Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
File:                     h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json)
Hash identifier:          QuG9a69L1l3wlOiLekdhWLgAaaL42RiNsmCs8im7BMc=
Subject key identifier:   39:A8:61:46:0B:A9:4B:4A:56:4A:68:81:5A:5D:39:E2:5A:64:A1:B4
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Certificate issuer:       /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial:       04C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
Manifest number:          04AA
Signing time:             Fri 31 Jan 2025 00:03:50 +0000
Manifest this update:     Fri 31 Jan 2025 00:03:50 +0000
Manifest next update:     Fri 07 Feb 2025 00:03:50 +0000
Files and hashes:         1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: ln8rz9A5rIZk8Z9s3ExuHAj0vdd8PPi7JRZk/Qgsu5c=)
                          2: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: ZQeH9s5GaYIk1ZxktX3ZDI1XyJXOlpVX7ljtVr42XF4=)
                          3: 9B528A5AB7D611EDACEDEC79C4F9AE02.roa (hash: o2ReRLcJlulFpKfpdWmE6u0f7G1G3KpQA2ac4wDJgWM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
        Validity
            Not Before: Jan 31 00:03:50 2025 GMT
            Not After : Feb  7 00:03:50 2025 GMT
        Subject: CN=679c1366-361b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:d6:53:d9:b4:38:9a:95:fd:1d:10:36:5e:
                    06:1e:c1:5f:79:3b:b2:22:46:42:b7:dd:41:6f:05:
                    ae:d9:c0:f0:ce:92:9f:8c:09:16:99:f5:c7:5c:4b:
                    86:a3:cf:0e:54:37:3a:4d:d6:af:ac:d3:79:e4:3e:
                    f4:5d:33:c4:04:b3:44:c8:14:49:41:e3:d5:2e:b8:
                    3b:7a:0a:e1:99:9a:6a:65:a2:65:c8:ba:d8:8d:de:
                    58:6a:1d:c6:eb:4c:ee:16:0e:40:f0:18:53:4b:6b:
                    13:38:ff:fc:4b:a2:ba:06:83:64:5d:27:85:62:df:
                    e3:2b:a2:91:7b:29:4d:54:07:de:ce:b1:c2:f3:61:
                    6e:a9:ef:2d:d7:f9:7b:dc:ef:bc:34:4e:59:62:fe:
                    b2:6c:3b:70:94:95:d3:a2:79:17:f9:81:69:96:07:
                    6c:90:f7:f8:41:19:6d:32:bd:74:ae:02:39:23:85:
                    bf:cf:99:27:05:a7:46:f3:c2:6b:07:a6:d6:4b:65:
                    6a:60:89:61:3d:77:ac:9a:02:b8:61:bd:87:e9:f2:
                    4e:19:bb:85:89:c3:7a:63:7b:43:35:ef:20:25:cf:
                    6c:c4:8b:a9:8f:0d:56:c1:64:40:b0:7a:fd:72:1a:
                    07:aa:2b:10:64:da:89:cd:b4:87:f9:f4:98:de:ea:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A8:61:46:0B:A9:4B:4A:56:4A:68:81:5A:5D:39:E2:5A:64:A1:B4
            X509v3 Authority Key Identifier:
                keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d5:ee:6d:0e:22:51:f3:82:21:19:0f:48:a2:35:3a:75:ae:
         c3:dd:90:af:7a:36:31:02:97:30:0e:81:82:28:b9:2c:b1:62:
         30:71:20:5f:18:bb:c2:4c:db:45:04:b9:6e:f3:f1:8f:bc:bf:
         c9:cc:f3:3b:45:e3:a2:6d:7e:fd:d9:41:9a:0e:fa:05:35:7a:
         d5:44:a3:5b:99:7c:54:21:63:95:e9:89:4b:ed:8d:07:f0:5c:
         19:d2:7b:53:76:5b:53:12:ae:bf:34:af:ac:1c:3a:72:0d:67:
         91:52:46:98:c4:c6:5a:70:cb:50:25:0e:b1:9c:6b:b1:c3:ef:
         f2:83:24:57:0c:6e:b6:f4:d2:90:9d:bb:09:d6:c0:28:fa:0f:
         ba:ab:73:36:4a:a3:61:fc:93:82:dd:1a:a0:7c:9e:37:82:0b:
         1a:87:05:94:d3:87:f5:ba:03:b8:ec:f0:b6:30:89:9a:57:c1:
         25:a1:30:b7:c0:73:7d:67:a8:c0:0d:96:f8:a1:6b:8b:fd:c0:
         c6:93:b6:be:7c:e6:64:7c:fe:66:29:d1:c1:26:0c:7f:33:16:
         06:04:aa:b7:be:1a:24:0c:dd:f9:93:26:d7:75:22:03:e3:03:
         13:03:69:ae:e9:98:a7:fd:fb:5b:29:bc:68:27:e8:31:19:46:
         39:4d:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:21:17 2025 by rpki-client