Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
File:                     mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json)
Hash identifier:          Pg0Acq8mougJ6nsiOItV+1VV+Im7pNE7oTSRROjTwY4=
Subject key identifier:   35:FD:96:4F:8C:0E:23:54:73:8E:DD:6E:C2:62:C3:53:FF:14:20:69
Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
Certificate issuer:       /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
Manifest number:          0170
Signing time:             Fri 31 Jan 2025 03:05:47 +0000
Manifest this update:     Fri 31 Jan 2025 03:05:47 +0000
Manifest next update:     Fri 07 Feb 2025 03:05:47 +0000
Files and hashes:         1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: fPBYXujI1FPnkpv87G4z8ogh0QKA3wekZUXDOPOMhjg=)
                          2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: Y7rwBbYTnchmBAucXdCEl+WBGxzWb608eKIUvJXWeXQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
        Validity
            Not Before: Jan 31 03:05:47 2025 GMT
            Not After : Feb  7 03:05:47 2025 GMT
        Subject: CN=679c3e0b-0df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:9c:48:06:ca:88:e1:2d:f3:24:73:78:d4:
                    85:04:87:7c:d1:6f:86:2e:8c:5d:56:df:c6:f6:c1:
                    04:67:6d:b8:73:5e:1e:3d:80:34:64:2d:3b:33:e0:
                    18:f1:f7:f0:04:0e:d9:f6:f2:41:f0:1c:22:fd:ab:
                    5d:3d:dc:d8:30:da:9d:8e:76:8c:e0:a1:14:33:77:
                    1d:f8:b7:71:06:d1:e4:3e:5c:54:5a:69:1f:79:03:
                    49:65:7d:b2:5f:f6:ac:79:37:69:85:fa:19:69:d8:
                    36:a3:14:95:aa:23:68:25:5f:a8:0f:7d:8a:af:c6:
                    c7:0a:24:9d:ea:17:92:57:94:12:e4:b2:2b:99:59:
                    0c:c2:8f:a1:2e:70:24:f0:bb:aa:5e:1b:d8:51:bf:
                    e5:50:e2:97:b3:ec:d1:db:02:21:15:07:a5:7d:28:
                    c8:85:32:0a:a0:b6:a5:a7:6f:64:e5:df:72:9e:43:
                    35:8c:f8:13:fe:49:46:2e:0b:e9:de:6f:e8:25:d3:
                    dd:ec:49:7f:76:65:6f:98:73:38:3f:a0:c6:53:02:
                    06:07:de:75:8f:f7:0f:86:6a:77:a1:f2:d4:8e:7f:
                    2d:9b:05:4b:d7:ae:02:4e:a6:e9:ec:fe:3c:4b:6c:
                    df:8a:26:51:65:1c:33:02:17:68:61:06:e4:2b:f9:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FD:96:4F:8C:0E:23:54:73:8E:DD:6E:C2:62:C3:53:FF:14:20:69
            X509v3 Authority Key Identifier:
                keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:22:7a:c9:fc:8c:19:ae:7f:64:65:6b:88:d8:4c:60:8f:
         0a:cd:16:53:05:73:bc:de:91:a2:3e:42:b1:bb:a3:a4:fc:f4:
         66:d4:e8:55:62:12:91:d8:8b:f5:87:54:97:f3:ac:15:46:fa:
         e6:8d:42:57:82:ea:96:1d:2a:ab:9c:84:84:68:1d:e7:10:79:
         be:96:e1:73:4c:37:aa:b3:75:c5:af:a5:4c:da:1e:0b:19:61:
         1e:38:e3:f4:23:69:24:2a:5e:4d:2b:0e:79:05:df:9c:62:84:
         0e:4f:be:10:7c:92:28:e4:2f:0b:58:0e:01:29:d6:48:b0:da:
         93:3a:0d:62:c1:a2:ef:9d:37:9b:a1:7c:43:f2:8c:d6:79:40:
         f2:2c:69:9a:d5:43:47:49:b7:a8:68:b3:8a:5e:2c:3f:7d:97:
         93:4e:f6:36:39:25:42:30:1f:9c:16:08:08:76:72:1a:db:ef:
         97:6a:a4:69:27:a2:d3:48:2f:d3:68:7c:96:49:bd:3c:47:61:
         d5:92:6e:f3:eb:d7:a9:fe:76:c4:3a:28:9b:ae:f2:44:cc:e6:
         82:46:7d:76:01:04:d3:83:48:5d:0a:0a:46:36:3c:45:b2:0b:
         aa:cd:32:5e:0e:1f:f2:10:ba:4e:61:31:ba:91:4b:3c:26:fa:
         b2:9e:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:05:48 2025 by rpki-client