Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
File:                     b09GjkMIsA0N9f6shChm1U539dM.mft (raw, json)
Hash identifier:          X/GrQAszyqEp8MyKirvQkw4DifjvlNYllpaK7OxpdhI=
Subject key identifier:   03:D4:DE:CE:4F:C3:3F:D6:B9:0F:1A:0B:CB:42:E3:B3:2C:12:6C:D8
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Certificate issuer:       /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial:       0C2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
Manifest number:          0C16
Signing time:             Fri 31 Jan 2025 18:29:33 +0000
Manifest this update:     Fri 31 Jan 2025 18:29:33 +0000
Manifest next update:     Fri 07 Feb 2025 18:29:33 +0000
Files and hashes:         1: b09GjkMIsA0N9f6shChm1U539dM.crl (hash: e7lBbUPD4fGYHZuxIvmq1cUiCC2BKYQuKbpGLwQ+amc=)
                          2: 6D8B82D0D6D811EE8BBA8938C4F9AE02.roa (hash: XbQlgJ5ij8Zawt91ZOfJM2GofSHHlhd8JxuJOM9FhXM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3117 (0xc2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
        Validity
            Not Before: Jan 31 18:29:33 2025 GMT
            Not After : Feb  7 18:29:33 2025 GMT
        Subject: CN=679d168d-aa53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:6f:8c:2d:c6:b8:56:f8:0c:1f:16:cf:00:
                    b7:cb:e8:24:d7:b6:fb:07:b3:59:87:1d:9d:a5:38:
                    82:3f:92:c0:b5:e0:29:83:27:bb:14:d8:a6:ea:a1:
                    b1:0b:3a:f5:3d:2a:c8:4b:21:d4:ea:87:2c:7c:55:
                    3a:1f:2c:cf:e3:a7:a0:fa:c6:56:cf:57:b2:9e:62:
                    1f:b1:59:76:5b:d0:c2:af:cb:8d:5d:ab:de:da:d0:
                    1c:f1:d8:d3:c5:4a:db:eb:67:ba:0b:41:e5:d8:d5:
                    ea:c0:2e:7b:82:be:aa:b7:a6:c7:17:32:5e:76:e0:
                    98:68:b5:fd:b8:02:03:bb:9e:9c:99:4d:58:64:fc:
                    c2:5d:a5:1b:8c:8f:26:99:8e:a8:91:e4:4e:85:8f:
                    0c:80:d7:16:b3:ec:de:f4:45:b3:02:77:7a:ec:12:
                    29:c2:2d:c1:03:16:a7:dc:41:94:fd:97:c3:d2:a3:
                    58:60:a6:d4:00:e9:d1:7e:ee:cc:9b:e2:11:ec:30:
                    b4:42:34:06:97:9d:1e:9a:68:41:0b:2c:0d:50:85:
                    67:5e:4b:c1:b3:2a:f0:a6:3e:2a:b3:43:8c:09:36:
                    e6:61:8e:4e:e1:8a:db:05:cb:49:a5:bc:fe:86:42:
                    84:22:c2:0e:39:35:28:29:1c:67:fe:fa:80:d6:ab:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D4:DE:CE:4F:C3:3F:D6:B9:0F:1A:0B:CB:42:E3:B3:2C:12:6C:D8
            X509v3 Authority Key Identifier:
                keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:20:fe:0d:68:99:0f:4e:1b:0d:03:f8:8d:87:ab:99:50:f1:
         cc:1c:38:c3:ec:b5:17:ba:48:9d:55:2b:d0:93:da:de:17:a9:
         62:9e:43:72:76:4b:c5:76:f1:d4:b9:75:f9:b1:b3:2d:f4:96:
         47:70:9b:81:ee:21:5e:07:3c:c2:67:ba:35:81:b9:64:49:40:
         a6:bf:b8:21:70:32:82:87:a1:9e:27:c9:d3:9c:8b:c7:27:98:
         fb:75:f6:3b:bf:9d:dc:99:bf:25:53:3c:eb:2f:31:65:af:62:
         84:5b:56:41:4c:49:02:a0:e3:16:07:4c:3f:f6:1c:68:70:5b:
         07:ae:20:5a:46:03:f9:3e:25:98:65:ee:37:f0:5e:91:24:0d:
         4f:dd:75:00:8d:62:96:fb:45:45:65:ba:8d:74:2a:07:df:4c:
         30:2e:1d:e5:b3:3a:fe:ad:dc:f1:83:ee:09:98:09:33:f1:16:
         42:68:98:2c:54:f3:1b:0a:14:d4:03:85:c5:2f:db:3a:68:6c:
         76:3d:86:5d:74:68:a4:28:6d:9c:70:47:4b:fd:05:71:0d:af:
         28:4b:bc:f1:05:76:0d:27:22:10:64:ff:7b:84:db:76:af:88:
         7a:5f:fc:59:6c:25:8a:d1:4d:be:7f:48:b3:a6:82:ff:09:42:
         62:43:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:16 2025 by rpki-client