Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
File:                     5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json)
Hash identifier:          Ig5Qt53/H2AhexpiSMrnkbteZHT0k+RDIrx4q+N7JZE=
Subject key identifier:   70:35:69:B4:EF:C9:7B:E0:3C:AD:35:1E:B4:FA:7B:97:57:07:AE:55
Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
Certificate issuer:       /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Certificate serial:       0D97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
Manifest number:          0D8F
Signing time:             Fri 31 Jan 2025 17:55:27 +0000
Manifest this update:     Fri 31 Jan 2025 17:55:27 +0000
Manifest next update:     Fri 07 Feb 2025 17:55:27 +0000
Files and hashes:         1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: cZ8CVITCF9A6aHxZF7Rn9+mFPit466mFdOmGsz+9/j8=)
                          2: 1801797EB79211E986129837C4F9AE02.roa (hash: gxatBMJxzJVFhi2OhDZcobAamssK44JADN8sTBmFx6w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3479 (0xd97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
        Validity
            Not Before: Jan 31 17:55:27 2025 GMT
            Not After : Feb  7 17:55:27 2025 GMT
        Subject: CN=679d0e8f-860e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:a3:a8:5d:69:b3:82:ad:d4:68:47:4f:f1:
                    f1:58:2d:77:b9:66:fd:a4:63:98:6b:83:31:a4:ad:
                    20:f1:40:04:69:1a:fe:21:fd:28:fc:f7:6c:e5:1a:
                    a5:f5:34:49:72:9b:47:8f:e3:60:ac:99:58:74:5e:
                    99:fe:ae:40:ea:c8:fd:6f:6a:d7:d8:43:ea:72:2a:
                    73:19:b8:02:75:2c:cb:6f:6b:ff:3e:3e:19:01:ad:
                    49:ae:d9:7d:5c:e8:fc:d0:91:ac:0f:96:f4:3b:e6:
                    65:16:70:b5:64:fc:cc:fa:97:7d:c6:d9:33:9d:48:
                    b0:0a:22:7b:c2:b7:22:6f:b9:55:0a:85:c4:14:6e:
                    58:5c:46:af:45:d4:49:ec:1b:f6:b2:4c:bf:e1:dc:
                    96:07:dc:1c:72:bd:93:5f:c8:c1:89:05:5f:ae:5f:
                    5e:a2:a0:27:e6:c9:17:60:50:6d:16:66:8d:6c:40:
                    46:4b:7c:13:15:7e:7b:a7:ce:3b:34:65:91:67:5c:
                    de:61:2d:91:8d:e9:0a:fc:90:7b:47:2c:e3:1a:72:
                    ed:54:c0:f7:da:8d:92:c9:2d:a7:82:9b:92:73:47:
                    2c:1d:c1:a9:85:fd:56:3e:d3:12:34:4a:96:4f:2e:
                    5f:74:1d:7a:ce:b5:4e:d9:3b:6b:a1:b6:12:25:52:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:35:69:B4:EF:C9:7B:E0:3C:AD:35:1E:B4:FA:7B:97:57:07:AE:55
            X509v3 Authority Key Identifier:
                keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:84:50:39:07:99:08:3a:a5:84:06:a4:f5:91:69:56:91:97:
         ce:b3:58:8c:b7:2d:24:0b:da:a6:a1:2c:e4:1e:64:03:49:de:
         08:57:b3:4d:8c:9a:23:04:96:ff:54:e5:46:5d:f2:59:49:58:
         ac:65:59:34:99:c3:00:d9:20:26:db:49:9e:38:8e:ae:f6:90:
         b3:5b:3b:a1:7b:d6:d2:73:d3:a5:4d:c9:33:ed:9f:d2:11:ce:
         90:6e:80:f2:99:02:48:d9:a9:73:f7:73:79:15:ee:b4:f1:53:
         37:ee:12:ad:3a:89:52:95:e1:c6:f6:f7:0a:2f:e2:d0:71:ef:
         37:62:07:89:d2:fe:31:6c:b3:d3:8d:fb:01:36:fc:e8:ce:bd:
         d0:c6:68:8e:15:5e:f6:21:31:1a:0a:18:1e:87:2b:84:f9:38:
         25:83:03:f3:fe:dd:12:bc:ec:7d:a8:ea:c1:cc:23:a0:dd:7b:
         d0:d6:42:1f:07:d2:b8:46:b9:85:a8:b8:94:69:48:29:1f:c2:
         cd:1c:4a:09:52:35:67:95:e6:1e:ef:1f:f4:0b:f5:c2:3f:a7:
         48:d7:6b:a4:b2:82:09:56:0f:d9:fe:91:60:dc:e8:a4:51:14:
         15:ef:0f:6f:33:05:1a:af:19:4a:8e:72:d0:36:e4:5b:bc:33:
         5a:50:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:22 2025 by rpki-client