Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File:                     p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier:          YYBciyelfWwOoYvYPaVZcRBtlGAZhrelspoEujN4F6A=
Subject key identifier:   C5:EE:B3:9B:C2:CB:5C:D2:74:6B:E2:97:D9:BF:EF:41:98:9B:69:1F
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number:          80
Signing time:             Fri 31 Jan 2025 05:43:21 +0000
Manifest this update:     Fri 31 Jan 2025 05:43:20 +0000
Manifest next update:     Fri 07 Feb 2025 05:43:20 +0000
Files and hashes:         1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: QpDS0c/OhazcC2iK85PAqRca+DejuuVMP/tiJgC1mYc=)
                          2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: YOGlcx/Ki3cdX1vugHNmRBcSr4+S+3T46kEdLL72MGs=)
                          3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: 28zunSVd7ij9ph2zm21XD25WtWKX4mVPocMiVSGH248=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: Jan 31 05:43:20 2025 GMT
            Not After : Feb  7 05:43:20 2025 GMT
        Subject: CN=679c62f8-d8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:7b:78:b7:d0:f2:b0:7c:06:38:8f:1c:3c:
                    e8:ce:f3:4e:a3:20:b1:d9:4a:3a:48:bd:22:e6:10:
                    e6:ef:1d:a4:1a:28:0a:3c:64:2e:ae:0c:b8:c9:a6:
                    58:cd:fa:da:31:a3:53:bf:23:c5:e7:ea:92:b1:da:
                    79:9b:7e:d5:44:a1:e0:e5:ad:17:38:c3:99:da:bc:
                    56:3b:b8:92:2c:82:4a:e7:d9:6b:79:c5:c4:47:e5:
                    b2:aa:2a:70:33:6a:25:48:2f:31:e2:f4:c2:14:d3:
                    86:5b:d3:47:71:65:74:a5:58:d8:66:54:52:e5:e3:
                    3e:df:96:7b:72:75:ae:d5:81:ff:3e:5e:89:09:f5:
                    09:cb:6f:42:b2:5c:01:3b:c8:19:26:ad:47:e9:22:
                    77:72:0c:23:f9:17:78:13:e4:03:73:93:ec:27:66:
                    18:d1:b1:21:85:0e:b0:18:cc:41:8d:d6:2f:c2:20:
                    ed:fa:21:22:de:96:3c:4e:93:f3:cc:91:00:20:f2:
                    0b:8d:68:a5:d1:88:51:bd:84:b3:42:cc:d1:a9:a3:
                    8f:84:f8:13:92:a6:6e:34:cf:8a:e1:f4:0b:3e:7c:
                    9a:c8:e7:45:0b:5f:cd:d0:35:b1:61:ce:f2:48:b4:
                    33:96:34:b1:6d:b9:70:c1:b9:ae:46:fa:ce:4b:5a:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EE:B3:9B:C2:CB:5C:D2:74:6B:E2:97:D9:BF:EF:41:98:9B:69:1F
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:8f:fd:ec:bf:fe:81:c8:fc:8a:e8:87:0a:51:fb:6f:b2:
         b7:b8:c4:a1:88:5c:a9:de:36:ab:f4:b5:7d:c8:bf:0f:6a:ec:
         45:3a:cf:09:70:a7:75:d5:0e:e3:d8:99:9b:a9:8c:31:25:aa:
         a3:2c:32:48:5a:cd:b1:83:e7:46:a9:be:b5:21:82:49:37:90:
         ed:38:45:5c:49:d2:38:0c:5b:ec:aa:4e:9f:90:84:52:58:b9:
         f0:a3:db:51:05:89:28:79:f4:6a:43:16:08:cc:85:e4:11:8e:
         99:ea:fc:63:1c:30:ce:43:3e:d5:10:72:a4:63:28:b5:36:a2:
         6b:17:c3:18:91:f0:1f:f3:e3:d3:a9:73:36:d9:17:73:24:5e:
         aa:48:4d:f8:65:bd:8b:78:f1:4b:8b:b7:cf:b6:09:fe:08:a3:
         d1:b1:08:d6:b0:07:a8:09:30:12:e8:40:99:e2:ba:87:82:d4:
         7a:bc:fa:f3:37:1a:95:52:aa:66:9b:be:e0:4e:cd:54:fe:b8:
         71:c7:66:3b:17:11:6d:38:c1:1f:e7:62:33:24:73:94:3b:e4:
         7c:8c:da:79:21:dc:7e:82:4a:ee:55:3f:56:c9:f4:da:19:1c:
         12:e9:1d:dd:f9:8d:c1:38:c4:84:0c:6a:15:2d:7b:41:16:56:
         55:6d:cc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:55 2025 by rpki-client