Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
File:                     2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json)
Hash identifier:          udu9N8Uvh4KxxI0c/1K3smYWCs/mFSHXtdpMBDOjSk8=
Subject key identifier:   94:67:96:F8:04:61:5B:1C:0F:5C:76:83:3B:55:AC:F4:FC:C5:53:6B
Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA
Certificate issuer:       /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
Certificate serial:       05D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
Manifest number:          05CE
Signing time:             Thu 30 Jan 2025 23:03:38 +0000
Manifest this update:     Thu 30 Jan 2025 23:03:38 +0000
Manifest next update:     Thu 06 Feb 2025 23:03:38 +0000
Files and hashes:         1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: eNjsoGYrog52WJUVa2zlcTmKa89wbcXOGCDhCwNajJA=)
                          2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: MqGrC8fwQYux13oeFuDih9vENr78iZJwaYG2VwbNU/Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA
        Validity
            Not Before: Jan 30 23:03:38 2025 GMT
            Not After : Feb  6 23:03:38 2025 GMT
        Subject: CN=679c054a-da39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:bc:73:66:30:bd:b3:54:f2:f8:43:40:23:
                    8f:b0:95:52:1b:b8:a0:e5:5e:6d:9b:5a:35:aa:0c:
                    f8:77:cf:8c:05:58:94:02:61:9a:78:f0:a2:ef:24:
                    61:2a:cb:eb:dc:84:1b:5e:ee:d0:06:d9:d9:1a:db:
                    fe:a3:51:8c:e5:95:e4:86:7a:3b:d0:89:e2:29:a7:
                    90:ca:d5:b2:7e:54:89:b5:a1:87:08:da:c0:76:8a:
                    0f:b6:8d:41:67:2e:ad:a7:1c:22:95:65:b2:48:99:
                    e4:81:e3:40:88:90:0a:6e:f3:58:99:23:2b:5e:f6:
                    b4:58:c3:3a:9f:9d:10:63:4b:54:db:4f:85:5a:e2:
                    ac:79:32:af:c3:36:f2:2d:13:15:a9:5b:ab:86:89:
                    15:5d:e2:37:bc:ab:27:2e:7b:15:a3:a9:ac:9f:32:
                    6b:59:3c:2c:22:bf:77:23:3e:c5:c9:29:61:c2:7b:
                    a6:f0:35:29:73:f9:b8:83:42:03:c0:aa:4c:59:6d:
                    0d:21:6a:de:cd:16:95:21:f1:72:1a:da:85:48:98:
                    13:bc:cf:44:30:d8:a5:46:19:e2:c0:18:7c:12:b7:
                    b6:1f:bf:5c:2a:ed:51:42:89:a0:09:e7:65:7a:60:
                    4d:10:db:2e:a5:e7:90:0b:b0:47:c7:a0:73:6c:c5:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:67:96:F8:04:61:5B:1C:0F:5C:76:83:3B:55:AC:F4:FC:C5:53:6B
            X509v3 Authority Key Identifier:
                keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:61:8b:70:09:6d:cb:cd:d7:94:a4:ae:86:bb:fd:59:ae:
         23:60:44:a1:81:73:e2:02:af:c6:73:58:d7:c1:b3:3c:7a:a7:
         eb:1a:a3:df:58:20:00:d6:be:85:65:b2:2f:bc:c0:6b:c7:86:
         0c:b0:de:e5:e8:ea:11:53:50:84:22:c6:a9:a5:5b:22:6d:a0:
         4c:b1:7b:3d:02:b7:2b:b2:1d:1b:73:fa:1a:74:c6:35:ff:8f:
         3a:b3:41:53:20:c0:9c:9c:d7:2c:08:89:83:78:15:70:f9:ee:
         b3:c2:eb:6d:70:d2:e0:5a:0f:3c:d0:ab:35:dc:ce:36:be:a7:
         ab:0e:84:0a:ef:ef:5f:8b:fe:07:95:3a:de:b1:14:aa:11:b6:
         1a:ed:76:18:7d:2c:a5:98:1d:a5:7c:e4:38:4b:83:cc:d4:0b:
         b4:e0:bf:a4:4b:e4:de:b0:97:9d:43:50:5c:8e:3f:e8:72:b3:
         0f:74:df:65:c0:19:a7:e1:a9:12:21:74:3c:83:dc:9c:f6:a9:
         30:50:66:73:c3:91:50:8f:a1:63:ec:0a:7a:44:35:c9:24:3b:
         e9:c5:b2:5e:ef:20:a0:4a:55:d1:a8:34:cb:91:ab:36:7b:fb:
         bf:b5:e5:9f:e5:fb:e1:97:55:22:79:fe:c1:a6:85:51:31:76:
         fd:3d:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:46:02 2025 by rpki-client