Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
File:                     e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json)
Hash identifier:          yKTandVDZEVZcXD0uEwGtVHOymWS/iHWhWi1+Jrbk64=
Subject key identifier:   14:96:8F:09:7B:3D:F8:FB:8B:FF:9F:9A:C8:0E:21:FA:FE:BD:FE:80
Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
Certificate issuer:       /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
Manifest number:          1F
Signing time:             Fri 31 Jan 2025 06:59:35 +0000
Manifest this update:     Fri 31 Jan 2025 06:59:35 +0000
Manifest next update:     Fri 07 Feb 2025 06:59:35 +0000
Files and hashes:         1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: r9oymjx4917XoKzpDjPApKdlJiJlCptX6QUNzdU1Ft8=)
                          2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: vLV5ILypZ5+6/MGlQ4HJDangMObqhJh2n/QaZfHAWOI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
        Validity
            Not Before: Jan 31 06:59:35 2025 GMT
            Not After : Feb  7 06:59:35 2025 GMT
        Subject: CN=679c74d7-5f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:64:9e:dc:18:e2:fa:cd:16:89:94:16:58:
                    53:0a:fa:e8:31:38:c4:b5:07:90:73:a1:a4:43:36:
                    7d:dc:87:1d:89:a0:69:1e:82:91:01:96:7f:7a:c9:
                    99:82:2f:36:31:cf:72:e5:15:17:13:f0:f0:1f:5d:
                    69:fc:4b:1e:51:9d:31:32:b0:f1:68:19:5a:6b:96:
                    b4:eb:22:51:4d:90:c3:ac:d7:d9:bc:06:83:02:bb:
                    c8:19:0a:2d:5a:d3:2d:4d:f4:f8:64:65:1f:9b:ac:
                    4a:cc:bc:39:70:64:12:37:57:87:34:dd:3f:91:ab:
                    7d:c5:59:05:1e:eb:c0:27:f7:21:69:da:45:e0:b7:
                    db:9e:fd:6c:30:fd:c8:41:08:65:2b:9e:e7:0b:9e:
                    12:d0:5d:22:68:ba:6a:9e:8b:7b:76:51:c8:4c:73:
                    bc:d1:e3:15:a1:b4:68:28:2a:24:41:9a:62:65:e6:
                    38:32:07:d3:bc:f9:20:9c:de:43:d0:d7:03:6d:9d:
                    2c:7f:e0:2c:89:20:0b:38:ec:5b:b6:57:0d:b9:ac:
                    60:b8:da:4c:11:a7:e9:02:c0:e5:1c:f7:55:e6:e4:
                    ff:76:bc:84:ad:f9:31:c4:82:19:df:0c:c0:e7:eb:
                    f8:a0:4c:c9:4d:2a:08:48:a4:19:b9:4e:01:b7:67:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:96:8F:09:7B:3D:F8:FB:8B:FF:9F:9A:C8:0E:21:FA:FE:BD:FE:80
            X509v3 Authority Key Identifier:
                keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d3:4c:ac:08:8c:3c:f9:7c:db:72:ee:05:33:f5:a5:a7:2f:
         f5:c4:6e:32:c4:71:97:37:e1:9c:fb:ea:00:27:67:fe:0e:2b:
         2a:67:26:b5:73:20:1b:35:b7:d2:3d:9f:3d:b6:5d:eb:31:49:
         1d:2b:ea:ae:58:19:ba:67:61:f0:c4:1e:31:5a:59:dd:e7:fb:
         41:8d:3b:2d:b7:4d:76:b2:85:67:09:fe:2e:7a:2a:09:5a:d6:
         55:67:fe:57:68:a3:7f:3f:68:b7:c3:d6:72:18:33:c4:66:69:
         73:15:37:a5:d7:18:ee:0a:9b:60:8e:48:21:ae:04:8a:4b:a6:
         ee:4d:6e:01:a6:4e:6c:bc:e4:10:98:cd:2f:2b:27:82:65:8a:
         cc:7c:c7:e7:da:b5:ec:8a:d2:2d:c7:07:73:d3:c7:04:a8:d3:
         ad:8a:86:ff:2d:cd:52:1d:20:13:01:9f:eb:97:17:7e:4a:6c:
         67:58:da:da:19:4b:e0:c7:17:9c:ad:65:53:a0:b5:33:42:a8:
         5b:4a:43:4d:c1:4c:a1:e7:61:bf:ed:d5:e8:75:e5:54:c0:8a:
         fe:3c:c1:38:02:af:44:f0:0e:85:86:75:63:ad:c2:6c:d7:65:
         4a:1a:a7:53:d6:01:9f:ac:09:63:8a:ca:6a:75:23:7a:f7:2b:
         91:dd:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:38 2025 by rpki-client