Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
File:                     VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json)
Hash identifier:          tlPiWdN76R9dHSCsmNUNPqE0PgQkwd1vPSD4pnVwVv0=
Subject key identifier:   B4:29:94:D4:CD:27:76:A0:A6:25:A2:3C:2F:87:A1:B8:34:D2:F9:B3
Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
Certificate issuer:       /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
Certificate serial:       05BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
Manifest number:          05BA
Signing time:             Thu 30 Jan 2025 23:05:59 +0000
Manifest this update:     Thu 30 Jan 2025 23:05:58 +0000
Manifest next update:     Thu 06 Feb 2025 23:05:58 +0000
Files and hashes:         1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: 9kG/y44RRdP3RGeS8TbYZN/lFg4IUBlQOceMT3SZSEc=)
                          2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
        Validity
            Not Before: Jan 30 23:05:58 2025 GMT
            Not After : Feb  6 23:05:58 2025 GMT
        Subject: CN=679c05d6-d1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:8a:98:a6:32:f7:6b:86:d9:ce:d5:f1:c4:
                    0a:df:7a:b4:a0:71:ce:3c:27:9e:49:cb:9c:f3:f4:
                    ae:ce:2e:03:45:87:06:ce:da:85:3b:6e:23:fa:f5:
                    ec:41:cf:95:14:3b:bb:6a:3f:87:f5:e8:24:8e:1b:
                    47:19:5e:20:4e:3d:9e:a2:29:71:cb:80:82:28:01:
                    c4:9e:ae:c1:47:8a:0a:87:32:b6:49:b6:c6:dd:3b:
                    87:2d:01:b0:12:8a:c0:8f:09:e1:01:fa:a1:12:36:
                    90:f5:55:f3:a3:f5:70:6f:f0:2e:85:92:a7:68:05:
                    17:89:b2:ed:86:33:23:1a:7e:5f:96:74:1a:99:a5:
                    f4:bc:e6:40:81:6b:c3:46:39:77:08:8a:f4:85:2a:
                    c6:06:79:c1:0e:a6:f1:bb:ba:68:ea:f5:06:ac:e6:
                    e4:43:dc:ac:77:2b:ed:f8:4c:85:5f:d8:a4:48:0a:
                    e9:c1:64:cd:c0:57:0e:35:20:30:c4:47:89:af:e2:
                    6e:80:5a:78:ef:98:32:7b:48:e0:85:2b:1a:60:da:
                    7f:09:10:12:56:6e:ec:9e:a1:78:a8:e8:3e:95:36:
                    52:c6:4f:7d:a1:a5:b8:4e:c9:c1:96:9f:9a:05:03:
                    24:38:86:43:4e:1b:c5:80:cc:1d:f5:33:27:57:4d:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:29:94:D4:CD:27:76:A0:A6:25:A2:3C:2F:87:A1:B8:34:D2:F9:B3
            X509v3 Authority Key Identifier:
                keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:79:77:a6:0f:fd:d0:b2:1b:05:8d:fa:3b:46:c2:f9:1d:72:
         5f:62:97:d6:09:04:19:f4:c7:b8:4d:18:e5:a3:f4:c9:33:3f:
         96:bf:cf:6c:f1:73:be:cf:29:ce:23:9f:4d:b6:bc:52:aa:e1:
         d1:35:75:fd:a3:aa:fd:af:96:a5:c7:27:a0:3f:85:d9:f1:4e:
         77:33:82:53:07:35:86:45:4d:db:dd:bb:84:cf:96:72:de:b4:
         3e:9c:b5:2b:a5:b9:fb:75:fa:6a:ce:2f:0b:5f:36:42:3b:58:
         31:e1:3e:92:b0:ee:6e:c4:29:c4:73:f9:c1:fc:57:3f:39:5c:
         82:2e:70:6b:37:40:75:42:1b:ea:ed:82:b7:16:b0:48:f7:ec:
         65:1c:9a:af:8d:7e:a0:85:7a:6e:e3:74:ad:7c:57:b9:1d:45:
         93:e7:89:92:ee:33:ff:38:85:da:ef:7e:b4:5d:81:14:6f:5a:
         70:79:92:22:d9:a4:9e:33:0d:48:c1:7c:b2:79:a5:44:e9:13:
         e6:f7:7d:17:36:cf:c4:e7:05:31:c1:de:e4:fe:36:1d:57:43:
         f2:85:c1:e4:f1:bc:81:9b:73:c5:a2:ba:3d:8d:02:f8:b4:1b:
         b2:e6:5d:ee:c8:2f:2f:3d:63:1a:09:bc:3e:14:b0:92:d3:5b:
         a9:fa:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:39 2025 by rpki-client