Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File:                     Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier:          nxY1HyXdxEeQfiwA5WYiZF74XWRUfowwkzBz7WHJIYU=
Subject key identifier:   25:6B:BB:78:AD:46:E1:58:0D:97:50:28:95:09:32:F9:29:61:2E:FC
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       0F9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number:          0F7C
Signing time:             Fri 31 Jan 2025 17:33:13 +0000
Manifest this update:     Fri 31 Jan 2025 17:33:13 +0000
Manifest next update:     Fri 07 Feb 2025 17:33:13 +0000
Files and hashes:         1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: Y1kTtvkSTn4hznBapsbNYMV683Dm7ZvXN5/2vMFqQoE=)
                          2: 3F711060480611EE85A1BA0AC4F9AE02.roa (hash: lYO2r5iWYbPTGOu5MIGcMgAx1AviAoJ2otKYHZWrBDo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3997 (0xf9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Jan 31 17:33:13 2025 GMT
            Not After : Feb  7 17:33:13 2025 GMT
        Subject: CN=679d0959-14a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:0d:7a:61:24:e7:b2:a3:2a:bd:4c:d6:19:
                    ac:91:cc:4e:ca:8a:ce:67:ef:5b:5e:12:f3:a3:3d:
                    6c:f3:d0:3b:bb:7f:e5:06:d3:a3:aa:74:b8:79:ca:
                    05:3b:e6:3c:16:17:d0:b0:a1:bc:dd:50:6a:bc:e9:
                    ef:cd:76:99:8d:0c:b0:42:a6:c5:b5:3c:d4:d8:c4:
                    3b:3f:d0:78:28:b0:da:cc:29:c6:97:ad:5e:c1:78:
                    ed:50:0c:8d:ab:70:f6:06:68:5a:4c:29:89:ae:7f:
                    4a:ff:a9:39:cb:4f:2c:81:fa:c7:f1:8c:5e:7b:c3:
                    93:60:50:cd:57:0e:06:80:6d:ea:b0:ce:fd:7f:e1:
                    b7:7e:6b:60:21:ef:5a:8e:5f:0a:34:cb:66:2c:8c:
                    9d:08:8b:6d:d2:2a:84:cb:dd:28:b3:9d:6b:7e:a2:
                    61:13:5f:b1:92:2a:e3:71:0f:33:89:16:b8:c2:55:
                    b8:ec:09:a2:9e:3c:8e:84:0b:24:fb:31:b3:94:d1:
                    b8:c6:9f:a7:86:4e:b3:b6:8f:58:24:26:e1:e4:d3:
                    a2:97:43:b5:b5:3f:8a:6f:88:50:a1:86:6e:76:db:
                    19:ab:00:98:b8:df:fd:06:4b:cb:61:04:e3:67:19:
                    20:b7:52:21:dc:17:a6:4a:7d:2f:4b:d6:99:c9:83:
                    c5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:BB:78:AD:46:E1:58:0D:97:50:28:95:09:32:F9:29:61:2E:FC
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:21:92:71:ca:7f:69:6d:ba:46:81:66:34:45:51:1e:66:99:
         0d:f8:e5:30:e1:57:ad:74:1a:d5:9f:a2:36:a9:e7:08:7c:7f:
         22:62:4e:02:34:35:06:53:3a:78:66:94:da:05:50:ef:0e:24:
         2e:c1:f3:cf:17:cd:5d:22:94:a7:87:15:46:32:e7:77:4d:ff:
         f8:6c:23:db:2d:d9:8a:ea:c8:13:12:18:82:af:be:4f:71:8e:
         46:cc:e1:c8:8c:ac:10:3c:4f:9e:5a:ee:e2:d0:9e:f6:fa:8b:
         0f:4a:2e:50:0d:83:c2:cb:34:65:8b:73:78:de:6d:6c:2a:77:
         c7:c8:fc:10:ab:15:42:cc:0e:9a:b9:b8:70:d6:1a:ca:75:6b:
         c2:c6:cc:46:eb:39:7e:40:7f:1a:67:fd:82:4e:10:69:fa:78:
         ed:b3:de:54:b2:9b:c2:3e:5d:11:9f:c2:f8:9a:92:1b:a1:78:
         af:b3:b5:10:b2:9b:79:84:39:a3:36:14:05:bd:84:f5:24:7e:
         b8:96:7a:70:ab:b0:1d:c4:1e:4f:81:26:52:84:0a:5c:e3:17:
         c1:c3:c3:0e:aa:6e:c7:b7:fd:23:a1:59:41:51:8f:34:4c:85:
         59:79:3b:ad:58:4d:6c:ed:79:34:7e:d1:e3:dc:35:ce:64:a7:
         fe:fb:a9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:40:43 2025 by rpki-client