Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
File:                     fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json)
Hash identifier:          GaUldibhjpZM96tXiZm4/4O2OeJJ6AiHSISPD9T12+8=
Subject key identifier:   21:CD:BC:F9:EF:1D:29:10:C0:AE:01:F9:FC:60:D9:B5:8C:55:72:C6
Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
Certificate issuer:       /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Certificate serial:       1C10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
Manifest number:          1BFF
Signing time:             Fri 31 Jan 2025 16:14:11 +0000
Manifest this update:     Fri 31 Jan 2025 16:14:11 +0000
Manifest next update:     Fri 07 Feb 2025 16:14:11 +0000
Files and hashes:         1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: D0A9zteW1Quc4wyofi7T8rjOu1Uj2L+yih3g73twj9A=)
                          2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 3Dm5ElwPB3NMJf/bLLX77VdgpNnL/LPrpw6YAX3+x3w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7184 (0x1c10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
        Validity
            Not Before: Jan 31 16:14:11 2025 GMT
            Not After : Feb  7 16:14:11 2025 GMT
        Subject: CN=679cf6d3-7aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:74:d5:0d:81:a0:44:b8:9b:e1:f8:38:96:
                    21:73:ea:4b:9d:30:74:dd:31:80:d9:31:96:74:f8:
                    fb:76:25:46:fe:6a:51:64:13:39:41:e8:39:66:53:
                    94:f0:fd:d5:b8:9f:f6:20:4e:a7:7a:33:4b:43:57:
                    ca:20:59:68:2e:d9:23:ef:23:d1:cc:1d:91:55:f8:
                    bb:a7:6b:fb:49:f4:cb:ed:94:31:b5:c4:4f:5c:0b:
                    7e:48:c4:07:9c:5a:b3:33:a2:cf:66:b5:47:52:6d:
                    63:df:6e:b5:47:31:56:38:5a:ad:6e:24:51:80:8b:
                    15:57:ea:9c:0b:0e:75:0b:39:f7:a5:8a:be:9c:f9:
                    6c:fc:5a:a0:65:52:ab:aa:f5:3d:23:70:a7:03:e8:
                    5f:ca:8c:a8:90:3d:3b:a5:b5:60:f2:e8:fc:26:48:
                    9f:de:a6:c2:c6:d7:61:da:5f:eb:a8:07:65:2e:e7:
                    b7:69:83:dc:70:8c:73:b9:d7:de:2c:a8:8e:54:14:
                    30:85:81:5f:b3:39:95:d4:71:31:ac:98:82:da:83:
                    5f:b6:e8:e2:f7:85:d7:0f:98:17:3e:1a:bc:9f:c5:
                    77:45:df:d9:34:f1:dd:db:e6:08:cc:67:95:4e:c7:
                    00:cb:d3:be:87:4a:ef:ae:13:76:18:79:91:af:fc:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CD:BC:F9:EF:1D:29:10:C0:AE:01:F9:FC:60:D9:B5:8C:55:72:C6
            X509v3 Authority Key Identifier:
                keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a6:19:f6:8e:6a:f3:5a:43:ce:a6:b8:c0:b7:9b:db:7e:92:
         f1:b3:3d:b8:a3:44:a0:8b:c3:4e:4e:ac:f4:4e:98:1d:20:ad:
         d7:57:33:c1:aa:af:18:b6:f8:19:b8:16:00:59:1d:d3:2c:24:
         c0:74:d4:f6:24:19:f5:57:67:73:d0:a8:9d:cd:a3:14:97:87:
         e6:85:a9:b4:a1:17:27:c9:41:41:2b:6d:18:c1:57:6c:ad:b8:
         5c:a5:40:1e:48:ae:3f:ac:34:31:6c:42:65:6d:72:da:48:44:
         4a:70:bc:40:dc:fd:f7:55:c3:d5:4b:3c:6e:78:d4:63:ec:54:
         76:65:a4:00:c3:bc:45:aa:22:90:41:dc:08:5a:ce:f6:73:62:
         58:c7:93:a5:a4:ed:6f:75:eb:d4:77:33:eb:d4:72:dd:a1:89:
         ce:e5:e8:d7:43:8b:82:1f:a5:59:69:38:30:35:24:34:6b:2e:
         cf:50:94:34:32:9d:93:1a:20:4f:1f:c3:63:8d:3e:2f:fa:52:
         3c:f0:d8:23:e9:6b:a7:52:cd:19:9a:1e:b0:df:c6:55:45:95:
         be:a2:b1:02:a5:8e:b9:57:aa:f6:78:81:89:55:94:ca:c5:48:
         da:9a:3d:2f:4d:5c:a5:60:3d:e8:9d:ac:69:dd:bc:57:ce:68:
         8a:30:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:14 2025 by rpki-client