Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
File:                     YPTPqWb55eIDdMsu1HBkEt2iHE8.mft (raw, json)
Hash identifier:          nL5IPFW4FmOjXsfGoL415deb7o+LJYTYbdhARus+iv8=
Subject key identifier:   94:6F:DC:89:EF:05:7D:49:C9:63:A9:2C:10:07:22:F2:4E:4B:94:4B
Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F
Certificate issuer:       /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F
Certificate serial:       0796
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
Manifest number:          0790
Signing time:             Thu 30 Jan 2025 21:14:35 +0000
Manifest this update:     Thu 30 Jan 2025 21:14:35 +0000
Manifest next update:     Thu 06 Feb 2025 21:14:35 +0000
Files and hashes:         1: YPTPqWb55eIDdMsu1HBkEt2iHE8.crl (hash: 6peW0RxHGwMqTHd6kzXs0ph1KODOzpOqbJ1ildeXmUc=)
                          2: 4B696C52F34311EAB4034710C4F9AE02.roa (hash: WyMJ1jUI8RllCu4tUSg8X7OX8QYWAuhM07CgjE9LNa4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F
        Validity
            Not Before: Jan 30 21:14:35 2025 GMT
            Not After : Feb  6 21:14:35 2025 GMT
        Subject: CN=679bebbb-4b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:bd:50:20:6f:69:31:00:5b:8a:1a:2a:bb:
                    08:87:11:7e:7c:34:1a:ba:79:dd:d2:fa:36:4c:af:
                    a4:37:95:67:9a:d0:9d:b0:19:30:0a:86:4d:ed:43:
                    f6:ea:a5:4c:43:42:56:e9:e1:bf:91:db:ce:42:a9:
                    fc:65:38:21:7c:30:4d:56:49:5d:8a:55:6e:eb:76:
                    d3:ff:5f:b5:e7:89:8b:05:8d:ee:5d:39:6c:2e:15:
                    a6:6f:98:57:55:87:16:1c:fa:f5:f0:22:95:a7:e3:
                    41:11:02:31:11:ee:fe:09:39:fa:2b:fc:70:55:51:
                    b2:47:35:10:ee:5f:de:fd:ea:3a:d6:50:44:17:cf:
                    68:fa:6e:6b:d3:4f:6e:b4:cb:c2:23:76:71:21:3e:
                    cd:85:0e:28:54:e8:95:e8:97:29:6f:eb:2a:2c:b2:
                    1a:68:30:66:a9:71:80:de:4d:7d:8d:ba:95:59:2b:
                    21:0d:31:21:36:0c:5d:3b:58:79:9c:41:e4:05:cc:
                    ae:45:48:46:dc:c7:1d:b1:f9:ed:8f:b5:ed:62:de:
                    e4:5e:75:a4:22:c7:0d:70:b2:71:1e:59:1f:58:3a:
                    35:c8:6b:b7:09:2e:49:d8:09:d6:14:38:7d:94:51:
                    67:31:1a:43:3e:08:4e:58:48:25:12:0c:7d:0c:ea:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6F:DC:89:EF:05:7D:49:C9:63:A9:2C:10:07:22:F2:4E:4B:94:4B
            X509v3 Authority Key Identifier:
                keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:51:77:05:57:7b:ba:b5:f4:23:2e:44:4d:40:01:12:bc:
         8c:97:db:1b:83:c5:44:05:8b:1c:4c:23:03:70:b2:23:21:72:
         c5:f0:62:e7:cf:e3:68:95:21:64:ff:fa:a4:e7:ac:46:08:91:
         5d:32:2c:3b:00:66:c2:bc:a7:14:44:cf:29:9f:3b:c9:ad:58:
         4b:77:19:23:3c:b7:13:8e:92:45:1c:60:41:7e:aa:22:97:52:
         1d:33:0f:b3:8e:d2:ad:b2:57:1c:08:01:ed:48:f8:0b:a1:2f:
         ad:00:a5:e1:d1:28:f6:55:3d:69:3d:ed:53:3f:b4:d1:6e:de:
         bc:68:b8:e4:a1:b0:90:ac:e7:99:7d:23:99:af:8a:34:5d:54:
         b1:17:03:b0:ae:e4:6a:fa:a7:9c:c0:ed:b1:f8:c7:66:7f:47:
         c9:0e:08:d7:4c:e0:b9:c1:78:58:aa:8b:e1:e9:c3:71:37:c3:
         cb:2c:ac:12:b0:76:90:d7:09:a4:9e:04:b8:00:eb:2f:0b:29:
         17:3b:7c:f4:4d:07:d5:c6:af:21:58:c7:58:4e:71:2e:ec:a0:
         ee:6b:d4:dc:49:d0:7d:d0:dd:42:f8:52:fc:ca:89:6d:57:c4:
         88:a1:e1:48:94:ff:c5:26:61:87:13:a7:f6:d2:eb:87:2d:a1:
         10:6c:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:53 2025 by rpki-client