Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
File:                     4QZLtgGhMQh2G1RXofcVJMSky84.mft (raw, json)
Hash identifier:          uTaHsLnc+glPk/ifYB8sOW0rSuZtNPV6XRYvQxeq8to=
Subject key identifier:   CA:F7:DD:D8:4B:A6:D6:17:67:37:8B:65:C1:F8:40:DD:BD:D0:26:B8
Authority key identifier: E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE
Certificate issuer:       /CN=A914B57F/serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
Certificate serial:       0A92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
Manifest number:          0A8C
Signing time:             Thu 30 Jan 2025 19:40:01 +0000
Manifest this update:     Thu 30 Jan 2025 19:40:00 +0000
Manifest next update:     Thu 06 Feb 2025 19:40:00 +0000
Files and hashes:         1: 4QZLtgGhMQh2G1RXofcVJMSky84.crl (hash: 5sZ81aVVTvPLidU0r4dX6WL4Ma2nVTea5hiDIdYQxe8=)
                          2: 11685AAC4F0D11EAA161D143C4F9AE02.roa (hash: HpuZh21zVl0Ft40GZ9PsEwmlpNjswClEyYGJmu6x+ok=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2706 (0xa92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B57F/serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
        Validity
            Not Before: Jan 30 19:40:00 2025 GMT
            Not After : Feb  6 19:40:00 2025 GMT
        Subject: CN=679bd590-e42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d4:d8:5c:84:73:81:b2:66:d6:bb:85:c8:a1:
                    d3:b2:a6:3a:87:76:d8:5e:2f:c2:e1:30:b4:d6:39:
                    39:af:a1:fc:00:7e:00:eb:6f:18:0c:8f:f5:8f:20:
                    8f:08:12:36:c2:fd:e2:eb:6a:ba:b1:c0:3c:cf:85:
                    05:31:4f:a5:42:b6:cc:18:3c:6d:fd:f8:46:80:3c:
                    db:1f:6b:d5:08:8c:6c:99:1c:b7:f2:7f:fc:12:97:
                    60:c6:11:84:57:47:36:78:c8:b8:aa:2d:1f:9e:82:
                    c9:b5:8c:86:bd:fd:52:02:b6:74:b3:67:88:77:c9:
                    da:7f:ad:2a:b0:d1:c6:e0:17:db:09:e2:32:b5:79:
                    08:c8:e4:1f:fb:51:52:f6:2d:d3:c7:db:fc:d9:39:
                    49:0c:f9:36:f4:53:35:4a:de:a7:91:35:26:ca:a7:
                    97:c0:89:07:e2:4e:18:0e:95:cd:88:ca:c2:75:9a:
                    38:b6:9f:97:b9:ba:80:af:6e:3e:fd:64:1c:3b:69:
                    88:da:db:2a:56:04:ce:28:91:91:ab:bf:6e:b6:98:
                    3f:1a:51:66:f4:74:b0:b2:1e:29:00:d4:9e:bc:2d:
                    e7:1a:9a:15:2d:58:77:6d:5d:b7:d1:b0:e3:46:e2:
                    a3:f1:a4:f5:df:4f:2b:47:8b:98:5b:23:60:8c:e8:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F7:DD:D8:4B:A6:D6:17:67:37:8B:65:C1:F8:40:DD:BD:D0:26:B8
            X509v3 Authority Key Identifier:
                keyid:E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:6b:e7:7e:e6:70:79:05:a0:9e:65:54:2e:62:0e:40:62:
         8f:8b:c8:51:c8:c6:98:99:e4:8d:ee:c5:b8:c4:7a:a6:07:b7:
         07:6f:3e:7e:1a:5a:5c:b6:64:5d:6d:72:27:5b:80:88:36:c1:
         c7:aa:9f:fb:8e:c0:9e:dc:84:ff:bb:8b:08:be:f7:3e:73:be:
         80:eb:73:49:ef:e3:c6:25:d1:12:0f:5d:18:e1:73:d1:5c:84:
         4b:94:05:ac:78:92:d2:8e:71:c0:7f:c0:b7:7c:33:a3:b4:dc:
         8c:30:21:7c:65:be:99:93:b1:29:74:27:d1:12:63:f0:4a:c8:
         15:4b:31:ab:cc:e7:63:ed:8e:69:c7:24:3f:ae:45:81:ec:5f:
         95:ae:0d:b4:d7:90:52:35:ea:c4:25:83:0b:63:0f:be:c2:28:
         dd:ea:8c:84:b2:fe:b0:39:cb:7f:a4:eb:0a:1b:27:30:8a:3c:
         83:26:02:72:91:91:ae:5f:41:da:b0:db:6e:d0:62:8a:f8:91:
         30:9c:5e:61:0d:61:7b:0c:42:85:ca:0e:f5:cb:5b:f9:6b:a0:
         54:4e:59:e2:d8:38:74:55:86:b8:b7:f3:b6:b9:8b:9e:35:73:
         55:97:48:0f:e3:4d:ec:44:af:fa:91:2b:28:c1:9e:b1:81:e2:
         a8:b6:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:45 2025 by rpki-client