Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File:                     fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier:          OnNSa5PyUzej8vwpZ/4SVANRrYLf2LT6+h7plFVfMIs=
Subject key identifier:   AE:90:A9:D4:98:5C:CB:A3:1C:DE:57:CC:EF:A6:33:7B:4E:3F:85:C5
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer:       /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number:          05F9
Signing time:             Thu 30 Jan 2025 22:53:48 +0000
Manifest this update:     Thu 30 Jan 2025 22:53:48 +0000
Manifest next update:     Thu 06 Feb 2025 22:53:48 +0000
Files and hashes:         1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: HfxeLMouNiKTCMZGNmi1d7ThYnLsdFjAkBCAVNaGI8c=)
                          2: 6E1BCBC495BD11EB89199F37C4F9AE02.roa (hash: 6VtKNEIG9FeALH3s40nNCwARNeebdE67fF6D4UlnLsE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
        Validity
            Not Before: Jan 30 22:53:48 2025 GMT
            Not After : Feb  6 22:53:48 2025 GMT
        Subject: CN=679c02fc-2c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:e4:0b:7d:d8:75:93:d7:87:09:fa:a9:b2:
                    c6:80:5a:13:21:ac:ad:2b:7e:5f:30:d5:08:d8:f2:
                    cd:b5:a4:d4:ea:ea:1e:9e:d1:95:b4:31:14:4b:06:
                    8d:c7:94:12:5b:34:4b:48:94:e0:22:a8:b2:b1:87:
                    4e:97:34:fd:b5:86:b9:64:ba:24:0d:45:27:96:5b:
                    33:b0:c3:bd:18:44:40:db:3c:e7:7c:44:fb:d4:fc:
                    c7:ec:0b:66:2a:6a:11:79:6b:f1:dd:61:76:a4:50:
                    a3:3b:ab:43:d2:cc:9b:70:db:86:9c:bd:15:86:4d:
                    f2:fd:32:ce:71:70:9a:be:97:2f:28:c6:44:dc:00:
                    35:7d:00:fd:3d:18:bd:70:d6:04:33:ad:fb:4b:1f:
                    05:49:4a:66:56:69:32:61:31:7a:aa:49:43:e7:0a:
                    e6:df:8b:0e:42:3e:1e:c6:98:cf:b0:03:70:55:57:
                    d2:60:c6:43:b6:63:8f:22:9d:8b:c2:fa:96:34:3d:
                    88:7d:2b:ad:93:7c:5a:a8:36:9d:7e:ee:4f:14:d2:
                    54:27:56:3b:90:cf:b7:7f:25:bf:10:8e:e7:55:d1:
                    cb:68:74:31:81:48:9a:7c:d0:29:a8:b6:d5:2a:9e:
                    f2:0d:5b:21:74:8e:04:96:e2:22:5b:fc:7f:88:ef:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:90:A9:D4:98:5C:CB:A3:1C:DE:57:CC:EF:A6:33:7B:4E:3F:85:C5
            X509v3 Authority Key Identifier:
                keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:4d:6a:86:a6:5a:fd:e9:75:d3:6e:5d:39:40:65:04:aa:
         71:57:94:e4:d2:95:fa:7f:91:f8:84:0b:d3:84:43:f6:2e:c8:
         95:52:1d:8b:6e:14:31:1c:79:1c:c5:98:70:ba:2a:3b:59:02:
         4f:4e:78:17:a7:71:65:69:f5:33:4f:5a:a6:ba:54:38:19:dc:
         8c:3d:97:31:1c:ce:ec:2b:5f:a2:36:88:da:f3:0f:6e:3e:38:
         be:5a:02:8f:2e:e2:6a:60:13:30:cb:c3:10:e2:dc:fc:2c:6a:
         03:92:68:d4:db:3a:6d:35:7a:a5:b3:44:a6:4e:d5:2b:16:de:
         47:3c:d1:5a:91:40:17:2d:10:b7:56:8c:17:c1:65:b2:cd:ea:
         cd:1f:ba:1e:1e:99:be:10:f1:00:90:00:d8:bc:4a:a1:bd:f7:
         44:11:d4:f1:45:3b:9a:6a:87:c1:64:eb:07:fd:de:f9:7f:69:
         f9:02:69:8d:9d:32:5b:9e:42:23:66:49:6b:f6:bf:ef:e5:bc:
         c1:25:ad:fd:99:76:45:2d:09:50:a1:d8:29:bb:7b:45:73:ba:
         0f:4c:df:51:90:c5:37:94:60:01:a9:d3:d2:c7:45:a3:a3:2c:
         6a:28:be:e0:50:c8:e5:0b:e2:98:f6:5b:6d:96:1e:b2:be:4e:
         e5:0c:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:16 2025 by rpki-client