Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
File:                     Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json)
Hash identifier:          xj9kzhSPaHfzpEA69Z7jMMdoBnfhShQE7YbYVyS49Rw=
Subject key identifier:   38:E1:A3:6F:B4:1A:28:FF:37:44:50:07:8A:F1:7A:A1:4D:B1:78:63
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Certificate issuer:       /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
Manifest number:          63
Signing time:             Fri 31 Jan 2025 06:04:05 +0000
Manifest this update:     Fri 31 Jan 2025 06:04:04 +0000
Manifest next update:     Fri 07 Feb 2025 06:04:04 +0000
Files and hashes:         1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: TSGkHMKxwJsR//RffoLKXcf2iZyNmLzPLIyYpYKkmf0=)
                          2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: x7MCciPiMoC21iI94vanFTmv6Gh7il8p9AlIW1ZpCrc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
        Validity
            Not Before: Jan 31 06:04:04 2025 GMT
            Not After : Feb  7 06:04:04 2025 GMT
        Subject: CN=679c67d4-7017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:62:5e:2e:8c:17:2f:86:c7:c7:3e:e7:70:
                    ce:88:d8:69:62:4d:7d:3e:1d:be:66:f2:5f:b8:0e:
                    b7:19:18:85:a4:71:95:d7:33:a5:b3:b4:d4:17:9a:
                    c1:66:0d:2d:b5:71:05:42:bd:30:24:12:8c:cb:3f:
                    da:25:ce:d8:7b:ec:82:82:f0:b7:bf:ee:10:c6:f5:
                    99:aa:66:65:5e:d6:e9:c2:61:b8:fe:fb:cd:f5:6f:
                    7f:b3:9a:99:a9:5f:c7:a7:26:f7:b9:7a:7e:fc:7e:
                    8f:18:28:7c:8b:8d:a8:28:a9:81:6a:16:4b:23:36:
                    34:dd:ff:41:18:f7:66:e1:e9:26:28:1d:9e:4b:57:
                    c4:01:4d:25:3b:4e:99:ef:a8:4c:65:d5:96:75:94:
                    fb:a1:1e:96:de:9a:c6:2e:c1:ef:bc:08:47:44:c5:
                    84:7c:a9:8b:ad:7d:1a:ee:2d:1b:ff:12:9f:48:6a:
                    2c:8f:41:c1:fa:1d:88:fa:47:3c:b7:4f:71:9a:8e:
                    4b:aa:ea:64:9e:f0:be:d0:e6:89:0f:9b:1f:85:48:
                    6a:05:47:e3:6f:4d:0d:ea:d6:8a:fb:24:c4:65:00:
                    0b:54:f0:a0:fe:27:7b:86:61:c0:09:d7:34:f2:e6:
                    ab:95:07:32:2b:1f:a1:33:4e:89:1a:91:0f:cd:93:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E1:A3:6F:B4:1A:28:FF:37:44:50:07:8A:F1:7A:A1:4D:B1:78:63
            X509v3 Authority Key Identifier:
                keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f7:cb:cd:aa:eb:50:96:fd:dd:02:ef:a9:f0:f4:4d:84:16:
         2a:5c:89:c1:74:a6:7d:26:f9:c2:e1:4a:87:40:d3:72:8a:9e:
         c4:75:a5:8a:ba:94:63:48:d3:b7:2e:21:c1:37:66:0c:82:49:
         f6:20:29:13:63:8b:e5:2d:41:c6:2a:7d:bf:32:4b:b0:26:87:
         ae:9b:2b:75:4f:cc:b8:06:8d:09:57:b0:7e:50:41:6a:4a:8b:
         ac:23:fb:40:e9:fd:08:af:f6:f0:27:b6:54:54:83:2d:68:90:
         2c:c5:c3:d3:83:3d:43:32:df:9d:2f:30:6d:ca:12:77:1a:45:
         59:dc:56:dd:65:54:f8:0d:96:b4:49:50:96:21:bf:e2:2a:af:
         5f:59:6c:0b:2d:6a:40:80:87:ad:76:fb:cc:b7:51:80:41:3b:
         91:ce:1b:b8:63:9d:38:c8:49:78:09:b9:ea:36:ea:11:05:65:
         60:eb:82:a6:a9:67:11:36:c4:bc:f1:1d:62:08:50:8b:96:f2:
         1d:e2:15:25:70:38:50:cc:69:c9:c9:b1:ff:be:c0:6e:e5:2a:
         92:a9:bc:3b:31:fc:20:de:67:1f:63:8f:b6:07:49:f3:70:8b:
         04:5d:a8:22:dd:ab:37:3a:f8:6d:7b:6e:7e:01:15:13:b0:64:
         e1:82:eb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:39 2025 by rpki-client