Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File:                     Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier:          UkS/0s6b8Og+G7Kea/XRXyXEqFrxa2Lg4CGLGASA/WA=
Subject key identifier:   2D:34:7D:F8:FF:9E:69:CD:50:1B:E0:EF:85:92:32:CE:37:31:D8:DC
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer:       /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number:          B9
Signing time:             Fri 31 Jan 2025 05:04:25 +0000
Manifest this update:     Fri 31 Jan 2025 05:04:25 +0000
Manifest next update:     Fri 07 Feb 2025 05:04:25 +0000
Files and hashes:         1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: /txmqmC4shkFGVEg9h5KmV3sT11hlJQRHUiWqATn21A=)
                          2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: YI2srcnz/6DwUPS7c8IQ+7Hr1uygrottBvqwJQtIlR0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
        Validity
            Not Before: Jan 31 05:04:25 2025 GMT
            Not After : Feb  7 05:04:25 2025 GMT
        Subject: CN=679c59d9-51f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:45:8b:cf:26:59:b0:50:68:da:b1:c9:e7:
                    c4:1f:96:16:5e:33:06:c8:41:16:02:c4:40:dd:70:
                    13:97:d3:10:bf:24:27:7f:c7:60:92:fb:e8:d9:f8:
                    3e:3a:25:34:dc:22:d2:67:3d:1a:62:b7:13:fe:5e:
                    48:f0:87:f0:70:6b:55:4b:c8:b6:38:e3:d9:19:33:
                    c6:76:05:9b:01:2d:4a:48:e7:26:45:38:c7:fb:0c:
                    7c:85:c1:25:7f:15:12:2c:b1:71:8c:7d:a6:20:bd:
                    97:1e:31:df:27:c7:28:23:11:3b:d1:1a:97:74:71:
                    9b:3c:d3:bf:98:3d:f8:f5:ca:1d:2e:ae:dd:f7:be:
                    e5:a9:f3:1f:23:84:1e:69:90:20:43:bd:d4:c6:53:
                    49:bb:5b:8c:01:e2:c6:05:ed:a4:83:aa:77:12:fe:
                    41:9e:69:e6:52:b3:04:5b:2d:f3:e6:cf:7f:8b:97:
                    db:57:ef:26:25:02:9f:92:11:02:79:77:8d:15:c1:
                    76:97:1a:82:4e:67:24:12:3e:01:e3:05:66:8f:98:
                    47:7e:ea:9e:28:b6:cc:44:d5:7f:72:38:f0:5c:e5:
                    f0:f3:32:88:36:82:d5:55:f1:82:76:27:14:79:97:
                    a4:fd:b1:f8:c1:9d:54:39:6c:ed:30:6a:8c:1e:c3:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:7D:F8:FF:9E:69:CD:50:1B:E0:EF:85:92:32:CE:37:31:D8:DC
            X509v3 Authority Key Identifier:
                keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:5d:05:53:db:2d:be:e9:63:df:4e:3e:c2:1f:ff:ca:89:
         e4:93:ec:61:91:2e:0f:65:44:31:6f:5d:81:05:54:18:23:8f:
         ec:f5:54:c5:dc:15:09:8d:c0:d6:20:75:08:a8:0a:40:8b:72:
         97:a6:25:f9:e7:62:48:ed:7b:8b:91:42:20:d2:5b:4c:dc:12:
         29:38:d2:fb:41:51:90:26:81:fc:0b:44:63:7e:5d:cd:e4:c8:
         8d:7a:45:ba:7b:be:24:b6:db:fa:f3:6d:2c:d2:4d:2f:51:46:
         31:f5:ea:16:25:b5:96:56:c2:ba:10:b8:78:99:b0:d6:6a:f1:
         de:e1:43:79:7d:66:36:87:f8:57:b6:dc:5e:52:2b:de:53:3e:
         b0:66:e0:a7:d3:41:d5:e3:9f:55:ed:9f:6a:d6:62:e2:9b:43:
         57:0c:98:02:ae:b1:8d:ec:46:6b:07:24:c8:66:eb:c8:05:1f:
         c3:ba:0d:46:f4:36:0c:dd:bf:80:5b:96:6a:cf:14:77:56:05:
         06:b1:ca:28:2c:3d:ab:f8:7d:0b:20:7e:09:25:29:4a:4d:e8:
         12:df:83:eb:c4:aa:90:a2:e3:45:c3:34:55:e6:ad:8d:a5:4f:
         44:8e:e8:31:f1:4a:e4:4d:04:9b:07:d4:81:f0:3e:1d:20:6b:
         68:dc:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:46 2025 by rpki-client