Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
File:                     6rJKkMbQRs2D-170o8WY5OqaFow.mft (raw, json)
Hash identifier:          NmZXDE8iJx1xnFpZtW7u9E0N4tlGuJ+HsvZNw3MYEiU=
Subject key identifier:   F7:26:0A:A4:F5:C2:FC:A1:34:23:4C:17:0F:FD:60:97:D9:14:BA:99
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       0762
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
Manifest number:          147B
Signing time:             Fri 31 Jan 2025 17:59:21 +0000
Manifest this update:     Fri 31 Jan 2025 17:59:21 +0000
Manifest next update:     Fri 07 Feb 2025 17:59:21 +0000
Files and hashes:         1: 6rJKkMbQRs2D-170o8WY5OqaFow.crl (hash: zFCPWkrul416FRKCa349VbmBsEWX63DY3v47pgH0RGc=)
                          2: 524CFDB27C1111EFBFC7363AC4F9AE02.roa (hash: 2FhmgFAVYlSkuLyufZImw2MixSRSmicNo3aUOr/h5T8=)
                          3: F6C5480A7C1011EF97676539C4F9AE02.roa (hash: G5E0ld16/NxVRFhbaeBuIdJHmsDoeWhuRW6eAAixqEc=)
                          4: 41372C94C1A311EC8986B978C4F9AE02.roa (hash: E+WqsKNK7OE9+7VQUlHwqUrZ9hFZUdjjeNvLJwk6a5c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Jan 31 17:59:21 2025 GMT
            Not After : Feb  7 17:59:21 2025 GMT
        Subject: CN=679d0f79-6262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:9a:b4:40:24:c4:c9:2b:1c:86:52:6f:47:
                    60:c4:dc:12:4e:61:6f:9f:c3:88:24:59:72:84:6a:
                    d7:b6:f7:38:16:fe:81:d7:da:8c:14:ac:a4:b6:5c:
                    aa:c3:48:21:71:c2:31:3e:f0:25:73:6d:29:27:60:
                    e2:4b:d9:e4:40:7f:90:8e:51:e8:93:13:c0:0c:e7:
                    81:f9:fd:d6:c3:3f:b3:ce:f6:74:b9:e9:91:14:92:
                    04:ed:ab:08:c9:3a:0d:e8:89:e1:08:77:5f:4d:19:
                    5d:14:aa:29:99:22:dd:17:1a:1f:26:45:a6:fc:89:
                    0d:d0:83:34:fc:eb:15:3f:e7:70:24:fc:75:7c:fb:
                    ba:39:ab:4c:e6:49:a4:05:4e:50:f0:e2:52:39:1a:
                    1d:bc:56:1b:d4:6b:02:c2:4b:92:29:0b:af:98:81:
                    8c:db:11:f2:be:c9:52:c8:c2:76:8d:cb:53:7e:af:
                    e5:9a:c6:18:3e:54:13:d2:d4:67:ea:e1:23:9d:52:
                    ca:e8:9f:90:ab:f4:07:04:14:54:bf:af:23:07:c9:
                    67:b6:ac:d1:73:05:b0:e5:b9:3a:32:d9:12:a2:6c:
                    51:f8:58:db:73:c6:67:34:16:03:25:9b:6b:ed:0c:
                    0d:51:92:a8:40:d9:37:69:b1:a3:d5:90:17:da:39:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:26:0A:A4:F5:C2:FC:A1:34:23:4C:17:0F:FD:60:97:D9:14:BA:99
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:44:61:f1:b4:6a:ee:27:3d:60:d8:09:59:7a:3e:bb:84:89:
         a2:c7:fc:67:d3:20:02:e8:b8:c2:40:3e:10:e3:98:5b:3b:7a:
         ce:3c:d1:fa:92:9f:8c:70:a7:f8:32:bb:7d:41:fa:d8:40:c7:
         bb:70:7c:d5:6f:44:1a:36:ac:2c:29:2a:18:ab:4c:b1:18:3b:
         61:79:b1:0c:79:6d:a8:ee:e5:61:8d:2e:84:5e:99:cd:d3:b7:
         ed:ed:37:d2:15:9e:2d:bf:99:85:52:40:2f:ad:de:a0:9e:29:
         6f:74:65:0e:2c:60:e7:e0:b2:1c:4c:f7:02:c2:4e:a4:d7:5f:
         49:23:e0:ef:6e:b4:b2:5c:20:22:ca:38:4d:33:97:f3:b3:31:
         47:39:35:97:7c:be:cf:e1:c1:7c:0d:1f:0a:23:b7:41:ca:d6:
         52:5a:df:7c:89:7c:f1:f5:5e:da:1d:d2:a0:57:bc:2c:96:c6:
         3e:64:45:f8:fe:3a:51:97:95:b7:ba:78:ab:8d:31:f9:43:45:
         3a:47:ea:e6:d9:7b:1a:00:7d:33:36:1e:15:a5:e3:a4:ec:b6:
         0f:e5:c3:7d:af:c6:71:45:56:16:e3:12:27:44:2c:5a:ba:00:
         5c:76:ac:a1:10:d4:a2:d6:f2:07:24:52:7e:51:85:88:18:02:
         1f:99:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:54:31 2025 by rpki-client