Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
File:                     EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json)
Hash identifier:          wykDM1heCPAOGRel1pMYNx+6BaNKSJ3v02uJWPfm5ns=
Subject key identifier:   1D:75:64:F2:56:B0:08:0A:84:76:40:BF:8A:F1:93:8A:EB:4E:1C:F7
Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
Certificate issuer:       /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
Manifest number:          0177
Signing time:             Fri 31 Jan 2025 03:03:00 +0000
Manifest this update:     Fri 31 Jan 2025 03:03:00 +0000
Manifest next update:     Fri 07 Feb 2025 03:02:59 +0000
Files and hashes:         1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: 0LSmdA60BnlvBrkt3zKWR5PLJCUdItMWkQ0XfceZr5g=)
                          2: 612568D2A6D011ED8FBD0A82C4F9AE02.roa (hash: Qn5aZoHRX78Q3SaINosBHpOM0a/I6obXqYvr/zN8DuQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
        Validity
            Not Before: Jan 31 03:03:00 2025 GMT
            Not After : Feb  7 03:02:59 2025 GMT
        Subject: CN=679c3d64-7e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cc:e1:0c:8d:f5:36:b5:1e:a2:0f:c5:72:8c:
                    0b:4e:c5:36:f6:43:98:12:30:83:d0:62:03:4f:4b:
                    c8:27:31:d4:c5:eb:6c:f6:03:0d:67:3f:58:b4:f1:
                    e1:1d:14:41:b0:a8:51:c7:92:4b:32:61:2d:35:d2:
                    82:96:1f:ab:c6:6c:8c:ca:c2:38:7d:ac:49:4b:70:
                    5a:36:8b:57:97:29:e3:87:cf:b3:4b:99:7a:0a:14:
                    c7:7f:6a:7e:60:a2:6c:27:07:36:d4:72:3e:43:28:
                    82:4a:b4:12:c8:60:b7:3e:ba:e0:c2:39:52:df:c3:
                    f5:29:59:b9:d3:1d:31:cf:7a:81:19:40:b7:1c:22:
                    53:d2:ba:99:c3:75:a0:15:44:df:b2:2e:c9:9b:9e:
                    f0:1c:75:69:a6:30:b2:0e:29:bb:2d:14:73:b4:8b:
                    13:1c:4c:c6:9d:b2:9c:3d:98:6d:fc:3e:f9:c6:74:
                    0a:37:13:58:91:09:04:2b:64:6f:3f:14:9f:b1:b3:
                    58:8a:81:ac:be:d1:ab:f2:6e:8d:cc:77:cf:8b:54:
                    c8:d2:1f:22:2c:fc:16:04:a3:87:8e:35:3a:50:f4:
                    37:76:40:9c:8c:25:77:f9:c8:af:65:b1:b6:b7:99:
                    b9:45:57:0b:e5:db:8e:7e:3a:6a:d8:af:8d:b3:0b:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:75:64:F2:56:B0:08:0A:84:76:40:BF:8A:F1:93:8A:EB:4E:1C:F7
            X509v3 Authority Key Identifier:
                keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:19:b9:92:af:12:20:70:fb:be:85:2f:0a:ad:5d:d4:a4:c4:
         92:8b:14:51:0a:20:72:9c:5a:4f:a8:2b:38:64:12:7f:dd:56:
         a9:d8:c2:93:82:11:40:44:eb:a1:cf:c8:a0:49:6e:1f:5d:cd:
         fd:8b:ef:de:b2:87:ba:8f:f7:38:cf:39:5a:f6:29:7b:f2:54:
         09:ad:78:1f:ff:63:76:87:db:01:fb:0a:7b:0e:b0:cc:b1:d0:
         df:e4:c9:6c:8d:7a:f0:f4:18:51:eb:de:9c:7e:18:47:f6:fe:
         29:8d:d3:af:f7:7c:3f:67:b2:fb:5d:7c:55:e9:a6:57:25:39:
         b9:55:46:00:18:d9:15:96:93:db:a4:f7:57:c4:23:a4:cc:87:
         94:25:07:ef:3b:9c:81:cc:2c:0d:1c:21:01:3a:09:59:d7:1a:
         c7:fb:6c:55:eb:76:35:b7:b7:44:f8:99:9f:5a:bb:73:93:b2:
         04:f3:99:3a:9c:bd:d6:92:5b:e7:e6:6a:a5:15:6e:54:c4:74:
         f9:f0:9c:b6:8a:d9:70:3e:c4:ce:ce:d9:8e:f8:5e:a3:5a:df:
         83:e2:6b:92:81:38:57:de:db:b3:35:03:05:1e:48:6b:b6:40:
         9e:7d:dc:1f:86:f2:94:41:b3:29:09:59:fb:bd:c2:0a:9c:61:
         39:61:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:33:13 2025 by rpki-client