Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
File:                     788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json)
Hash identifier:          Xg2YmBATX6yZQqCUdntx1+OWkt89XRWh0stGFjj5BLU=
Subject key identifier:   8D:9A:86:48:88:87:D4:E9:05:75:69:C9:E4:B5:7F:A7:C2:D6:98:49
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Certificate issuer:       /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial:       07DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
Manifest number:          07D5
Signing time:             Thu 30 Jan 2025 21:02:02 +0000
Manifest this update:     Thu 30 Jan 2025 21:02:01 +0000
Manifest next update:     Thu 06 Feb 2025 21:02:01 +0000
Files and hashes:         1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: 5GhAW0m7GUQlJuSBJbjUhthQSAunizTIyeoTRuzYm1o=)
                          2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: pjchJ6cFRSOrYYA+BU/yT4PSr0ftFhi06QMViMdoOGo=)
                          3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: QHVhADIvelk+RcB2dDEApwkg1zDr9XWT50JUlNL3d6E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
        Validity
            Not Before: Jan 30 21:02:01 2025 GMT
            Not After : Feb  6 21:02:01 2025 GMT
        Subject: CN=679be8ca-66c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:82:f8:4c:11:76:67:ac:e6:fe:70:5f:34:
                    c4:2e:33:43:ca:a7:7d:85:2b:5c:0e:b3:51:50:03:
                    ad:32:4c:b1:5f:78:1a:60:8f:3b:c8:27:d4:b2:51:
                    fd:fb:43:33:c2:49:c3:1d:31:63:fb:76:d5:55:9a:
                    e9:74:c6:cc:71:97:15:63:65:8d:e8:2b:ce:12:d9:
                    e6:b1:03:d1:98:c8:52:3e:84:f5:60:0c:7b:ab:cb:
                    4e:b4:1a:26:cd:34:c7:05:02:ef:d4:91:13:9f:b2:
                    49:98:29:23:26:41:35:9b:7b:a4:26:47:c2:df:94:
                    35:01:a8:ea:13:b9:ee:bc:ed:0a:74:d6:d9:a8:ca:
                    e0:e5:c8:ae:09:ac:ee:92:1a:db:9c:62:7b:f2:a3:
                    50:be:38:bb:18:3e:c0:03:d5:07:16:dd:e3:8f:1f:
                    c7:24:e9:0e:26:a5:0e:92:3b:9b:b0:93:0e:2d:e7:
                    86:b1:18:c4:55:6e:7b:56:cf:be:2f:a8:34:5b:ec:
                    0b:7b:3d:89:ad:bd:8e:4c:74:ae:0e:c6:c3:51:3d:
                    e8:b3:8b:a8:7f:43:d0:9f:63:0c:1b:95:a1:7b:3c:
                    1e:23:f7:4a:62:b5:b2:35:03:8b:0e:55:13:24:e9:
                    2f:0d:8a:cb:0a:97:6a:a1:d2:8f:fa:dd:30:1a:f2:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9A:86:48:88:87:D4:E9:05:75:69:C9:E4:B5:7F:A7:C2:D6:98:49
            X509v3 Authority Key Identifier:
                keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1b:20:9a:c3:fa:61:2f:7d:06:c9:20:12:dd:f6:1d:b7:55:
         bf:eb:60:ec:35:c1:34:a6:89:d8:ca:d3:18:7a:7b:0d:4a:0d:
         39:a6:a7:33:9c:9a:85:b2:64:a6:81:77:9b:1a:ca:bd:1b:13:
         94:69:cb:84:7b:1d:21:0d:b1:c2:08:e5:c2:cb:27:c5:14:1d:
         a3:ef:11:0f:3d:8d:10:46:79:e2:54:06:a4:98:ae:fd:7d:9e:
         9c:c1:be:01:76:50:8a:3b:47:3e:e2:c9:78:78:42:4d:89:d8:
         1a:c2:25:73:65:ba:a6:d7:9e:f3:cd:77:66:ef:ba:54:31:e6:
         9b:b9:13:9a:0a:0f:16:c7:15:a6:df:3f:05:72:84:3d:c1:3e:
         97:44:73:ff:44:58:72:e3:d6:bf:02:c6:43:da:7e:c6:56:6f:
         1b:62:a5:9e:40:46:4b:de:51:40:4b:8f:cd:fd:93:54:f0:0d:
         1b:ab:8b:c0:e8:50:c6:eb:74:92:a7:8d:f6:16:69:9f:43:33:
         60:33:70:15:82:6a:60:aa:35:8f:0f:16:92:a4:81:7b:ef:9a:
         d4:13:c3:98:ee:24:92:59:68:3c:41:cd:e4:1a:f1:c8:e5:1c:
         d9:e6:58:e9:7f:2b:b5:41:de:c0:e3:8d:da:ca:00:db:c9:8e:
         10:28:74:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:55 2025 by rpki-client