Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
File:                     dS97SFPDqcnwf9naxduWq37y398.mft (raw, json)
Hash identifier:          B7xHIlCussFAQhJE3qaYvBKqGXWNK1o1DL9MkPIVQYs=
Subject key identifier:   3B:88:8E:BC:F8:29:58:35:6E:5C:EC:32:3F:33:39:32:93:19:F3:39
Authority key identifier: 75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF
Certificate issuer:       /CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
Certificate serial:       0357
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
Manifest number:          0353
Signing time:             Fri 31 Jan 2025 01:04:30 +0000
Manifest this update:     Fri 31 Jan 2025 01:04:30 +0000
Manifest next update:     Fri 07 Feb 2025 01:04:30 +0000
Files and hashes:         1: dS97SFPDqcnwf9naxduWq37y398.crl (hash: AKOiji+4GVomsUp4tQmsPmJ9WpHyS1Hgkad9N1PAYuw=)
                          2: 6A4842A69F8611ECBE806D30C4F9AE02.roa (hash: vZ6MvUd27mPzfp5A96TFmJZRSLkOxkRd29pgThht6lg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
        Validity
            Not Before: Jan 31 01:04:30 2025 GMT
            Not After : Feb  7 01:04:30 2025 GMT
        Subject: CN=679c219e-24f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:4d:47:d5:08:54:87:f6:bb:2a:b1:48:0a:
                    2f:af:7f:86:69:01:e5:6d:2b:35:ae:a6:91:71:5c:
                    90:1d:99:cd:f5:60:e9:b9:3e:a5:78:0d:ec:d1:07:
                    f7:f2:b6:5d:27:ee:6d:d8:a6:d7:e9:f6:e0:8c:4f:
                    9a:a5:82:46:96:4e:65:0b:94:a6:5d:e1:4b:2f:df:
                    e0:7d:cb:30:de:0d:fc:6b:06:9e:a7:55:5d:6a:67:
                    25:8c:8f:10:11:e2:35:21:48:86:a6:65:69:88:55:
                    97:e0:b6:53:55:11:0a:7d:fb:af:3e:8c:43:64:60:
                    b2:0b:ac:96:32:87:81:04:b7:c0:bf:2d:21:f9:e5:
                    f7:e1:ff:14:d2:9d:57:25:10:ce:42:bb:60:ce:08:
                    97:a9:df:03:88:22:76:67:6b:a9:dc:d5:d4:9e:13:
                    65:47:22:a8:ab:f9:3f:44:64:ce:f9:0e:a5:da:88:
                    96:f1:14:05:0a:c9:ca:8e:55:41:bc:e0:47:fa:d0:
                    9c:d3:65:05:8e:3c:36:cc:75:dd:e2:42:41:b2:b5:
                    1d:bb:8a:ae:67:cf:3c:52:ae:0a:a3:2c:5f:fa:db:
                    c2:e5:67:e2:59:ce:da:07:1e:ed:17:bf:e8:38:fd:
                    7b:62:f1:a4:03:9e:40:3a:15:c9:25:3e:e3:9e:d8:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:88:8E:BC:F8:29:58:35:6E:5C:EC:32:3F:33:39:32:93:19:F3:39
            X509v3 Authority Key Identifier:
                keyid:75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:24:f6:20:8b:e4:4f:90:ea:8d:96:28:86:3f:3e:18:90:
         bd:b8:e6:67:18:f3:5e:0d:91:37:f8:bb:31:4f:7b:b0:7c:10:
         c9:68:b8:10:ab:f4:e2:96:1f:69:7e:9f:9e:a7:8e:bd:9f:1d:
         48:29:73:ef:74:fb:cc:eb:03:b6:7e:55:1e:ad:bf:48:af:79:
         ad:69:6c:74:43:c4:a5:84:e3:68:95:5f:a8:ca:39:4d:3f:68:
         b3:00:e5:70:ce:be:f0:0f:00:32:2f:46:c9:8a:ba:bc:07:2e:
         55:23:45:a2:7e:ed:b1:38:3d:d6:75:3c:b7:20:51:45:78:4c:
         6b:33:23:b4:a6:6d:7f:ff:ac:3d:20:91:19:38:3a:c2:4e:46:
         fc:79:b2:3f:44:75:42:28:0a:60:02:93:3f:30:4f:8d:60:ca:
         36:7e:3c:83:e7:19:ce:7b:06:5e:e2:ef:a2:62:f6:9b:5d:f5:
         df:d4:1f:12:a8:b2:db:a2:34:b0:d1:51:66:df:3a:11:ea:65:
         d2:8f:43:b6:5a:72:52:f1:76:ee:2a:d7:b6:25:17:b4:95:21:
         f8:65:c0:73:0d:58:2a:95:6b:c8:d5:be:12:7a:aa:53:01:cb:
         df:ac:13:b7:25:4b:47:4c:eb:76:50:69:06:85:21:18:27:c9:
         49:5a:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:36 2025 by rpki-client