Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft
File:                     wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft (raw, json)
Hash identifier:          Z8tTwKFDdHyrRGk8Ep0m8zc44JJxYuQA943D5YYlRdc=
Subject key identifier:   73:D2:6A:04:86:72:AE:F6:7C:9E:E2:33:79:6D:12:CA:B9:B1:13:53
Authority key identifier: C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D
Certificate issuer:       /CN=A913DA3E/serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D
Certificate serial:       064D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft
Manifest number:          0648
Signing time:             Thu 30 Jan 2025 22:28:11 +0000
Manifest this update:     Thu 30 Jan 2025 22:28:10 +0000
Manifest next update:     Thu 06 Feb 2025 22:28:10 +0000
Files and hashes:         1: wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl (hash: SIsfbpXE/oU9Rgl0dQjJFPIhSsAcra+SqRVA+vtXHig=)
                          2: 19AB8E92734611EB816DB064C4F9AE02.roa (hash: qtAk8oTZDrgTWNBm9Xz8I2B3TKuJD5JEiZtJXgjDA28=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DA3E/serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D
        Validity
            Not Before: Jan 30 22:28:10 2025 GMT
            Not After : Feb  6 22:28:10 2025 GMT
        Subject: CN=679bfcfb-a3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:d3:41:47:d4:d2:d8:45:d6:49:d9:f7:31:
                    07:0a:81:03:38:16:56:1d:cc:44:3f:56:71:a1:a4:
                    db:72:b3:b7:80:d6:e0:9d:1f:e7:c4:e2:84:aa:3b:
                    f8:b6:41:8b:46:6e:d0:a2:93:59:ed:d3:af:7a:b9:
                    d8:c2:27:53:0a:d8:5b:2a:fc:bd:0c:80:b2:02:3c:
                    60:0a:08:30:e2:4a:52:60:87:bd:f2:1d:15:95:85:
                    0e:e7:00:8b:0f:85:a7:9d:57:b3:e4:3d:80:47:ba:
                    f7:90:f3:cd:a4:dc:b2:a9:51:b9:8a:3d:e3:d8:72:
                    fb:b9:9c:71:aa:c1:cb:49:4a:11:62:c6:de:ea:1f:
                    71:fa:b3:ed:b6:fa:b1:69:27:29:a8:e0:9d:ae:0e:
                    6a:81:62:0f:00:92:41:6d:ea:74:d9:75:b7:2b:9b:
                    25:cf:a8:ba:ab:a3:0e:0e:7a:83:4d:10:2d:3c:a9:
                    75:ba:5e:68:98:41:72:3b:fb:a8:a0:de:a3:00:06:
                    36:fe:a6:37:c8:ec:47:9e:81:1d:d1:70:3b:2a:c8:
                    1c:2c:7d:86:82:3e:3c:5a:c9:24:56:f8:d4:09:f8:
                    d8:b0:7a:da:d1:d9:17:54:bc:06:a9:23:93:6d:0d:
                    e8:91:64:c7:4b:99:bd:d5:42:45:eb:e9:9e:b1:5d:
                    90:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D2:6A:04:86:72:AE:F6:7C:9E:E2:33:79:6D:12:CA:B9:B1:13:53
            X509v3 Authority Key Identifier:
                keyid:C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:90:65:b0:52:42:60:95:0c:21:66:6d:0b:13:f7:58:79:c3:
         fc:46:cf:ee:12:e8:75:ac:39:c0:fb:65:39:c5:51:81:58:66:
         61:91:de:7b:03:ac:92:ab:e7:6c:90:45:63:6e:03:0f:aa:7a:
         fb:80:2e:7b:50:eb:bf:0d:d4:a9:2d:20:8b:f9:96:88:9d:98:
         2b:cd:71:c4:b9:d2:0b:54:c3:f8:af:b6:41:d5:ec:f6:95:b2:
         a6:f7:88:7e:34:71:94:1c:46:26:e1:3a:b1:b6:73:91:d4:f8:
         2d:ea:3b:15:fe:4b:e7:db:56:b4:d2:fb:b6:15:b9:2a:fb:2a:
         97:b3:c7:eb:f6:4d:31:7a:ee:50:17:54:2c:c3:62:00:5f:f3:
         28:8d:9d:b5:b5:d7:a5:78:18:0c:b0:10:2e:cd:8b:c5:74:a8:
         2b:55:4c:bb:02:6e:93:ff:fa:6b:21:97:b7:79:4a:bf:c1:55:
         de:4d:fc:bc:d7:df:34:d8:69:14:4f:35:ee:e3:45:21:ff:40:
         45:bc:b1:e7:ba:62:63:11:4d:18:9d:37:e9:98:07:1a:1b:73:
         17:40:57:cc:38:d1:3c:71:52:15:20:21:33:2f:a8:b2:c6:f8:
         8b:3c:b9:6e:e9:7a:88:9c:20:28:6f:ca:53:c2:d0:82:4a:e3:
         5a:ec:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:50 2025 by rpki-client