Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File:                     CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier:          M5Q4rzebNBnuL9M+4cevUF3K2UXC0oXlB6um1iSJebg=
Subject key identifier:   10:53:00:3D:7F:BD:AA:4B:C4:13:1C:29:08:64:B7:79:A4:04:78:23
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer:       /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial:       0771
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number:          076B
Signing time:             Thu 30 Jan 2025 21:22:01 +0000
Manifest this update:     Thu 30 Jan 2025 21:22:00 +0000
Manifest next update:     Thu 06 Feb 2025 21:22:00 +0000
Files and hashes:         1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: E/QLxDE57ooE/XXIM2N7HMD/fIrympApK86wubviU7A=)
                          2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: l64K4tplog0G07T/3YojgoGRLHdEu1r1sBnnM1yfpLQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1905 (0x771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
        Validity
            Not Before: Jan 30 21:22:00 2025 GMT
            Not After : Feb  6 21:22:00 2025 GMT
        Subject: CN=679bed78-32b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ea:f8:5c:7d:5c:7f:9b:75:f8:82:d7:cf:aa:
                    94:02:55:31:1d:b0:c1:2f:ba:f6:e3:18:24:84:cf:
                    9b:4f:af:24:fb:64:ee:cc:9e:4b:d1:31:00:99:8e:
                    fd:ac:fb:6b:af:c3:4c:53:f6:87:f5:2f:3e:a9:73:
                    10:f1:16:77:03:f6:7f:bf:41:e2:41:bb:b6:78:39:
                    ef:d0:03:7a:7c:fd:af:d5:91:21:e7:e0:ff:e4:1a:
                    e9:88:bc:27:40:b8:b4:db:95:bf:95:6e:5d:fe:75:
                    3b:14:ef:c1:04:4f:03:a7:78:1b:ea:97:fd:15:0f:
                    e2:f4:f1:b4:03:8c:32:1e:79:a6:db:ad:0c:ce:c0:
                    a5:73:e7:05:f6:51:63:06:28:98:0f:e4:cf:dd:82:
                    88:96:80:d1:a7:d7:8b:00:a5:ff:92:62:5e:a6:cc:
                    7e:07:5d:78:38:8f:98:aa:d7:58:10:cc:61:06:70:
                    41:cd:5f:d9:0a:67:8d:c7:90:1a:6e:35:76:a1:7a:
                    3c:e9:fb:27:8f:c9:f2:47:e7:de:f6:3a:99:91:8d:
                    e8:cb:2a:19:60:93:9b:ab:90:75:7c:b5:c7:2f:49:
                    33:df:2b:59:67:d0:c7:d8:c9:f9:7f:a7:17:7d:79:
                    91:6b:7d:ac:89:65:c3:40:5f:fa:1c:c2:f8:b3:f8:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:53:00:3D:7F:BD:AA:4B:C4:13:1C:29:08:64:B7:79:A4:04:78:23
            X509v3 Authority Key Identifier:
                keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:96:11:64:8a:8e:d2:44:4f:a2:41:91:1c:3d:ab:9c:f0:
         27:58:39:bb:14:a9:bc:95:82:15:6c:e5:30:01:4a:6e:dd:81:
         f1:4b:67:42:67:78:31:a0:92:57:d6:6d:e7:04:12:86:6e:fb:
         c6:05:13:6b:3a:d6:87:ff:ed:a5:85:af:b7:12:c3:08:93:b8:
         93:7c:88:a0:a7:ed:6f:54:61:57:f7:aa:4e:50:00:8b:05:0e:
         f0:74:0b:04:94:96:5d:b7:0e:15:b1:7f:86:b7:e6:98:9d:6f:
         38:d1:16:8d:59:0e:22:f2:32:c0:df:8d:19:dc:88:68:65:4f:
         67:12:d0:5d:bb:08:3b:98:76:17:87:ba:8b:4f:77:db:45:6b:
         c5:45:c6:75:1a:fb:44:23:c1:6a:bf:c6:0e:6e:64:48:68:55:
         c2:c8:da:75:d1:93:53:7b:24:22:0e:e4:33:ec:23:7d:74:97:
         03:4e:11:72:0a:fa:30:c4:a4:0a:ea:f3:09:56:f0:83:c2:cb:
         f9:e7:45:f2:98:6b:93:85:2f:42:1d:39:cb:a7:ab:b1:4f:60:
         32:e2:7f:9f:a1:06:c3:ed:72:e6:30:8a:30:62:5a:a0:a4:48:
         fd:bd:e5:b8:76:31:2a:b1:14:de:e5:22:ce:32:48:2c:9a:72:
         f1:a1:df:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:06 2025 by rpki-client