Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
File:                     YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json)
Hash identifier:          AuOE5owKW8qbkOqC2GA2AhD/yWda4/zKsjm8Ly87NSo=
Subject key identifier:   5C:95:00:F2:47:6D:A3:59:0C:B7:5C:99:51:1A:50:E3:15:3A:B1:C0
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Certificate issuer:       /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
Manifest number:          5B
Signing time:             Fri 31 Jan 2025 06:07:57 +0000
Manifest this update:     Fri 31 Jan 2025 06:07:57 +0000
Manifest next update:     Fri 07 Feb 2025 06:07:57 +0000
Files and hashes:         1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: VMQt42s5ntEiQGrd6VEw/WxX84Ppsn5RwgESbYFHdd4=)
                          2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: L57EG0Fn/DrFvp2TO2K+O7e/Z9P96vwgKEdxXex5oZ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
        Validity
            Not Before: Jan 31 06:07:57 2025 GMT
            Not After : Feb  7 06:07:57 2025 GMT
        Subject: CN=679c68bd-78ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:73:01:ae:fe:f7:f3:cd:f4:85:0f:7f:fb:
                    4e:6a:e1:89:d6:de:a6:58:27:d8:66:2d:13:76:7c:
                    1e:ac:60:29:1c:02:9b:3c:a4:7e:13:2f:cd:45:97:
                    91:48:bb:55:5b:c9:5a:ed:81:6d:4a:8b:da:02:fe:
                    30:e4:57:c5:b7:68:91:77:a7:9e:b3:a8:55:34:c8:
                    63:86:bf:d4:38:ed:cf:98:7d:ac:4f:50:d0:30:b9:
                    c2:b0:5b:ff:94:c8:67:eb:7f:7c:4c:ad:c4:e0:8b:
                    9a:e7:7f:1e:e2:36:cc:ef:18:f2:ed:e1:64:13:2c:
                    2a:12:b0:39:ec:4c:47:e0:78:fa:bf:b4:60:fa:aa:
                    5b:b7:ed:00:57:cb:e7:b5:9e:24:2d:b1:11:ee:7f:
                    de:92:9b:9c:b4:10:2f:a7:ad:03:1e:86:1b:c8:22:
                    76:30:19:cc:75:60:be:07:2b:4f:55:a4:1a:4a:30:
                    9e:31:5a:4a:65:ae:a3:a3:ab:2e:11:54:c7:5b:c7:
                    56:72:f4:ac:ae:75:d2:88:06:b7:ae:b8:85:ea:d4:
                    b2:e2:00:76:4f:6d:80:25:ac:4d:35:19:3b:cd:31:
                    11:f4:e5:8a:84:a6:2a:31:24:33:32:95:fe:42:6b:
                    e8:66:6a:84:db:4f:b3:23:a4:f9:6d:0e:b0:11:19:
                    34:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:95:00:F2:47:6D:A3:59:0C:B7:5C:99:51:1A:50:E3:15:3A:B1:C0
            X509v3 Authority Key Identifier:
                keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:62:36:e8:bf:33:10:96:14:73:cb:76:fe:fb:0a:4b:0b:
         dd:14:90:06:04:bb:a2:b2:a9:cb:e2:3f:f8:4b:e2:97:56:1a:
         ed:e8:2f:4c:96:6d:55:41:70:8f:36:76:36:ee:4d:93:f5:c0:
         45:7c:32:70:4e:d7:ac:13:73:83:dd:c3:9d:d3:61:d5:d0:18:
         05:9d:ab:c8:d4:05:81:98:01:ad:02:ee:c6:75:2f:8e:81:03:
         7b:92:67:19:75:b1:b4:82:a6:0d:4a:13:74:1c:e2:98:bf:2f:
         94:1a:a1:59:73:3d:7a:d5:99:13:77:50:0b:f1:c1:09:32:d8:
         87:13:13:80:73:af:c7:1d:b3:15:73:3f:b7:4b:ae:c4:39:9b:
         60:d3:7b:30:86:7d:35:b5:4e:86:f2:50:39:4b:28:b2:22:2e:
         63:82:77:61:ae:55:ce:47:02:07:e2:0b:8a:06:a6:b0:d3:cf:
         64:83:d6:82:bd:d8:56:12:42:55:bc:be:c7:5e:44:8a:a1:eb:
         b6:88:f0:b6:62:2f:71:75:73:bb:29:c4:6c:57:cd:1c:e2:d8:
         c4:4b:34:8f:51:f9:f2:cf:4d:f4:96:f3:a8:70:c7:45:56:9f:
         bd:85:57:ea:db:f9:70:4b:d7:16:72:ae:26:32:92:b6:ef:29:
         fd:13:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:13 2025 by rpki-client