Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
File:                     sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json)
Hash identifier:          7MjqlZevxfyKd9EooBIYPFLui0VscKHmmrN2xBe0dsk=
Subject key identifier:   9B:45:B7:68:93:76:39:CC:FE:F0:79:51:A5:6A:3C:45:A5:39:2B:9D
Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
Certificate issuer:       /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
Manifest number:          0121
Signing time:             Fri 31 Jan 2025 03:51:54 +0000
Manifest this update:     Fri 31 Jan 2025 03:51:53 +0000
Manifest next update:     Fri 07 Feb 2025 03:51:53 +0000
Files and hashes:         1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: duY43ppzJKuYyAZjBxrZtG5ClyVFAKayy5DxZcFUikw=)
                          2: 26D3006C2BBF11EE929D0D30C4F9AE02.roa (hash: n5e8CDobVexI/8nfPrSZsfP9yc0mgwJtVCiNZA8JziA=)
                          3: DC5F1826D1BD11EF8CC80268C4F9AE02.roa (hash: nABejWMWIKR8qcS8KhtXdqBPw2NE9lHrgwgK6ncqFFA=)
                          4: 3CDE30F22BBF11EEBCFC8037C4F9AE02.roa (hash: cIG0w6MiaHVhtlfms6mq3GfZxReFURoHuFw/wrX7B2k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
        Validity
            Not Before: Jan 31 03:51:53 2025 GMT
            Not After : Feb  7 03:51:53 2025 GMT
        Subject: CN=679c48d9-ad5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:75:74:e6:07:25:d7:3d:0b:09:3e:33:44:
                    c4:32:78:ae:dc:43:c2:42:de:6a:8e:d5:e3:dd:3c:
                    0e:9a:ed:1f:fb:2c:4e:ed:a6:02:a3:5c:bd:6f:29:
                    85:fe:2e:56:8f:17:06:f6:6e:3c:20:34:02:df:6d:
                    db:12:6d:c2:61:82:a6:cc:56:3e:f0:10:94:39:ca:
                    86:84:c1:92:d8:40:35:cf:6b:e0:cf:cf:ec:13:00:
                    a6:e5:43:e7:e9:b8:9c:46:33:2a:37:c9:ee:b0:0e:
                    06:48:a7:4d:04:8d:97:53:f0:90:ac:65:57:c5:00:
                    46:6e:35:2f:05:5d:f8:c7:89:cc:e1:f4:2b:45:d1:
                    79:8d:18:27:18:28:2e:fc:6c:33:34:bb:41:14:98:
                    ca:b3:9a:22:60:3a:21:c2:96:5f:fd:3a:4c:92:45:
                    0b:65:f7:29:c6:02:72:bb:7f:e9:af:24:67:fe:a8:
                    23:3f:70:63:ee:31:9b:2f:1d:e7:23:7d:9f:4a:90:
                    34:6a:1c:a7:fd:7e:9d:44:9f:4f:93:f6:57:ce:6d:
                    c9:f7:34:69:e6:03:e5:31:79:2c:45:96:93:e9:de:
                    f9:ff:27:a3:85:b4:e7:e0:55:3f:41:4b:a4:dd:0f:
                    00:e6:f3:e0:cd:2b:27:78:2a:ba:b9:77:2c:9e:d9:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:45:B7:68:93:76:39:CC:FE:F0:79:51:A5:6A:3C:45:A5:39:2B:9D
            X509v3 Authority Key Identifier:
                keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:9c:86:5b:5a:c4:39:a2:af:99:a4:b7:75:26:2f:1b:09:
         e5:2b:91:94:fd:e0:f8:54:d5:06:d1:00:5c:09:c2:0a:8f:20:
         75:cf:05:42:7e:6a:7f:c9:65:0e:8d:ce:e8:a8:47:4a:e2:fe:
         d2:ce:ae:fa:7b:a0:c7:cb:a1:dc:b6:bb:19:70:34:8a:e9:79:
         08:12:17:1d:eb:f2:f5:50:59:43:bd:c2:2a:6f:73:7b:00:0a:
         1e:76:6c:b3:c2:ae:bc:6b:cb:bd:4c:6b:ba:24:0c:8d:c0:80:
         8a:72:44:b4:d6:63:aa:36:d1:01:11:b9:9c:8e:55:3b:a1:0f:
         9f:a1:56:60:39:19:b6:85:71:53:46:cd:a5:d9:55:ad:ef:23:
         d9:11:23:e2:65:0a:a1:09:6f:6f:d5:7d:93:5a:2a:ad:0c:b2:
         c1:eb:0d:83:fe:e3:f2:8e:a4:b8:38:27:be:d5:85:c3:01:68:
         f8:71:df:48:3e:6e:d3:23:e1:b6:2c:3f:22:5f:d1:c3:e6:74:
         20:d1:04:25:eb:4b:a8:c1:76:c2:cb:10:df:f4:8a:e8:8b:13:
         ea:c8:e2:df:dc:35:9d:73:78:27:e3:1e:25:42:b7:1c:5a:40:
         f6:16:4c:6d:e0:d8:58:c3:9c:a7:f1:61:a3:40:01:74:40:4a:
         92:4a:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:28 2025 by rpki-client