Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
File:                     lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json)
Hash identifier:          aZZ6TyGS2kH2UzXujsavrrPa3l+A0ptGwFT6rFv9iRQ=
Subject key identifier:   37:19:A9:B5:61:5B:07:8B:34:E5:03:0A:EB:89:9D:0C:24:6F:FC:08
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Certificate issuer:       /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
Manifest number:          4C
Signing time:             Fri 31 Jan 2025 06:23:25 +0000
Manifest this update:     Fri 31 Jan 2025 06:23:25 +0000
Manifest next update:     Fri 07 Feb 2025 06:23:25 +0000
Files and hashes:         1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: B6LRYf9ZG83oArMgcH/xKjfy5GIUn0kKvs9Of+bdkTA=)
                          2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: ASyOdjxX3bTv6LEG6rhAb+4hOVrCfvwO9cJPKa93j28=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
        Validity
            Not Before: Jan 31 06:23:25 2025 GMT
            Not After : Feb  7 06:23:25 2025 GMT
        Subject: CN=679c6c5d-d751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:cd:e7:a2:29:95:00:82:b6:60:95:14:b3:
                    67:3c:ff:e9:84:bb:7b:e1:75:93:b7:4e:a4:0d:b8:
                    86:0e:75:21:7b:01:2b:19:19:a3:be:38:2f:af:11:
                    e7:2f:f9:d8:a1:68:64:19:31:c9:dc:c9:c0:78:9e:
                    09:de:2c:cd:44:de:31:f4:d7:c7:88:c2:a9:0d:4b:
                    19:c1:0d:e3:9c:47:d1:cf:01:c9:33:6f:48:f2:23:
                    44:b3:4c:54:8c:fb:12:30:c2:6a:e7:cd:e5:62:58:
                    35:76:a3:2d:a7:56:a5:10:6d:ac:28:12:01:c0:09:
                    37:08:4d:90:20:c3:25:15:63:9a:59:1b:19:77:be:
                    dc:d3:5b:d7:04:12:87:3e:bd:72:62:5f:ea:09:8d:
                    5b:46:e0:7c:eb:ea:1c:e5:77:76:12:e2:c9:0d:16:
                    61:d6:44:91:59:1b:2e:82:73:c6:6f:eb:a0:f0:46:
                    ff:51:b6:47:a6:86:3c:b4:db:b9:47:d2:b0:c6:1c:
                    fb:6f:94:e2:34:08:3d:b1:b5:39:cc:2a:88:7d:5b:
                    51:b6:58:3c:c5:ed:9c:bd:47:51:49:01:30:bb:0b:
                    b9:f7:38:77:dd:c4:f3:1b:17:c7:59:c9:c9:bc:dd:
                    32:31:db:80:82:a0:41:f5:ed:c0:5c:c3:ce:02:9b:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:A9:B5:61:5B:07:8B:34:E5:03:0A:EB:89:9D:0C:24:6F:FC:08
            X509v3 Authority Key Identifier:
                keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:14:ee:28:f4:5d:a5:cd:60:07:6a:c0:b8:87:1c:e6:3e:
         43:32:cb:0b:e1:65:bf:ca:e0:1f:db:7e:e9:5b:eb:e5:c3:56:
         a0:3e:12:31:5d:d8:fc:c0:a4:a8:6d:40:6f:08:d5:f6:65:6d:
         b7:ab:0c:7c:d7:f5:b9:90:97:32:d7:69:6b:79:5c:82:27:e3:
         c3:af:3a:8b:05:8d:c1:66:9b:ce:74:18:08:d4:3e:72:3e:9c:
         3c:a4:b4:0a:e0:f2:01:e7:99:7a:f0:38:dc:32:18:96:83:c4:
         a8:63:f4:34:d0:64:9f:8a:ec:cf:e5:3c:52:be:b4:ea:d2:ca:
         bb:59:48:de:d3:74:6e:68:6a:05:b5:15:9b:de:e7:5d:36:d4:
         5d:1f:ee:64:c1:5f:a4:5c:4c:14:b9:04:dc:ae:ef:04:e6:07:
         a6:77:90:17:69:2c:af:95:bf:8e:bf:c8:ad:88:57:ab:de:88:
         3b:fc:96:b4:3b:07:a2:2b:bd:37:1d:a5:b3:e0:3d:9f:75:8b:
         39:c5:34:7b:fa:db:25:1c:52:28:a1:fe:f0:9a:1b:eb:60:d9:
         8c:8f:c8:69:63:e4:2a:06:f9:d3:f9:65:92:5e:98:69:f4:33:
         a5:9c:f3:6e:54:f1:27:bb:f3:6a:19:9c:5a:55:93:b7:79:a4:
         5f:62:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:20:53 2025 by rpki-client