Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft
File:                     OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json)
Hash identifier:          UhgvExOYA1L2PIbr/bXmVLWszcXLkTrPfEvTe1dPn7A=
Subject key identifier:   96:78:54:60:05:1D:32:62:D8:84:B2:33:DE:E2:09:D5:7A:E2:33:88
Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65
Certificate issuer:       /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365
Certificate serial:       3454
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft
Manifest number:          3450
Signing time:             Fri 31 Jan 2025 14:33:21 +0000
Manifest this update:     Fri 31 Jan 2025 14:33:21 +0000
Manifest next update:     Fri 07 Feb 2025 14:33:21 +0000
Files and hashes:         1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: Wrl6Moah193MWujfm1pfJty2JkjdeD0U9zHHZMyi/w8=)
                          2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: 05APYQJe4DJPEEjidbXlOzb6+S6p4c1Z55iGoGM7Isg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13396 (0x3454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365
        Validity
            Not Before: Jan 31 14:33:21 2025 GMT
            Not After : Feb  7 14:33:21 2025 GMT
        Subject: CN=679cdf31-75da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d4:a1:57:05:33:b5:02:8b:c7:4c:17:d4:be:
                    6a:cd:2e:78:04:aa:08:f7:bf:4a:93:27:c1:0e:c2:
                    f5:52:e4:99:fb:7c:a3:09:d8:05:1a:a5:2d:be:88:
                    eb:bd:43:a6:db:4e:df:a8:9f:39:33:5e:bd:26:42:
                    07:ad:e4:a8:27:5e:d8:98:75:73:e5:76:7b:25:4c:
                    e8:ae:8f:ba:71:9e:89:4e:86:97:87:bf:97:ba:5e:
                    ce:0d:9b:a3:2e:76:1e:b7:e2:4e:13:f0:3c:86:b1:
                    41:7b:08:70:47:ac:4b:44:10:1e:64:f0:82:60:97:
                    ca:d4:3b:a3:bc:58:32:9b:84:a5:0e:06:dc:d9:4b:
                    05:ab:6e:60:64:01:4e:f4:cd:51:a4:e9:75:84:d3:
                    36:a0:03:89:4a:b6:3e:a6:61:5f:ae:54:1e:37:dd:
                    03:43:37:3b:fd:20:1b:f6:8c:ce:37:a0:f7:92:73:
                    99:e8:e9:94:93:1c:7c:3b:1b:c0:ca:f8:2f:5a:b3:
                    a0:ea:43:43:2c:d3:be:7f:bb:7d:fb:ac:f2:b9:62:
                    10:7f:b7:33:d8:2a:ed:6f:e9:18:43:fb:01:91:7c:
                    b6:63:bd:89:2d:8c:db:26:8c:ab:bb:9f:ea:53:7a:
                    a5:47:ff:22:6a:b0:50:67:a3:ae:de:b3:2d:2c:ec:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:78:54:60:05:1D:32:62:D8:84:B2:33:DE:E2:09:D5:7A:E2:33:88
            X509v3 Authority Key Identifier:
                keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5f:4e:bd:0c:b6:0c:f2:87:1d:72:1d:7d:39:3b:6f:28:68:
         5f:4c:70:d5:bb:d0:3e:4d:11:83:91:67:d5:97:74:1c:59:8e:
         84:c4:a6:11:bf:33:05:ec:ea:49:4f:4b:19:74:31:ff:55:e9:
         b3:73:42:aa:7b:af:ee:cd:bc:14:f1:01:78:ba:de:5e:34:39:
         59:0d:df:3d:d4:03:e0:67:db:da:ce:71:2f:01:2e:52:71:b1:
         fc:a0:ae:e8:ce:5d:68:f5:4f:60:b5:44:1e:b6:dd:c6:b2:46:
         9c:4b:5f:9e:87:ac:67:20:0c:70:1a:7a:12:1c:d0:e3:db:65:
         38:02:8a:bd:3e:e5:05:14:de:4c:0a:0f:94:4c:24:d5:a3:bd:
         09:91:57:af:33:0e:db:d8:de:09:8c:92:2b:cd:65:7a:ef:aa:
         2f:79:8d:6b:2d:cb:f4:5b:6b:20:eb:57:f5:bc:c9:35:83:4d:
         df:54:00:ea:51:95:f5:3c:7e:dc:d1:ab:9a:e5:3c:50:f8:64:
         a1:18:95:22:2e:95:95:26:8a:d8:46:73:e7:09:4a:08:67:cb:
         42:90:ce:36:bd:53:ec:00:d5:c3:64:53:71:ac:71:cf:7d:4e:
         08:30:d2:16:7a:9c:7e:61:b3:65:26:f9:8c:84:b1:fc:e1:f6:
         1c:31:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:08 2025 by rpki-client