Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          PDLfZty5FjlT7NIpFCpwRfhsQ57Bi3NhhYlj4hZrMEc=
Subject key identifier:   9C:8C:71:2E:7C:7B:49:5D:56:00:10:97:16:0F:93:A8:80:56:F4:7A
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       2232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          2229
Signing time:             Fri 31 Jan 2025 15:53:05 +0000
Manifest this update:     Fri 31 Jan 2025 15:53:05 +0000
Manifest next update:     Fri 07 Feb 2025 15:53:05 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: 6TKG/13MITUh7Cw/nU+7ucFMP0CZyVzaYlH6bXrtMbY=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=)
                          4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8754 (0x2232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Jan 31 15:53:05 2025 GMT
            Not After : Feb  7 15:53:05 2025 GMT
        Subject: CN=679cf1e1-84fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:7a:ca:ac:0a:5f:5c:16:1b:91:e7:21:c6:
                    71:75:e0:8d:6f:e2:ac:b7:4b:36:20:cd:0d:c7:26:
                    11:1d:ca:35:96:b6:c1:e5:1d:03:c8:c4:dd:11:c7:
                    7b:8f:e2:cf:dd:f4:ef:52:17:f6:0a:dd:4b:bf:a5:
                    7d:57:06:65:9c:be:35:bf:89:3d:3a:9f:02:2c:24:
                    b6:45:b0:ea:db:bd:c1:8a:1a:c2:3a:91:e8:ac:a2:
                    b6:4f:d2:c4:da:5b:22:dc:79:a4:14:b3:8c:9c:df:
                    39:6c:bf:e2:98:7f:28:61:3d:90:cc:7a:ad:ab:83:
                    8c:f6:e4:5a:bf:5d:0c:db:18:1d:f3:33:84:1d:64:
                    0f:8e:c1:ae:34:a1:69:2b:0d:a1:06:71:e1:a5:24:
                    a7:7a:1f:0a:db:51:18:fc:e4:bd:b4:be:9e:1f:6e:
                    18:b1:1d:88:f2:c8:d7:ec:9e:ba:23:eb:96:bf:6d:
                    6e:72:f8:d3:4c:ee:d6:ea:78:6f:97:93:1b:bf:69:
                    08:f7:00:7f:ee:4b:2a:64:6d:35:27:b7:c6:48:58:
                    f6:b5:04:f0:4e:aa:f4:fe:22:12:50:d6:49:7a:8d:
                    24:94:e1:ef:ad:ba:07:fd:65:d6:b8:7f:66:a0:a8:
                    f8:cc:ec:c3:87:b6:b7:6b:d0:af:72:c3:48:6c:c6:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8C:71:2E:7C:7B:49:5D:56:00:10:97:16:0F:93:A8:80:56:F4:7A
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:64:ac:b0:6e:92:7e:7c:f5:f4:e1:90:fc:0b:59:d4:61:5e:
         98:c7:8a:e7:f3:e6:20:ce:26:b7:b1:d1:72:5e:5d:1f:a6:3d:
         6d:cd:8c:b2:4b:44:06:bf:21:96:90:32:2c:cf:24:f7:6c:77:
         ec:95:3c:1e:87:f8:cd:c8:40:fa:51:91:72:fa:19:1c:a3:bb:
         6c:c4:a5:09:78:a1:1a:82:ac:a6:ed:8e:54:99:01:30:da:7b:
         8e:fa:a8:84:e5:6a:32:88:9c:74:2c:b1:81:9f:e3:52:18:df:
         46:4d:9d:5d:09:61:09:dc:32:74:f9:85:b9:93:ee:dd:d8:ce:
         0e:6f:ce:f8:a6:de:90:28:04:f0:c8:3e:e8:80:2d:1d:0d:d4:
         46:c1:94:fe:90:d1:3b:ae:e9:72:32:f9:c9:a5:84:54:bf:99:
         c6:52:ff:00:37:34:3d:8e:e0:07:38:0d:c0:ff:f9:23:09:9d:
         9f:25:2d:ce:3d:98:9e:a4:7f:fb:64:21:ee:40:3e:66:7b:34:
         65:8f:d5:76:35:07:22:4e:e3:48:74:dc:b3:b8:f0:09:0d:08:
         c4:ca:44:1a:2e:3b:e6:98:d9:85:90:1f:fd:b3:2e:aa:79:55:
         6b:fb:d5:86:7d:0b:a5:4c:71:3d:52:c2:d3:e2:9f:4e:cd:11:
         1c:f8:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:27 2025 by rpki-client