Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
File:                     o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft (raw, json)
Hash identifier:          ScQODF4mtvFp8FF78kC2Ch5nj0eVK27LB1wgslzV7Qw=
Subject key identifier:   78:66:DC:1A:23:74:79:45:FE:0D:AB:99:07:B2:0B:A0:A4:9E:37:A6
Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82
Certificate issuer:       /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 02:40:53 +0000
Manifest this update:     Fri 31 Jan 2025 02:40:52 +0000
Manifest next update:     Fri 07 Feb 2025 02:40:52 +0000
Files and hashes:         1: o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl (hash: zpRn0wU+i+AlTgFPxoK3Z5GnoOH+uZUuZZ9pF6kQ68g=)
                          2: CCCA3842714711EDBB61A87FC4F9AE02.roa (hash: ph/hTIyNCTBKdvnOQ1KHBJ908JBT9ekK4yiE8SJtW4w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182
        Validity
            Not Before: Jan 31 02:40:52 2025 GMT
            Not After : Feb  7 02:40:52 2025 GMT
        Subject: CN=679c3835-99c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:2e:ec:4c:16:6e:b6:83:93:0e:1b:da:7a:
                    4d:a4:08:14:0f:9b:fb:88:7a:96:49:ef:73:91:28:
                    a2:94:44:61:71:e3:0c:53:98:2b:19:5a:0a:a5:e5:
                    fd:21:47:c5:67:08:65:27:a9:3c:a6:fe:3b:66:8b:
                    bc:96:6a:be:d6:83:c0:b0:06:1a:1f:79:fa:de:84:
                    73:36:64:93:25:d1:45:66:76:5e:a7:19:bd:4f:ca:
                    47:e7:70:c7:74:65:61:a7:0e:76:bf:70:c7:23:1d:
                    aa:ac:76:31:8b:29:b1:0f:21:d6:e3:44:ec:95:30:
                    0e:64:3f:dd:d2:09:e9:82:f6:cd:ef:64:08:ba:03:
                    44:03:40:5a:db:8f:c7:8e:af:2a:7b:86:0e:b7:30:
                    9a:9e:41:3b:7b:b9:3b:c7:ce:18:6f:06:58:40:25:
                    e1:78:00:21:d5:6d:d5:eb:b1:64:d1:28:d5:0e:83:
                    66:fa:e3:e7:f3:2a:b3:af:cc:80:f6:12:dc:89:a1:
                    e0:90:dd:6a:da:5d:4c:cb:c4:9d:99:50:e3:51:85:
                    cd:82:1a:a9:df:ff:d3:89:73:69:8b:a3:8d:51:b3:
                    3e:c4:28:8a:38:e9:92:2b:8f:f6:43:66:a7:95:de:
                    fe:35:eb:97:98:6d:25:dd:fe:c9:f2:30:e2:cf:09:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:66:DC:1A:23:74:79:45:FE:0D:AB:99:07:B2:0B:A0:A4:9E:37:A6
            X509v3 Authority Key Identifier:
                keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:cd:f3:a0:45:03:10:59:f5:61:ed:26:1e:df:cb:67:2a:
         49:cf:4f:19:9c:d0:08:01:3c:a6:14:a7:c5:39:c4:5d:1b:8c:
         e4:6f:04:d8:18:10:05:a8:30:c7:3d:1c:ca:85:d6:a8:b3:52:
         c1:80:93:7d:e5:18:eb:cc:06:b4:e5:f5:c4:03:f1:79:34:38:
         9a:0e:49:9f:e7:f4:01:cb:40:06:4f:89:8b:73:4a:4d:1f:c4:
         4b:6d:be:d5:5a:53:79:69:ef:c6:70:80:a5:52:a3:fb:70:86:
         f1:ee:82:0b:f7:56:0d:a2:63:f1:11:17:8b:ad:88:ae:12:84:
         00:57:b8:8e:bb:ea:99:ff:30:58:14:3e:6e:0a:de:be:39:fd:
         22:a9:4c:89:97:9b:2e:7f:15:fd:d8:b4:9b:88:36:af:61:48:
         4f:61:6c:80:f2:13:7c:0e:63:82:6c:d5:c5:72:85:16:9b:98:
         c0:78:98:f0:ba:60:d9:3a:ec:3c:30:e7:7f:47:a2:2f:2d:9c:
         ba:17:d4:24:0a:3a:22:23:bb:c2:ca:92:8c:1e:18:cc:fc:15:
         c4:7a:46:0e:53:2b:ad:78:37:af:40:a7:fe:23:e1:44:78:05:
         99:b3:d2:a6:10:d7:38:5e:0d:f1:e6:b3:83:cf:23:ed:be:49:
         75:7f:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:31 2025 by rpki-client