Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File:                     mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier:          ogg5suI8m/9KL3bxga6OaApVE+ZYWJBgIxQBPFD3kgQ=
Subject key identifier:   FB:95:1B:DC:47:66:CC:86:85:BC:C9:A4:D0:8C:DF:00:77:F2:B3:C4
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer:       /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial:       038F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number:          0389
Signing time:             Fri 31 Jan 2025 00:53:24 +0000
Manifest this update:     Fri 31 Jan 2025 00:53:23 +0000
Manifest next update:     Fri 07 Feb 2025 00:53:23 +0000
Files and hashes:         1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: R7TXzB1bM6GINAxa2OJ9SquBh/+pm/lm0VLnZxjpFbY=)
                          2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: UrbJsMDvic5k1jmHHB0Ko/WCM+KH522o7MbYuPKrfeY=)
                          3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: wYKDxu1d4XWvT7wP1qJaDnfimZ4e4Sw8zO4waVce/8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
        Validity
            Not Before: Jan 31 00:53:23 2025 GMT
            Not After : Feb  7 00:53:23 2025 GMT
        Subject: CN=679c1f04-5c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:e2:78:6d:9d:69:03:1a:a7:ec:88:ca:83:
                    e1:28:bc:cc:c7:2f:be:ed:c8:fb:7c:7e:f8:00:66:
                    bc:b6:bd:b7:e9:2a:15:fa:79:60:63:9c:b8:5d:e3:
                    0f:ef:f8:61:dd:d9:b4:f6:75:bf:89:74:66:4b:e0:
                    ad:4f:62:88:d7:84:07:93:e0:0b:d0:c0:2c:3a:cf:
                    97:cd:e2:92:19:e9:03:8c:4c:7e:cc:cd:dd:c7:df:
                    4a:a4:13:27:23:0e:d4:07:46:9a:e4:18:4e:28:a0:
                    e2:6b:e5:09:e0:96:d8:2e:bb:64:d8:eb:33:c7:7c:
                    47:02:9b:96:45:9e:dd:34:36:75:13:7f:f3:be:8a:
                    de:4f:f3:a1:68:c8:dd:5f:4d:df:9b:9d:d0:8a:ca:
                    3a:50:be:dc:18:b8:b2:cf:3b:43:55:03:b3:97:75:
                    14:89:2b:5c:ba:68:f5:fe:e4:73:07:87:dc:a6:63:
                    3d:25:21:fc:bf:81:51:f6:11:99:32:76:9e:f0:74:
                    0e:80:f8:fa:cd:3e:42:48:00:fa:d4:82:97:94:8a:
                    f2:a4:11:e6:40:7a:de:f6:2a:3c:a7:4d:76:15:15:
                    86:6d:62:2e:5e:43:f1:fc:82:dd:69:a5:06:f6:fc:
                    99:80:7c:9f:a5:78:0d:88:b8:36:01:7a:4b:54:aa:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:95:1B:DC:47:66:CC:86:85:BC:C9:A4:D0:8C:DF:00:77:F2:B3:C4
            X509v3 Authority Key Identifier:
                keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:34:88:bb:ed:29:34:0a:19:29:f9:f7:40:36:89:24:97:77:
         b1:37:61:a3:ff:f0:df:ef:41:02:87:0b:d4:42:9c:93:7b:d6:
         c4:f6:08:5e:8d:54:bf:14:a8:e9:4c:fd:8f:9a:36:97:11:f7:
         f6:b2:d4:55:69:12:77:53:ea:a4:1b:72:a3:9e:1b:ec:d3:2d:
         6b:23:b3:29:c1:50:30:26:9e:d2:fd:39:47:94:92:be:2a:44:
         a7:5e:35:c8:95:43:44:4b:49:2a:13:be:5a:f1:62:f7:5c:43:
         8b:2c:91:b9:dc:98:36:97:72:d9:dc:73:77:71:88:cc:63:12:
         f5:f9:42:f3:fa:8b:51:19:1d:e3:88:45:3a:4b:82:16:2c:d9:
         e5:21:bb:8d:f2:55:e1:79:d2:16:ed:04:08:9e:10:75:fc:88:
         e0:a1:5a:81:5a:32:c8:d5:97:e2:2b:fe:d6:8c:f3:ea:97:2b:
         82:f7:e1:14:42:c4:c6:e6:73:7c:53:c1:ae:7a:91:e5:20:11:
         16:ba:ec:51:73:c8:04:47:aa:00:04:43:38:85:81:e0:c2:75:
         e9:ff:54:89:ec:1d:60:22:0a:f0:13:9e:03:a2:6a:25:47:5f:
         25:7a:2b:3e:06:40:cf:28:6e:41:de:c2:33:36:1c:19:ca:48:
         cf:ac:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:42 2025 by rpki-client