Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
File:                     bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json)
Hash identifier:          K+Q22jDTHfu4juCkFn7JkUaZCLZtRUSRQRZ7E0lqSzw=
Subject key identifier:   EC:57:F6:D8:C3:E8:49:DF:1D:43:4F:08:98:6A:38:74:FC:16:48:CD
Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25
Certificate issuer:       /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
Certificate serial:       0249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
Manifest number:          0246
Signing time:             Fri 31 Jan 2025 01:55:06 +0000
Manifest this update:     Fri 31 Jan 2025 01:55:06 +0000
Manifest next update:     Fri 07 Feb 2025 01:55:06 +0000
Files and hashes:         1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: Y503B5h+djbIMkexXpKjb9LfdrhEGh68SXCBEbozJKc=)
                          2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: wd4QJR9Px8ImvSHEPaKQomQHqTQIJfzdAznmx8J+K4s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
        Validity
            Not Before: Jan 31 01:55:06 2025 GMT
            Not After : Feb  7 01:55:06 2025 GMT
        Subject: CN=679c2d7a-1779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:7c:c2:ae:8f:22:6c:6c:38:83:51:88:df:
                    c2:d3:88:b8:3a:6f:ea:7e:40:23:4b:82:b3:18:fe:
                    de:e5:9d:cd:3a:5a:44:d4:83:6d:f7:1e:4a:4a:46:
                    8b:01:11:73:5d:19:7b:a8:8f:3d:75:e1:ef:15:83:
                    0c:5d:ed:12:e2:c8:a7:27:9e:39:a2:b6:aa:82:67:
                    4f:6d:00:4a:4b:f6:06:d0:75:71:86:95:d7:a8:2b:
                    30:e9:6b:bf:e8:9b:bf:09:1f:cf:3d:8a:f3:ff:b9:
                    a8:15:2f:70:6b:0a:b1:8a:8a:cc:96:4c:4b:37:55:
                    60:43:ae:80:c5:c6:58:5a:62:86:1f:cc:83:07:c5:
                    d8:8a:db:7f:e1:78:49:90:49:11:44:6b:d1:f6:b6:
                    c7:b1:47:8c:09:c2:a5:3a:8c:69:67:8c:6d:f2:94:
                    ae:66:2e:37:bf:c1:6d:8b:a4:71:0d:38:89:df:a1:
                    71:84:37:3d:ee:7b:33:52:e1:ac:10:a6:1f:38:ac:
                    ef:f4:a4:80:2b:a7:e6:e1:b1:95:cd:43:3f:7c:1d:
                    c7:d4:84:24:15:58:90:36:b2:f9:a9:10:78:24:cb:
                    76:30:98:19:01:40:b9:43:3a:90:ba:01:bc:2b:a3:
                    50:6b:a7:e9:bf:a7:18:a4:0a:1e:d8:33:dd:a1:32:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:57:F6:D8:C3:E8:49:DF:1D:43:4F:08:98:6A:38:74:FC:16:48:CD
            X509v3 Authority Key Identifier:
                keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:4c:cb:72:7c:a5:4e:ae:77:f4:71:95:45:8f:85:69:7c:
         d9:a5:ff:47:54:7b:a1:29:db:22:98:35:89:fa:6d:1f:15:a0:
         e7:39:63:a6:17:c6:93:20:ed:e4:bf:bb:31:0d:f6:67:c4:d8:
         34:57:14:95:7d:62:6c:2c:a5:d6:d5:cb:fe:78:72:25:19:85:
         ed:09:3f:02:10:03:83:f4:e0:04:18:c4:2b:18:3c:d8:00:88:
         3d:66:27:b4:3d:d8:81:f4:f3:08:3a:28:ae:76:99:67:de:a4:
         8b:2e:f9:5e:29:2d:b1:37:70:af:6e:f3:2c:11:19:7e:8d:c4:
         06:93:62:ba:4c:ed:2a:8a:6e:e6:f3:c7:28:e6:13:c6:d2:f1:
         c9:6a:e3:f5:88:14:42:8d:a3:39:73:ae:1d:61:be:68:2a:21:
         86:50:86:0c:04:49:f8:85:a7:6f:0c:06:95:ed:12:2a:8b:ae:
         96:d4:5a:95:a2:cf:bd:b6:10:2d:7f:60:b4:ea:b1:c9:e5:90:
         63:9d:cc:df:09:fc:b4:b6:69:71:22:73:52:3e:f8:40:3e:2c:
         47:bc:f4:1a:77:83:15:d9:12:e3:d1:cb:66:42:5e:ae:f8:ff:
         ed:ee:55:83:04:49:ab:21:9b:2a:be:e5:5e:09:93:d7:3d:b9:
         80:b4:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:11 2025 by rpki-client