Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File:                     yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier:          2sMaQuGfBSycFHGoGWbmMgdiVOJP3MI8N2Ffjk8AsR4=
Subject key identifier:   5A:80:E8:AB:4B:CF:51:DE:40:58:42:4F:9D:9F:C5:28:5B:1B:8B:9B
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       075F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number:          0758
Signing time:             Thu 30 Jan 2025 21:28:33 +0000
Manifest this update:     Thu 30 Jan 2025 21:28:33 +0000
Manifest next update:     Thu 06 Feb 2025 21:28:33 +0000
Files and hashes:         1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: wAbCSLabTHD1WJpBSAp8QfWuDiXeMg8mxzGPkhFEnik=)
                          2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: 1KOLf59ICzEoI7M2NmFAlaU/cZ0TLw7hfRN8QYgYxBQ=)
                          3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: d0Xj6/bStnSttx8OgCvX9d1wnUe1SmuLIlk6o50qzOY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: Jan 30 21:28:33 2025 GMT
            Not After : Feb  6 21:28:33 2025 GMT
        Subject: CN=679bef01-6c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:9c:37:c9:71:09:cb:d0:47:65:14:76:c7:
                    7a:62:5d:2d:3c:d2:00:9c:59:5b:fc:cb:0a:0e:c4:
                    21:0c:9f:98:e3:08:40:eb:2a:73:cf:65:7b:2f:00:
                    8d:da:73:a9:f3:fb:73:50:25:91:46:ce:64:d7:5b:
                    5a:9d:d3:1f:84:83:f2:9e:c7:40:a6:ea:c7:e6:cd:
                    a3:4a:78:c4:90:60:40:29:cb:33:bc:02:9f:b9:4c:
                    0f:17:05:c8:b1:d7:ef:00:cc:b6:43:b0:f3:8e:b2:
                    5d:31:fb:45:fb:68:f0:a1:d0:6e:e3:c8:76:86:bb:
                    79:c0:90:a8:5b:42:fa:38:1e:57:da:87:2e:ef:18:
                    8a:14:d5:6f:76:35:7f:63:41:c9:8f:bd:94:9e:4f:
                    e0:b6:ec:36:9a:41:98:1c:8b:cf:b2:4c:1a:c3:08:
                    fd:5c:84:ee:fa:fb:47:8e:e1:1c:ce:24:c7:fa:64:
                    15:a0:7e:a9:62:4a:da:41:c0:33:ac:32:08:17:e5:
                    e0:30:38:b0:4b:b0:52:b9:72:58:c6:3d:e6:11:a3:
                    9d:c8:c5:6d:b8:eb:36:84:1e:8f:8f:66:82:e2:6b:
                    4f:ff:74:75:10:0b:3b:04:2e:d2:41:30:f6:38:d2:
                    05:40:11:36:7e:cc:90:8c:56:7f:b6:09:cd:d5:fd:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:80:E8:AB:4B:CF:51:DE:40:58:42:4F:9D:9F:C5:28:5B:1B:8B:9B
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:56:3b:b6:85:28:a1:ee:cc:91:5d:f1:ec:01:46:6f:26:50:
         cc:07:38:2a:6c:0a:aa:3b:44:30:49:7d:47:3e:6c:13:15:14:
         bc:8f:9e:41:e1:23:f8:76:51:1c:84:95:58:e0:d3:cd:ca:15:
         75:54:85:7e:6b:0e:fe:5a:da:82:b1:bc:23:e1:cd:ae:47:14:
         09:da:33:f1:67:fb:9c:7d:49:d9:9a:67:ef:02:17:76:1c:0a:
         1c:18:4d:55:da:8f:30:40:33:82:82:48:fe:ab:8d:43:69:02:
         e2:c7:82:12:b2:33:84:89:ce:2e:b0:71:60:ed:cd:74:b5:07:
         80:49:08:2c:d2:75:46:ee:8e:9e:4f:bc:f5:5b:db:11:15:3a:
         26:91:e2:fc:75:36:5b:e1:e1:01:e1:ab:e6:b8:54:85:a9:5e:
         01:9d:5f:7f:ce:8e:7c:bb:a5:67:a8:05:9d:8d:4f:30:8c:01:
         12:0e:11:f8:13:1a:3c:ad:cb:46:d8:1c:5a:66:66:96:7f:9a:
         e0:c3:48:d4:2f:a5:0b:b9:37:5f:7e:f1:1e:6c:4a:28:53:6d:
         a2:c7:ed:98:7f:d0:db:f1:c6:23:24:73:d9:9c:aa:f2:4c:49:
         30:d7:a4:e1:36:99:7e:8d:a0:a9:14:07:2c:9e:ce:de:b2:bb:
         d0:c0:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:38:48 2025 by rpki-client