Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File:                     R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier:          rkRt3Y5zTeLHNh0MogWiAneTpWLPo6ArvrW8TphP3hQ=
Subject key identifier:   80:14:A0:E8:3A:60:10:49:F6:90:B9:38:67:DC:AB:4F:55:8B:31:9F
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer:       /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number:          B2
Signing time:             Fri 31 Jan 2025 05:10:13 +0000
Manifest this update:     Fri 31 Jan 2025 05:10:12 +0000
Manifest next update:     Fri 07 Feb 2025 05:10:12 +0000
Files and hashes:         1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: piWxFU1sa14OGSY3yTQNmeB0TYlYtvNbxe226VMttL0=)
                          2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: CylyyzwIG08L70kRCG76cWxCrDSIPb2MuuRknQBCs64=)
                          3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: SQ0tWzqj2x2vx8fy9K7AJ1cebETDa6gFcypKPROA2yk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
        Validity
            Not Before: Jan 31 05:10:12 2025 GMT
            Not After : Feb  7 05:10:12 2025 GMT
        Subject: CN=679c5b34-d134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:70:91:4d:cb:3e:e2:0b:e7:db:38:3f:a8:
                    80:01:96:88:44:83:75:f4:a0:66:66:54:ca:5a:87:
                    53:19:50:bb:c0:a6:13:7e:d3:c5:d2:2d:0d:d7:68:
                    44:23:99:64:ed:5e:4a:c9:78:fa:f6:af:a7:61:2d:
                    f7:03:83:48:bc:7d:70:e0:e1:b4:d4:f3:17:0c:18:
                    64:35:2a:16:5c:c5:78:b8:cb:e0:5f:20:79:53:0b:
                    11:f5:15:e2:c0:4a:5a:7f:63:3e:62:08:c0:92:d2:
                    cf:4c:25:cb:7d:88:e2:73:bd:88:0b:c0:5a:1e:09:
                    53:3e:28:89:56:72:14:d5:21:48:a0:6a:5e:28:b4:
                    89:e7:6f:b9:0d:f9:4b:f1:17:d5:9d:80:7e:6e:ef:
                    12:e3:00:0e:56:91:b9:e1:99:49:82:72:04:8d:9e:
                    f4:a0:ce:a0:7d:85:10:44:e7:cb:b4:e6:47:b2:15:
                    8f:0c:6c:5f:48:08:a4:90:c0:03:ab:e3:08:cf:3d:
                    de:7a:15:3e:cc:00:4c:da:91:c2:f6:3a:8e:36:2f:
                    a9:75:b3:0d:a6:e0:3c:3d:29:65:1c:bf:3a:1e:0d:
                    3e:f7:e8:f1:d6:9f:b0:7d:5d:fa:9b:43:c7:90:24:
                    82:16:56:b1:67:00:c4:d9:58:94:e1:e6:45:70:e8:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:14:A0:E8:3A:60:10:49:F6:90:B9:38:67:DC:AB:4F:55:8B:31:9F
            X509v3 Authority Key Identifier:
                keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:13:ce:a4:dc:77:51:b5:13:37:1d:15:01:cf:99:4c:d7:65:
         65:28:f7:55:b1:fb:35:38:62:bd:43:22:57:e7:97:69:00:45:
         db:8a:ac:e0:e7:c1:86:24:3e:ca:1c:ad:81:0d:bf:a3:fc:49:
         6b:ce:29:b6:4d:6c:f0:32:7f:15:cf:67:ba:aa:14:91:8b:11:
         a4:81:4f:f0:45:a0:d7:bb:ef:12:96:bd:e4:10:81:cf:a6:00:
         37:6e:57:c8:e2:3f:3e:11:7f:81:6b:bf:cc:bf:cf:7f:96:05:
         dc:06:fc:29:f1:e5:b3:de:a3:0d:e1:60:aa:7d:5a:66:45:64:
         49:61:d9:29:cb:21:31:a8:0f:4d:7b:f0:56:c0:c5:16:4d:76:
         b2:78:c4:ab:41:96:55:c8:02:f9:55:a4:c0:1c:7b:ed:f1:f9:
         52:22:0f:3f:f9:9b:a8:e8:fc:2f:93:70:95:58:34:2a:4b:42:
         43:fc:71:e4:24:bd:7c:88:78:bf:0b:ce:8e:d8:23:64:e4:f4:
         84:8d:be:34:82:cb:c3:92:5f:47:ba:c0:c9:9f:3f:f1:99:ff:
         68:37:d5:8c:bb:a6:40:1e:08:fa:58:89:d5:90:71:bd:8e:5c:
         34:82:79:af:b7:48:87:d1:91:1b:39:8e:92:02:ca:7f:c6:2e:
         4d:d3:80:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:28:29 2025 by rpki-client