Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft
File:                     YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json)
Hash identifier:          WR0AX7FektuQV5mESoH6lqlmFlRq9cwN3kIq49817KI=
Subject key identifier:   DF:76:02:95:D4:8E:9F:29:58:0C:57:DA:BB:78:A7:26:F2:D6:CC:55
Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3
Certificate issuer:       /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3
Certificate serial:       346A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft
Manifest number:          3458
Signing time:             Fri 31 Jan 2025 14:25:53 +0000
Manifest this update:     Fri 31 Jan 2025 14:25:52 +0000
Manifest next update:     Fri 07 Feb 2025 14:25:52 +0000
Files and hashes:         1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: ebPlX0P8t6fudnflcPe8RBXDpc7HXjyw8n3fVH/Wn3w=)
                          2: 41DE51D0DF3E11EEBE02E04AC4F9AE02.roa (hash: kJqH6bqpSJ3//AJ26qCXwZ2NcL1mcLntx12yKeJv6z8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13418 (0x346a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3
        Validity
            Not Before: Jan 31 14:25:52 2025 GMT
            Not After : Feb  7 14:25:52 2025 GMT
        Subject: CN=679cdd70-c0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:ee:d5:26:62:83:13:c1:e8:cb:62:51:74:
                    cf:a0:66:f5:c9:17:c0:d4:da:72:f2:05:3e:56:dc:
                    21:bb:fc:cd:12:e7:8d:a0:81:c4:a2:c7:23:09:83:
                    8e:f1:25:3a:f9:80:7d:03:ab:ba:7d:55:cd:f7:09:
                    98:2d:c9:70:15:76:2a:41:b5:74:5a:d3:e6:0f:e7:
                    df:88:38:02:e3:83:74:f7:99:76:08:cf:a3:53:ac:
                    e6:d4:79:6e:3c:b8:2e:a9:6a:d2:62:e8:40:62:cf:
                    88:b4:43:42:f2:8a:f3:25:77:88:af:97:90:05:09:
                    70:24:b4:a0:98:4e:bd:16:dc:bb:cf:f1:99:90:28:
                    18:93:6d:b0:0a:83:b6:65:f7:fb:65:e8:a4:ba:bc:
                    ed:69:61:ae:41:d7:28:d8:31:03:aa:a9:38:14:c3:
                    62:2e:db:fe:d6:c4:d6:51:81:5a:06:c5:1b:52:58:
                    16:73:59:cd:b2:02:68:61:9e:57:c6:6a:93:0f:83:
                    a1:0d:10:6a:62:5d:8a:d5:73:42:42:e9:d1:38:39:
                    05:5e:f9:48:d8:98:83:ef:a7:26:7f:24:1a:de:a4:
                    cd:e7:08:3a:3e:95:7e:44:bf:e3:4a:de:f1:17:6b:
                    ce:0c:64:a0:55:7f:37:dc:85:42:f5:79:b5:8c:c1:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:02:95:D4:8E:9F:29:58:0C:57:DA:BB:78:A7:26:F2:D6:CC:55
            X509v3 Authority Key Identifier:
                keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a6:be:d8:7d:b0:83:7a:c1:fa:60:c9:a8:e1:7f:b1:c3:a5:
         6c:47:4e:71:8b:fc:96:8a:29:35:22:e8:20:4e:3b:ec:14:fd:
         f6:19:75:ff:52:10:6e:cf:72:21:63:93:1b:a9:3d:85:87:ab:
         66:d2:46:93:98:bb:9e:09:cf:b0:54:0a:25:44:7e:7c:a8:7f:
         d9:f0:bb:ba:ab:00:ae:5e:ae:f1:11:13:c7:66:a4:1c:4c:27:
         9a:a4:21:e0:5f:15:19:ce:2e:22:1b:59:81:65:c7:c9:d7:c1:
         4f:be:de:be:c7:1f:1b:30:03:db:02:60:07:64:be:33:9c:05:
         eb:0c:2f:78:b9:0b:6b:88:a1:00:2c:4a:ce:15:43:8a:f1:13:
         bc:71:7e:90:12:42:83:75:bc:50:98:21:0d:cd:38:bd:18:a3:
         14:72:6b:d4:9e:f2:0f:b7:c3:a3:8b:37:6d:99:c3:be:50:63:
         3a:6b:4f:c0:b9:2c:3a:03:5e:24:35:9f:7d:d1:f7:ef:60:fa:
         d0:c5:6e:98:c4:62:3a:50:06:89:5d:f8:bc:0c:c3:53:53:19:
         7c:fe:5b:27:63:f9:2c:7e:83:94:ce:11:47:66:fd:24:57:c6:
         e9:f2:9b:3d:e3:14:b2:4d:7f:ed:81:e2:7b:78:bc:da:1e:b2:
         91:50:c4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:34 2025 by rpki-client