Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
File:                     kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json)
Hash identifier:          /jaMgbUEU+zWrGSuvWg+thDGLBRJVMs6bP9VKwM0oE0=
Subject key identifier:   2D:F1:29:32:F7:62:8E:E5:5E:9A:D8:C8:80:07:28:38:A9:B3:4C:49
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Certificate issuer:       /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
Manifest number:          0177
Signing time:             Fri 31 Jan 2025 03:04:27 +0000
Manifest this update:     Fri 31 Jan 2025 03:04:26 +0000
Manifest next update:     Fri 07 Feb 2025 03:04:26 +0000
Files and hashes:         1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: CqtgBjExrX/qzqqwRGZZEyRiEf81vpOxW3rVHeUF0tk=)
                          2: 028335CAC3BC11EEB6DE185EC4F9AE02.roa (hash: YYtXyk1EEHIZzzJgz3IlAy5yL7gltpGPXetLmQmw2Q8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
        Validity
            Not Before: Jan 31 03:04:26 2025 GMT
            Not After : Feb  7 03:04:26 2025 GMT
        Subject: CN=679c3dba-18ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:47:7a:3d:b9:ed:14:d2:6a:bd:78:a1:7f:
                    23:fa:f4:df:ee:3e:70:87:75:3f:0a:d4:21:bc:3b:
                    dd:cb:63:8f:56:07:62:8e:3a:f5:d3:15:b1:95:dd:
                    8c:55:00:97:82:9a:26:0f:05:89:02:e4:a4:17:2a:
                    74:e8:46:41:37:e0:49:f9:e6:bc:22:33:e5:d7:6a:
                    be:69:0d:dc:11:81:6d:d0:ff:5d:eb:1a:81:7d:95:
                    fb:88:34:7a:07:95:94:b8:d2:33:60:45:3a:bb:ec:
                    7b:30:bc:2d:7c:99:04:80:a6:ef:5f:78:6f:fc:f8:
                    07:5b:61:03:4c:5b:45:38:00:cb:e0:54:48:8c:60:
                    c0:1f:bc:d9:e9:18:1f:b6:b8:7e:f3:9f:0f:8a:cd:
                    ba:c7:e9:ce:ee:dc:4b:3d:91:85:4d:5f:00:48:74:
                    0d:9a:4a:da:ab:75:c0:c7:1a:e0:0c:ff:60:07:9c:
                    32:0a:1b:7e:11:8b:e2:84:9f:74:11:b1:ea:3c:cd:
                    a2:20:31:8b:0e:28:1d:4e:6c:bb:11:34:81:d1:ab:
                    1b:db:a2:12:fe:18:b3:1b:84:f2:97:c9:5f:7e:f9:
                    f0:bb:27:c1:ce:3e:d1:08:b6:2d:4a:b6:5f:d8:29:
                    a1:f8:92:cc:c3:42:f9:1d:6b:1d:52:e6:c6:7c:e5:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F1:29:32:F7:62:8E:E5:5E:9A:D8:C8:80:07:28:38:A9:B3:4C:49
            X509v3 Authority Key Identifier:
                keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b9:13:66:5f:15:3e:89:f1:f4:19:83:94:38:2d:96:23:30:
         ee:35:42:2d:7f:33:31:d8:a6:50:ac:ea:10:bd:05:23:48:2e:
         fb:13:89:8a:1e:96:d6:95:2a:b9:14:ba:10:77:94:b3:3f:b2:
         94:de:92:82:c0:37:d0:e8:41:c1:e7:e3:50:91:ec:e9:d3:8a:
         ff:17:94:c0:3d:7b:1d:d2:2d:28:56:07:61:e9:7e:b3:00:1d:
         95:8b:2d:c0:fb:03:fd:7c:bb:00:5d:71:b4:36:50:e3:e5:cf:
         1a:2d:05:d9:f3:12:d3:0e:d4:e6:9e:41:32:7f:8a:87:1d:46:
         39:1c:c1:38:86:7c:c6:8f:7f:df:3d:2b:95:a3:b3:a1:e7:39:
         89:d0:e9:20:0b:f6:77:13:37:7f:b6:a4:69:77:4c:01:44:86:
         7e:75:49:95:59:f7:1e:3e:9e:f6:5c:61:dc:f1:77:65:75:f5:
         e2:30:c0:f5:b9:5e:dd:dc:ad:6e:a6:64:d5:5c:bf:3d:bd:7b:
         46:3e:49:c8:41:2b:22:f9:c1:04:3b:84:ff:7d:80:3c:4f:8d:
         8c:9d:16:26:c0:a2:0c:23:e3:71:8c:8f:96:d8:ff:f4:a7:57:
         46:a3:09:d9:35:af:6a:e6:4e:fa:ad:60:00:df:82:03:3e:b7:
         9d:6c:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:02:55 2025 by rpki-client