Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File:                     np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier:          Df76w3x32S68Ijq4f2a0+bOv/Y+Af96uLATEbCMfXbA=
Subject key identifier:   EB:D9:04:FA:B6:D3:4D:38:75:9B:C5:D2:EE:90:39:E1:18:59:AA:A6
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer:       /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial:       07E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number:          07DC
Signing time:             Thu 30 Jan 2025 20:57:52 +0000
Manifest this update:     Thu 30 Jan 2025 20:57:52 +0000
Manifest next update:     Thu 06 Feb 2025 20:57:52 +0000
Files and hashes:         1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: /7iKXM9nCTWc/20MU/UJXUVTRct835ILKK67TazUepw=)
                          2: 6169DD26D4D411EAA1C20545C4F9AE02.roa (hash: 6oTg1gO/3ny+QZa4fQ+WZlPAQH1Ja82kUyS9omWYpCo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
        Validity
            Not Before: Jan 30 20:57:52 2025 GMT
            Not After : Feb  6 20:57:52 2025 GMT
        Subject: CN=679be7d0-07f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:41:a8:9e:82:75:db:63:dc:af:8a:7b:ca:
                    9a:66:7e:d7:a9:b1:ad:f4:c8:99:71:b1:a2:6d:a0:
                    63:52:00:4e:6d:b0:03:32:9f:b8:f5:14:1f:f6:44:
                    52:cc:bf:90:3d:e7:28:cc:9d:b6:3e:5f:cf:7f:ee:
                    45:69:fa:f3:98:4d:88:43:43:8c:0a:49:ed:b1:1d:
                    31:27:93:d5:e4:96:51:4b:dd:df:e5:b3:bb:e6:bd:
                    57:9e:90:d9:61:64:0b:c8:a1:0f:3c:3b:e8:a3:72:
                    c9:aa:cc:12:2e:1d:ec:61:12:43:af:f5:a9:0c:d4:
                    37:06:16:6d:0d:c0:ef:4e:90:c6:a8:e2:6c:35:a4:
                    81:2f:e7:74:b1:4c:5c:12:83:93:5a:8c:41:16:61:
                    7f:4d:ee:16:09:25:29:ec:d5:29:94:8f:75:e3:ae:
                    aa:ba:1d:88:64:af:96:9c:15:c5:c6:7f:78:b7:ab:
                    90:13:20:88:95:3c:d7:67:60:0a:28:98:cf:5e:89:
                    4c:2e:ca:a4:46:76:dc:d1:f4:56:47:21:c9:50:16:
                    bf:61:ca:19:8f:fe:51:1e:94:a1:dc:a1:c0:fb:cc:
                    a7:a5:6a:44:92:2d:72:c1:39:25:af:e6:10:b1:33:
                    80:20:f3:5f:f1:ab:f2:a5:13:e9:79:6a:c9:e0:52:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D9:04:FA:B6:D3:4D:38:75:9B:C5:D2:EE:90:39:E1:18:59:AA:A6
            X509v3 Authority Key Identifier:
                keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:81:66:36:46:99:de:6d:64:3d:94:50:09:92:21:02:d0:
         c5:b5:11:14:e9:80:a3:7b:2f:ed:60:6e:b5:ef:8e:b4:5b:cc:
         21:85:d6:30:f9:dc:f7:7b:15:20:2c:5e:1d:1f:bc:4b:85:63:
         b2:f6:29:32:ac:37:85:13:fd:8a:77:96:df:4d:d6:c4:7e:96:
         54:5c:ec:fc:c9:3f:c7:2c:0b:e3:78:41:76:8a:78:76:dc:51:
         43:d2:f0:c1:d8:7c:89:de:20:f8:ac:de:ef:31:79:94:c0:fd:
         09:b9:b8:6d:8d:c0:fc:3e:66:6c:fa:a7:73:25:48:3d:73:7b:
         43:71:18:c7:72:29:0e:d1:8b:35:12:5b:80:f9:16:32:7b:89:
         56:70:e3:09:d4:95:ac:05:52:d7:dd:d3:57:ab:e2:8c:73:c4:
         ab:67:88:d4:12:f4:f3:a2:51:c6:ab:2e:b5:43:ee:54:73:37:
         74:25:c2:6b:3f:21:15:e2:0a:6c:a2:33:5f:39:b9:f5:28:9c:
         97:32:dd:d3:38:22:c6:1c:2b:7d:6f:bf:38:77:58:52:06:00:
         80:aa:28:4c:ff:67:45:7b:58:ea:15:42:12:1d:e4:be:8d:38:
         ac:2f:e9:b2:4c:af:51:00:dd:fb:70:8d:8b:1a:a7:87:e2:98:
         24:bc:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:54 2025 by rpki-client