Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
File:                     SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json)
Hash identifier:          /HnR00QcnLIVLkaWXWljLky5vuQJtKjvv0Dd6Num02E=
Subject key identifier:   15:46:9E:BF:77:0C:62:C5:93:B1:B1:F3:9E:37:9D:19:54:98:AF:7D
Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A
Certificate issuer:       /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
Manifest number:          011E
Signing time:             Fri 31 Jan 2025 03:51:19 +0000
Manifest this update:     Fri 31 Jan 2025 03:51:18 +0000
Manifest next update:     Fri 07 Feb 2025 03:51:18 +0000
Files and hashes:         1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: I17AuDH4EtLvV+yojA09lAD3mtW9Tml86CSOQ8WGDuM=)
                          2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: u5XCjKJ3dW4XeKjruW6bKKkvEYHMaTHcPhAzry86YE4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A
        Validity
            Not Before: Jan 31 03:51:18 2025 GMT
            Not After : Feb  7 03:51:18 2025 GMT
        Subject: CN=679c48b7-6f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:18:cb:aa:fb:c8:35:e1:49:0f:2a:c8:b0:
                    ae:d1:5f:9b:d1:6d:14:fb:56:91:b0:88:0f:27:54:
                    4c:43:69:44:8b:a4:07:9d:ee:93:e6:b2:58:18:6a:
                    43:c0:7a:f0:d1:2c:d0:88:0c:38:41:b8:37:ee:a6:
                    af:24:6b:48:ab:00:1f:6f:e0:c6:18:9b:a8:50:92:
                    c8:57:57:40:79:2c:8e:b0:56:db:c7:eb:b0:81:83:
                    a5:23:df:f5:7a:04:82:3e:16:2f:aa:e8:8d:e5:64:
                    d7:aa:87:17:eb:18:fd:be:6a:53:f4:23:96:b7:7e:
                    86:b2:e0:49:48:c8:0d:15:8d:0e:38:0d:cb:02:f6:
                    ae:50:8d:1b:d4:13:e0:3e:18:75:76:b8:ae:6e:d9:
                    bd:19:8d:05:e1:2f:c6:78:ea:f2:79:48:fa:0a:2f:
                    5a:95:91:68:c5:1a:df:fd:f4:95:fc:85:76:b7:e0:
                    91:65:60:5c:67:cc:c7:55:16:99:48:35:2a:4d:95:
                    e1:47:cb:92:52:54:09:81:ad:f8:9c:e3:62:40:89:
                    b4:91:73:5e:4d:f5:df:2f:07:fb:eb:32:4d:f3:bd:
                    6b:96:92:b4:06:f5:c4:9f:8f:85:3a:d9:c4:1d:78:
                    db:22:67:66:fd:91:2d:65:33:b1:1f:bb:52:c7:e7:
                    08:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:46:9E:BF:77:0C:62:C5:93:B1:B1:F3:9E:37:9D:19:54:98:AF:7D
            X509v3 Authority Key Identifier:
                keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:8b:b5:c2:8a:9c:f5:65:a6:50:58:1b:9c:06:b7:31:e9:
         4e:45:a1:1e:93:ec:3b:76:2a:89:4f:5a:54:a1:96:c0:be:2e:
         a0:80:1f:11:15:b4:88:47:46:72:fa:2c:28:b6:67:fe:03:36:
         51:44:4f:66:05:9c:2f:2d:89:69:5c:50:5a:6f:be:ad:66:2e:
         06:d9:2d:f6:60:19:48:ce:f4:6e:9e:57:5f:f6:c9:3d:c0:d9:
         98:b4:0c:f2:79:1e:d3:fc:f5:94:96:12:f3:a3:9b:56:3c:75:
         fa:dd:dc:06:9b:29:f6:c6:21:6d:0d:9d:cc:8b:98:e2:92:07:
         3b:5a:a2:31:fd:5d:f9:1d:63:62:28:9c:02:36:fe:c7:c0:52:
         61:26:66:b9:fc:e7:ca:78:81:82:7d:f8:74:dd:a6:a4:b6:1b:
         f9:5a:0d:82:39:5e:f9:69:d0:ae:fc:7f:9f:e8:b8:1a:75:91:
         fb:5e:fb:69:7f:44:93:75:e6:dc:f6:e8:dc:29:55:f7:e7:60:
         cf:d1:b8:83:a8:bb:21:af:1c:2e:58:41:80:17:28:e5:54:82:
         f8:22:fa:f8:d0:57:b4:60:f9:31:a0:99:ca:5f:1e:8c:b2:97:
         0f:04:3c:5b:55:84:de:12:8a:0b:4e:06:35:c0:7d:3e:2b:81:
         ff:81:5a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:40 2025 by rpki-client