Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
File:                     C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json)
Hash identifier:          vCI76hb9m9bbpEheTL3Zb9aJoCLcqBYRhZ8o4kD4Eys=
Subject key identifier:   82:E8:D4:0B:CB:26:00:6D:DB:F0:1F:83:A4:88:5B:3D:0A:7F:FC:9B
Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A
Certificate issuer:       /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
Certificate serial:       04FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
Manifest number:          04F8
Signing time:             Thu 30 Jan 2025 23:43:15 +0000
Manifest this update:     Thu 30 Jan 2025 23:43:14 +0000
Manifest next update:     Thu 06 Feb 2025 23:43:14 +0000
Files and hashes:         1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: uMx6LahTpjaDkLv9enXAlUJXQHejW4qg2bAyf7MvYFQ=)
                          2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: +yQIyhf/TyYpDcf0R24C9WjNNq39cWlJNp6OClFEIoI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
        Validity
            Not Before: Jan 30 23:43:14 2025 GMT
            Not After : Feb  6 23:43:14 2025 GMT
        Subject: CN=679c0e92-2bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:aa:dc:56:7e:f7:8a:1c:a7:6f:06:d4:9b:
                    19:66:36:de:e2:17:87:39:83:00:49:08:c0:ab:b3:
                    a8:78:06:8b:29:e9:53:4b:e7:40:8b:c4:77:9c:6b:
                    4c:95:9a:f7:bf:9d:ef:0d:7d:58:6d:81:d4:09:48:
                    9e:1b:9a:3b:75:17:c5:56:29:6e:e2:28:17:a9:ba:
                    4f:cb:71:0d:58:3a:ba:10:cd:c8:69:60:ea:31:16:
                    44:f0:73:14:94:82:62:6b:ac:13:a3:8a:9f:fc:38:
                    6f:5e:12:6f:ee:07:30:2f:c3:e9:22:db:b5:63:8a:
                    14:00:7c:f4:9c:cd:d7:ce:f3:cc:ed:8a:03:21:19:
                    36:2f:1e:5c:73:85:46:a8:1d:a8:8a:ca:b5:be:80:
                    37:a4:d8:72:5e:09:e5:78:c5:62:aa:74:6a:d3:4d:
                    c1:ed:56:a8:e0:d3:8c:79:e5:19:3c:fc:12:2e:66:
                    51:e5:19:d2:03:bd:d7:04:e8:43:3c:08:bb:aa:51:
                    8e:d2:4a:6f:7a:e1:2d:42:2a:9a:38:aa:f2:11:76:
                    22:be:44:56:65:0b:82:a7:f9:8a:c3:96:e9:b1:46:
                    79:26:2b:24:f8:d0:e1:0a:ef:91:ef:b9:12:25:91:
                    29:04:ed:b5:60:ad:4c:1d:e2:c0:92:af:12:d3:31:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E8:D4:0B:CB:26:00:6D:DB:F0:1F:83:A4:88:5B:3D:0A:7F:FC:9B
            X509v3 Authority Key Identifier:
                keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:5a:7a:c7:9e:9b:94:6d:45:1c:aa:e5:f1:64:2e:ae:fe:
         5a:0d:29:28:cd:c3:40:a2:fc:55:3a:95:fc:59:34:67:d4:9a:
         6f:7b:58:00:af:18:3b:cb:d2:0f:13:66:76:36:4f:05:0f:b8:
         80:48:03:24:5f:e9:61:48:4e:97:34:2f:7c:f3:27:ac:6d:90:
         ba:7c:16:ef:84:66:59:d0:b9:d8:5a:4a:d4:c4:3b:10:d9:f4:
         d1:67:6f:e8:66:9c:8e:a6:a3:9d:65:38:f7:6f:5d:aa:d4:27:
         ec:1b:a6:a5:4e:e5:ee:2d:08:c7:1e:b4:46:c6:74:38:bb:89:
         b2:19:1d:49:bd:da:b7:2a:d9:90:62:f8:bd:c3:f0:0b:08:d9:
         e9:78:10:ed:9d:d3:aa:d5:17:1b:d5:94:ef:97:7e:61:61:a9:
         a1:96:e7:52:ce:2b:2a:92:10:cf:a2:af:5e:e1:55:ce:12:01:
         7d:37:cb:9c:c5:df:f7:4b:e2:a7:49:e8:c2:34:60:b1:46:12:
         2f:78:d7:7f:31:47:62:00:2d:e2:11:b2:4d:27:45:44:31:2e:
         d7:8d:55:05:7a:06:74:18:ed:01:7a:91:e3:36:c7:eb:9d:aa:
         6d:a6:44:19:e3:94:f7:83:0d:cf:0a:50:3d:20:8c:ac:85:f5:
         10:b3:31:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:07 2025 by rpki-client