Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
File:                     MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json)
Hash identifier:          +/qbw5sEZlGETofno/pgJSVw3oo0Rmp0gzsQEt7qtWo=
Subject key identifier:   F5:FD:5B:28:AC:AD:B1:84:71:D8:08:44:41:6A:83:56:23:FB:F2:1F
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Certificate issuer:       /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial:       0A8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
Manifest number:          0A6F
Signing time:             Thu 30 Jan 2025 19:48:13 +0000
Manifest this update:     Thu 30 Jan 2025 19:48:12 +0000
Manifest next update:     Thu 06 Feb 2025 19:48:12 +0000
Files and hashes:         1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: RoiViyrp3z3mYcvDixUU40zbvTTc1hZVXYsd9BjXHXQ=)
                          2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: 1xdS0of8jq6b+9XXSYhXqSMAsRL9VgQ5wBfYf2X41Dk=)
                          3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: hl/3X6BX11WafllMiNd1LQR2jHaTy4LdnM1ilVWB8H4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699 (0xa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
        Validity
            Not Before: Jan 30 19:48:12 2025 GMT
            Not After : Feb  6 19:48:12 2025 GMT
        Subject: CN=679bd77c-6ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:08:b3:01:ac:84:52:32:6d:95:0a:a6:10:
                    26:c8:34:8a:9d:af:50:a4:6c:d4:fb:d4:5a:a5:4a:
                    9c:cb:c5:28:f6:a6:f8:e9:c3:d4:3a:f1:f2:76:d1:
                    23:89:dc:43:9d:ae:ff:d4:c9:6d:d1:d3:ce:b9:ec:
                    ac:94:82:4c:cb:38:78:69:44:6f:bf:72:7a:01:2d:
                    99:c3:d5:06:2a:25:11:da:46:0a:c7:8e:82:52:2b:
                    74:fd:ab:68:bc:a7:4d:32:3e:85:30:bf:b6:30:6e:
                    24:9f:09:82:3d:04:18:9a:f4:25:16:e3:e7:ef:9b:
                    2f:93:57:4e:36:89:ac:b7:a6:eb:62:6b:4b:1d:02:
                    f4:78:ed:80:a6:3b:d0:99:84:6f:a3:c6:7f:bf:2c:
                    fc:85:a1:ad:9b:50:72:1f:c6:71:2e:03:7c:e4:43:
                    68:71:3a:ae:e0:74:b2:0f:31:1b:de:07:f2:52:03:
                    e8:95:6d:89:66:2c:85:05:a4:46:0a:39:03:37:50:
                    e5:76:c2:fb:6d:97:fb:0e:ac:4f:4f:87:82:11:13:
                    7b:a3:c7:88:c1:41:7d:16:81:ab:80:30:d7:3b:b4:
                    06:de:87:74:4f:27:b6:f1:5b:31:93:ac:2a:3d:f3:
                    c5:6f:4c:2a:6c:5d:30:dc:9d:ab:64:64:78:92:99:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FD:5B:28:AC:AD:B1:84:71:D8:08:44:41:6A:83:56:23:FB:F2:1F
            X509v3 Authority Key Identifier:
                keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:35:41:42:0f:7c:13:5b:f1:90:cf:0c:63:61:46:e1:3f:f1:
         d9:9e:ac:48:23:be:50:ed:4c:24:44:78:31:5e:15:8f:45:20:
         cb:5f:b9:b8:60:ff:8d:e9:c2:c0:ea:07:f7:7d:8b:ed:45:89:
         b6:2f:b9:7f:d9:7b:68:60:d8:78:c6:ac:fa:a0:34:46:bb:bf:
         5e:f0:50:6d:31:ee:02:82:48:31:25:d4:f6:b2:76:fc:42:5d:
         93:53:b8:2e:fd:05:b6:ac:24:37:1a:ab:9e:79:ba:ad:d5:65:
         f6:21:7d:3e:8f:6b:ba:c7:be:76:8c:d7:c6:6c:35:40:94:9d:
         6c:f2:c3:9e:83:7f:76:b2:80:78:53:a1:c1:d0:1e:eb:29:2d:
         24:23:df:9e:64:df:16:db:bf:dd:2e:c7:c0:01:4d:8a:f6:ab:
         1a:7d:f4:a2:24:ed:28:1b:52:b1:9a:80:5b:c2:b6:21:9f:5d:
         6f:52:5e:97:1f:5f:34:db:e6:25:38:27:d0:26:f9:e6:32:87:
         d0:f2:7d:ae:46:53:11:c2:8f:ae:9d:62:65:3a:80:00:a9:9f:
         af:25:e5:39:11:56:b3:ac:d4:78:78:6d:82:86:fd:81:3e:4f:
         1c:e8:dd:f7:0a:53:1a:ab:62:df:b1:3f:5a:45:1b:2c:f9:01:
         58:09:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:16 2025 by rpki-client