7IyLpDL0lSe7nrdaeBYLLOQ4u+194=)
                          2: 97285ACA5BB111EEB6671243C4F9AE02.roa (hash: gE/MQo8ZrPv9XHP+3Vj9mSrbyCLukXMXn37+Yd+YKik=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2866 (0xb32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
        Validity
            Not Before: Jan 30 19:15:10 2025 GMT
            Not After : Feb  6 19:15:10 2025 GMT
        Subject: CN=679bcfbe-16d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:fa:2c:df:03:80:d3:fe:f5:18:80:29:a8:
                    6c:e3:f1:b8:3a:87:ca:4a:ac:59:c5:10:3f:c6:e2:
                    ac:42:6c:2d:45:57:4b:ea:60:91:01:13:13:cd:1e:
                    a2:31:6c:3d:54:f2:bb:49:83:13:14:ac:3f:14:9c:
                    ba:a9:2e:78:e0:ec:4c:3c:73:3b:cc:ee:c1:76:53:
                    a9:d8:8f:d2:0d:95:8b:45:9b:d0:d6:4a:f3:40:9d:
                    87:0c:e0:06:dc:fc:a3:0b:87:41:cd:14:92:ea:6b:
                    54:39:25:92:02:28:0e:c2:93:be:67:8d:c1:9b:47:
                    a0:5c:bd:98:a6:7d:80:5d:6e:8c:33:bf:f0:ad:c6:
                    89:82:bd:12:7f:c8:d1:7a:5d:0d:97:2b:d7:9e:96:
                    76:9f:7e:38:71:94:90:fa:4b:3e:34:17:3d:1a:72:
                    dc:57:3f:fa:21:96:9e:d0:e5:9e:d5:91:0c:90:bb:
                    ef:99:53:86:d1:fc:bd:10:2a:99:37:2a:87:9a:f0:
                    13:43:2c:c0:79:9d:07:9d:a9:43:4d:a8:e8:70:51:
                    7e:82:66:eb:72:c1:66:6d:b2:ea:18:63:b2:7d:46:
                    71:48:67:2c:cb:64:3a:de:28:cc:96:5e:72:e3:7b:
                    cd:5e:ca:88:b9:77:9a:55:e1:b6:5a:f8:47:4f:c9:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:17:76:0E:29:DA:AD:8D:B7:6B:B9:77:6F:9E:1B:56:84:92:22:70
            X509v3 Authority Key Identifier:
                keyid:9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:60:ae:bc:a9:d2:fb:7b:4b:9a:a4:71:99:e8:6c:d6:5b:62:
         da:0e:d1:09:a2:55:a4:4b:51:34:35:9e:f8:66:8f:3f:06:a1:
         1b:d4:88:a2:d9:c8:8d:55:4d:29:01:e0:a8:7d:8c:ea:dc:d1:
         89:03:14:26:c3:e1:c2:8e:c8:ba:d4:85:4d:db:d7:3a:30:c2:
         12:5c:92:75:7d:94:38:6d:a3:25:75:b4:c1:03:94:56:73:eb:
         84:30:3e:34:c7:75:11:4c:bc:12:d1:81:72:fe:46:9e:0d:a6:
         bc:8e:2a:28:55:92:8d:9a:8e:5d:02:60:78:36:65:a8:e5:df:
         ab:8f:ee:32:22:23:ee:9c:9c:0a:93:3d:55:a6:59:95:43:c3:
         b6:eb:37:09:40:59:72:ff:a8:0f:ff:74:4d:cf:b1:63:f8:bc:
         a8:b9:9e:af:99:79:d7:8a:a5:ba:db:b3:76:b0:8a:89:f7:d9:
         5d:49:1b:75:cf:40:4d:a4:c4:b9:9d:25:c0:d7:e1:55:92:f6:
         4c:9a:73:ee:12:4d:d7:52:e4:b0:c2:da:f9:0c:ac:80:cf:21:
         a5:dd:d1:d5:fd:be:0f:b6:0b:b8:cd:1f:16:8f:f0:6c:9b:4a:
         0c:16:b6:62:ae:b8:cc:cf:59:a6:c5:06:06:de:20:f9:66:da:
         05:c7:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:24 2025 by rpki-client