Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
File:                     ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json)
Hash identifier:          GtHJ4cpbx3UD2qfiFD4IpDzA/JxVARe+1V0VoQExndk=
Subject key identifier:   21:33:7E:AC:62:D5:8E:B4:DE:50:90:AC:78:DD:A6:D3:14:B7:4E:B0
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       04C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
Manifest number:          04B2
Signing time:             Fri 31 Jan 2025 00:02:28 +0000
Manifest this update:     Fri 31 Jan 2025 00:02:27 +0000
Manifest next update:     Fri 07 Feb 2025 00:02:27 +0000
Files and hashes:         1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: aIK3ov8OGsERj+3LoUlmsi23lhkjKJxWO52zKZnUvdg=)
                          2: 47660D4A488F11EFB89B763FC4F9AE02.roa (hash: eI4UCoJeEzevXuPhkPqjuDi0BdhKf8YS6t00eoAv4wY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224 (0x4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Jan 31 00:02:27 2025 GMT
            Not After : Feb  7 00:02:27 2025 GMT
        Subject: CN=679c1313-cc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:3c:a3:7b:28:66:26:7e:05:51:c3:92:f8:
                    0b:c3:3d:d8:76:45:30:75:c2:45:29:79:f0:6f:0c:
                    08:38:6f:8c:7f:f3:f3:e5:13:a2:c7:1b:ef:48:8f:
                    02:ea:cb:56:26:b4:8b:67:df:5f:bf:f0:4a:e8:ed:
                    69:df:ff:bb:68:e6:bf:1a:95:b1:0f:e3:35:c4:70:
                    75:05:d8:a3:07:99:35:39:d8:ba:a4:32:7b:36:9f:
                    da:48:50:1d:05:16:fb:bb:57:33:1c:13:b8:53:3a:
                    a5:74:5a:df:aa:f1:75:dc:7d:71:a1:e8:40:9f:cb:
                    94:a3:6f:8b:74:89:7f:29:c0:68:16:27:01:70:47:
                    f6:26:c4:ef:0f:d5:c4:ec:ff:55:ae:21:46:f9:f1:
                    52:bc:77:83:6f:d2:e8:67:c4:27:a6:a9:95:7a:87:
                    4f:fc:20:cc:30:89:fd:12:54:85:06:0e:d7:8b:21:
                    f3:10:9e:50:24:e8:d8:f3:e7:90:0b:62:95:9f:29:
                    10:8d:9e:79:cc:d9:da:a8:17:c1:c3:54:ca:34:2e:
                    c3:4f:ac:9e:f1:4e:30:09:c9:02:ee:29:e4:fc:4c:
                    c0:3e:c8:8f:20:f2:c5:3a:a7:2b:ca:0b:bf:64:45:
                    de:6f:06:37:bb:af:75:d4:65:21:b8:23:82:0a:4c:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:33:7E:AC:62:D5:8E:B4:DE:50:90:AC:78:DD:A6:D3:14:B7:4E:B0
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:88:a1:c2:3a:e2:3c:8e:f6:fa:5d:28:1a:32:c4:b3:c2:67:
         0f:96:20:a6:fc:e2:70:78:43:e6:fa:3d:84:21:9c:9c:e3:19:
         c1:1d:d3:1e:e8:ab:ac:a2:13:73:a7:51:cc:86:cf:94:f2:1c:
         6c:ce:1e:02:42:fe:9f:7b:87:04:a4:f1:22:13:cd:64:d9:fa:
         8b:61:71:9a:09:ae:93:bf:5e:d0:d2:9c:8a:cb:29:1b:23:1c:
         da:03:1f:e4:b0:d2:b8:0e:ff:88:ef:33:6f:23:74:b1:ff:25:
         6e:35:03:7a:e7:64:f5:27:b3:e0:10:6d:6d:12:be:ee:38:8f:
         b3:85:d6:f4:c4:41:df:78:20:43:0e:b8:18:f5:db:60:1d:60:
         b4:15:de:76:59:00:05:e3:bf:0b:d4:52:10:57:7e:0a:7b:71:
         83:11:05:de:6f:1b:72:44:63:c0:10:68:51:f5:8b:00:4a:d2:
         b4:fd:4b:88:40:a9:71:ed:83:48:37:26:f0:63:d6:38:dc:7f:
         08:e2:c6:99:c9:ab:75:e9:3c:33:0c:2f:e9:d2:d4:99:28:10:
         32:ce:62:c7:ee:ab:db:9d:9d:a2:e3:17:01:1a:e1:ce:be:2a:
         3a:1e:81:0d:da:e7:8b:5d:ed:d9:29:7c:42:cd:6e:6c:c9:1c:
         83:a3:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:27 2025 by rpki-client