Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
File:                     g5Veubsl3DOnjslssIEXQZxkulw.mft (raw, json)
Hash identifier:          zLoEZGfRyQyY+4tvMKFWs0tlWUATQR/THwTpH534Pvo=
Subject key identifier:   D9:BE:A4:29:63:A6:07:64:DA:4D:36:6A:FE:F0:C5:66:60:E4:82:7C
Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
Certificate issuer:       /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
Manifest number:          16
Signing time:             Fri 31 Jan 2025 07:05:14 +0000
Manifest this update:     Fri 31 Jan 2025 07:05:13 +0000
Manifest next update:     Fri 07 Feb 2025 07:05:13 +0000
Files and hashes:         1: g5Veubsl3DOnjslssIEXQZxkulw.crl (hash: 1Cz+Y/jge+8iLyLla2X1jkyXhohCpgPYy/oSeilRVNU=)
                          2: A9D891D4C82B11EF8409A474C4F9AE02.roa (hash: 9VTnLi5T+YYltF+k17fA4MmiG8WRs/lt6DHBJeHF2Cc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
        Validity
            Not Before: Jan 31 07:05:13 2025 GMT
            Not After : Feb  7 07:05:13 2025 GMT
        Subject: CN=679c7629-9c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:d6:d2:c2:5e:33:14:20:cb:d8:1f:3b:27:
                    72:0c:12:7c:70:ed:84:22:f7:37:48:3f:c2:d8:25:
                    42:7d:7a:71:b2:4e:f9:8b:20:ae:42:bb:d3:e8:9c:
                    35:ef:8a:16:b6:3b:7e:35:69:dc:d3:d6:bf:61:9f:
                    c1:b1:88:c7:0a:fd:d1:ec:48:ae:5a:fa:a0:b4:7e:
                    fe:74:07:d7:e7:2d:33:05:93:17:81:7f:09:3b:ce:
                    84:0a:7f:f6:17:7c:4d:ca:5e:fe:13:91:6c:8c:78:
                    da:8b:6c:6d:d2:cc:bf:af:4e:e6:5a:f7:e6:0b:c7:
                    33:ac:8d:21:4d:6e:b2:5f:2e:1e:1e:75:e2:49:30:
                    e7:33:9b:0b:96:3e:0d:dc:a7:3e:01:75:02:c0:b6:
                    ef:8d:7f:8d:5d:f0:f7:9f:56:e6:c9:73:a9:c1:90:
                    fe:66:00:62:a5:f2:6c:45:b4:68:8c:d1:48:e6:1e:
                    90:f0:bb:80:d7:c4:1b:8f:5e:12:eb:9c:90:f9:87:
                    dd:69:91:b8:5b:0a:0a:32:bb:d8:57:0a:e3:3d:c2:
                    e5:f5:0b:96:6f:de:a3:5d:61:16:9b:e4:f0:4e:78:
                    72:29:1b:49:80:24:f8:27:43:b4:1e:10:9a:d3:22:
                    81:de:ef:f8:13:d8:13:35:d7:84:a5:67:38:91:4d:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BE:A4:29:63:A6:07:64:DA:4D:36:6A:FE:F0:C5:66:60:E4:82:7C
            X509v3 Authority Key Identifier:
                keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:68:f7:43:2c:ad:ac:ac:ac:2e:d5:77:97:40:9c:fd:1b:56:
         11:1c:b1:e1:84:c2:d1:4d:72:dd:60:13:50:25:50:55:c8:df:
         97:85:b7:12:e1:10:ed:eb:23:72:de:96:83:83:b3:69:0a:99:
         52:66:cf:92:f8:39:d3:43:ff:79:0c:eb:d6:8b:9f:f6:92:f0:
         b2:ab:30:a4:d8:dd:77:a2:2e:18:b7:7c:80:49:89:ec:ad:ec:
         9f:4d:85:fd:28:f2:36:0e:d6:53:fb:e9:2c:93:81:77:19:90:
         63:d8:4c:c1:ac:b7:5f:05:43:1f:1a:2f:06:60:14:0f:72:0d:
         69:b0:76:e3:dc:2f:0e:ca:0d:25:8b:71:bb:f9:31:6a:bd:6b:
         48:e6:f8:90:73:7c:a7:fc:c3:f5:83:fa:f8:e0:f4:10:69:ed:
         f4:8a:d9:2e:ed:09:3d:6a:ab:16:66:eb:c2:dc:16:4b:c0:79:
         0d:55:81:6b:3d:7d:b2:c2:c7:a0:a9:74:dc:07:6d:76:40:19:
         8e:07:32:c2:70:4a:92:c0:4b:65:48:27:61:e5:ea:d5:1f:9e:
         c5:c3:ee:b2:44:62:31:44:25:96:30:91:80:07:7c:6a:69:0c:
         25:1c:78:59:f1:44:bc:cf:4c:89:6e:ec:50:5b:09:22:67:31:
         71:01:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:06:47 2025 by rpki-client