Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
File:                     K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json)
Hash identifier:          TvS5wGaj/BkjQyCgtqLkEw7kUrRG+G5/xF2UKTYxORI=
Subject key identifier:   20:81:53:C4:4E:43:7D:59:BA:28:5F:DA:0B:DD:39:4C:BA:93:09:C1
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Certificate issuer:       /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial:       084A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
Manifest number:          082C
Signing time:             Thu 30 Jan 2025 20:51:18 +0000
Manifest this update:     Thu 30 Jan 2025 20:51:18 +0000
Manifest next update:     Thu 06 Feb 2025 20:51:18 +0000
Files and hashes:         1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: hC0TFKKltgKV+bo3gsxO2yEYKmaF+gJ1UuwHGn3J/Mo=)
                          2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: 1z83FO4GtKRx6NJ1zk8GB6hRpxtXT/R6CtAHYUkaqdA=)
                          3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: USCITVxdvr2vZIKZ9pZeTbR2vvO/c7r8PRbW/v091j8=)
                          4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: sjVV92TWr17Q5E7deLvp5LrkNkR25Y2nq+eGhf+3ca4=)
                          5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: 9Lu/m9ZIOQ62O9GVdOQbSiFzGg5F/YviY3o3WadSNV4=)
                          6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: MuEbqKnGdeTwOpzWtZfybGE0sUEXNrb1FXuWP6xXyqg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
        Validity
            Not Before: Jan 30 20:51:18 2025 GMT
            Not After : Feb  6 20:51:18 2025 GMT
        Subject: CN=679be646-fc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:97:e7:08:8e:57:26:3f:9b:cc:85:4d:6f:
                    2d:30:8e:88:b1:a3:d9:98:85:03:1b:a2:5f:88:a0:
                    6d:80:67:fe:e3:91:cd:11:52:aa:37:63:e6:f8:ca:
                    7d:aa:85:44:e5:30:6e:d0:f0:7a:36:43:d4:24:a5:
                    e1:47:2e:94:31:15:bb:b7:85:88:39:4b:f2:3f:a0:
                    01:25:fb:e3:83:73:d4:e1:fd:15:f2:59:f9:54:41:
                    cb:54:80:bd:4a:f0:52:bb:4d:ee:97:be:5e:6e:45:
                    75:b1:89:f6:7c:74:f9:0f:28:70:68:7c:ba:8e:30:
                    49:85:78:15:2b:ce:9a:b3:83:ca:78:64:78:02:33:
                    62:42:0e:ab:b7:d1:48:05:3f:c6:c6:55:e8:49:8b:
                    a4:b1:ce:47:69:fb:54:b0:cf:bf:31:b2:ce:61:ac:
                    69:51:1a:ff:e5:41:e8:63:d4:97:31:f7:4a:17:a5:
                    9a:ef:e4:44:be:7c:44:c1:95:f8:e5:66:4f:b1:43:
                    f1:87:ba:ca:4b:d8:15:09:f2:0b:4f:d7:55:a0:60:
                    e1:82:9a:d4:b2:a2:aa:ba:7d:9d:81:2d:98:e1:f5:
                    d3:2f:28:5d:59:6a:fa:6a:b7:82:6f:c7:d3:9a:2a:
                    89:92:39:57:7c:82:40:f1:c5:55:0f:9f:05:f7:83:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:81:53:C4:4E:43:7D:59:BA:28:5F:DA:0B:DD:39:4C:BA:93:09:C1
            X509v3 Authority Key Identifier:
                keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c8:58:4b:c7:43:25:26:df:1a:ca:c9:df:18:ab:e5:fc:94:
         dd:3f:23:c1:b5:9d:35:49:13:16:64:b8:68:1f:b3:52:35:99:
         de:9a:e2:63:ab:c3:54:71:00:90:fa:61:c4:b2:00:b5:34:27:
         e5:71:a9:b0:fc:c1:d8:95:68:03:e9:db:de:e4:dc:0c:64:fc:
         25:ca:de:b5:e5:8a:c2:6f:14:fb:1a:64:10:9a:55:08:3a:85:
         b8:28:d6:98:ae:e0:45:ff:08:50:a4:31:48:df:15:8d:e6:6e:
         d1:0f:44:97:ea:dd:f4:d3:59:33:4f:eb:89:c1:be:2d:ea:8a:
         54:a7:b5:88:9d:18:bb:4f:51:3c:17:14:0a:74:cd:30:fd:cb:
         f8:5a:2b:00:d8:9d:47:fc:05:fd:b3:bf:fe:d9:bb:21:7f:46:
         f6:a8:33:31:36:26:ff:1e:e6:5b:61:36:48:81:8b:2c:fc:c4:
         94:af:8d:c3:aa:92:0b:cb:b1:bb:cb:be:e0:62:ec:8f:9b:c9:
         c0:48:e2:dd:2c:d2:77:48:68:f5:fd:a7:17:e6:ba:4c:94:c2:
         df:73:45:1f:86:d5:ec:34:d6:64:5b:1e:ff:a0:fe:0d:be:a2:
         a6:12:ee:7d:76:93:bb:39:ed:0c:f8:9f:29:71:60:b9:94:27:
         fd:c7:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:34:52 2025 by rpki-client