Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
File:                     xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json)
Hash identifier:          Cr/R/TQm2pfsDG4d++Gxw1KtxP/vGBSymPcWqVWHSYk=
Subject key identifier:   A7:5F:49:65:D8:13:3D:27:4F:1C:05:8F:13:12:1F:F1:C7:7F:66:4C
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
Manifest number:          0161
Signing time:             Fri 31 Jan 2025 03:30:37 +0000
Manifest this update:     Fri 31 Jan 2025 03:30:36 +0000
Manifest next update:     Fri 07 Feb 2025 03:30:36 +0000
Files and hashes:         1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: 5NkW6kcL3zaGChDcdsOtZYFT5azYwQGkfdKB6tnGcEs=)
                          2: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: Jo4WABUEWPRcQSHlp0OZS00fwB0a0r3f/UDtxFI4TE8=)
                          3: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: UkUpU1afkgtg1CQHu61ZJeRImk8QtltSVX5opIK6H/k=)
                          4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: c9KG9vpN1QmGvwjTf9PDbnl/EQ1PMVZ2QmsDIyegpZw=)
                          5: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: kzfyShpZyRgXv5qW19HVktsh3HfmhmaLBtleNFL05u8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Jan 31 03:30:36 2025 GMT
            Not After : Feb  7 03:30:36 2025 GMT
        Subject: CN=679c43dc-51da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0a:bd:f4:fb:8f:81:ff:df:cc:ff:60:38:2e:
                    7b:34:c0:35:e2:ea:a7:28:6d:90:3b:56:86:81:e9:
                    b6:b7:77:df:f1:8f:cd:77:ea:9d:fb:5b:ee:b7:41:
                    0d:36:03:fc:85:1d:2c:ff:ce:ab:b6:3d:2d:61:6b:
                    b7:1b:09:d6:a6:76:66:de:df:50:82:13:94:0f:82:
                    42:a7:ee:b0:42:4f:f3:cd:fb:01:d5:10:90:55:11:
                    99:86:a9:ff:48:bf:70:30:9f:8b:3e:ec:26:9d:d1:
                    e5:0b:d1:af:9e:b9:d6:f0:6c:45:73:af:0e:e0:fc:
                    c5:49:cd:17:7b:58:f4:0a:70:39:18:e8:ed:3a:c1:
                    e6:bf:f8:1d:e0:ad:65:ee:8a:4e:32:3f:b4:ca:b5:
                    9a:aa:6c:93:10:af:3a:5b:25:0d:cd:ee:41:61:91:
                    14:a1:11:9c:80:ac:43:68:b0:d2:25:e8:f2:be:de:
                    61:f5:d0:bf:0b:95:aa:b0:1a:53:a5:52:08:f7:9b:
                    2a:97:be:04:99:e1:97:67:dc:b7:2f:57:3a:8e:b0:
                    34:5f:b7:6e:80:c1:93:2c:0d:ca:43:5d:b9:22:4e:
                    63:dd:36:4a:40:50:68:61:8e:e6:8c:8b:2d:79:ae:
                    99:5a:c0:4d:16:e2:90:df:c7:a1:88:0b:8c:14:be:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:49:65:D8:13:3D:27:4F:1C:05:8F:13:12:1F:F1:C7:7F:66:4C
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:15:b7:34:80:88:c4:53:f8:b6:6f:e0:b2:f6:29:23:06:ee:
         e4:64:d5:78:f7:7b:85:67:ea:6e:05:d1:6e:5b:2a:9d:0e:62:
         e1:4b:8c:ec:7b:db:90:b2:e5:8f:cd:7f:61:c5:09:0a:b1:36:
         25:04:29:79:e6:d1:66:dd:66:e4:a2:a6:81:2c:21:75:08:e9:
         42:d2:73:ce:f1:f9:8b:a4:c8:7f:f5:9a:c0:ba:b6:59:6f:80:
         84:68:63:5c:90:17:98:9b:2b:ce:93:01:19:34:d1:af:98:1a:
         a4:73:a5:1f:fc:43:10:6c:30:c4:31:a5:6d:00:64:1b:53:20:
         71:c7:0c:8b:eb:cf:ed:3a:86:80:93:4d:18:73:8a:5c:1a:c6:
         a7:48:cf:dd:37:5f:5f:70:20:eb:81:de:11:f1:e8:35:04:88:
         b0:3d:2d:98:fa:d2:8d:fe:78:26:cf:c8:d1:1e:c6:a0:12:b7:
         b6:55:c0:ea:b8:75:19:be:8c:a9:b9:02:f0:fa:ec:27:94:45:
         7d:0d:e4:db:54:08:71:87:ef:e0:aa:25:93:b1:69:8e:9d:b4:
         63:87:e4:1e:78:4f:90:69:6e:8c:dc:5f:d6:db:2d:72:c7:65:
         4a:f2:a2:de:1e:f7:23:6e:69:d9:8c:8d:64:02:dd:b0:7b:1e:
         1a:ba:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:50:36 2025 by rpki-client