Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
File:                     1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json)
Hash identifier:          6VyxXfyG0rDpTwCIWPv9hPWii3OHDH1dYl/n7GmcloI=
Subject key identifier:   EB:84:8E:F1:F3:CA:2A:6D:66:0C:9D:EE:12:EC:2D:20:84:7F:ED:1B
Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B
Certificate issuer:       /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
Manifest number:          01D4
Signing time:             Fri 31 Jan 2025 02:18:12 +0000
Manifest this update:     Fri 31 Jan 2025 02:18:12 +0000
Manifest next update:     Fri 07 Feb 2025 02:18:12 +0000
Files and hashes:         1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: RjihQFCxgAVgi4dFzIi083wsq8BImiFwpQgC751tkQ4=)
                          2: 839EEF2C35F211ED97DF4D2EC4F9AE02.roa (hash: utbaFXvYsbMawkEsGIYiJOGznLub5CBtZ08YosxwrsQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
        Validity
            Not Before: Jan 31 02:18:12 2025 GMT
            Not After : Feb  7 02:18:12 2025 GMT
        Subject: CN=679c32e4-93cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:66:d9:51:b2:a3:44:01:33:a4:f6:39:74:
                    08:5a:70:d9:3e:ae:bc:ea:c5:33:99:3f:29:e7:51:
                    f1:05:0a:d7:52:f6:f9:af:5c:f4:13:08:55:08:01:
                    72:88:86:6c:9f:00:5f:10:66:89:b0:ab:44:14:2b:
                    ae:43:cb:71:72:27:48:eb:cf:02:a6:af:64:53:76:
                    14:c5:f4:49:a3:dd:53:1e:e1:fc:bc:cd:32:43:d9:
                    f2:0f:95:79:53:44:12:dc:0b:30:e6:2b:5f:9b:a7:
                    59:d5:f6:eb:b8:1e:3d:8f:b9:57:c7:7a:38:20:08:
                    9a:aa:c5:83:eb:3b:d8:7b:b0:74:01:81:0f:a9:4f:
                    0d:2e:42:b3:37:64:82:62:a3:27:3c:42:5b:9f:42:
                    3c:22:2c:8a:a6:ea:cd:51:1f:03:62:00:fd:2b:18:
                    13:0b:44:96:b7:9e:bd:29:c0:70:ef:36:98:4f:36:
                    30:97:d2:3c:4e:7b:ad:c2:ff:72:65:f7:91:59:09:
                    dc:95:7c:d7:2c:37:e8:c4:9f:63:67:d1:02:af:ab:
                    76:58:44:9e:aa:cf:91:7b:42:3c:d5:8d:04:6f:72:
                    84:d8:cc:54:7e:eb:0a:bc:01:4d:87:f3:34:c2:07:
                    22:81:13:ab:22:83:5f:4d:14:11:4d:84:8e:aa:b1:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:84:8E:F1:F3:CA:2A:6D:66:0C:9D:EE:12:EC:2D:20:84:7F:ED:1B
            X509v3 Authority Key Identifier:
                keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bc:f4:d5:25:40:49:cb:93:cc:2e:3a:cd:be:91:05:3a:42:
         89:23:c0:89:68:34:87:35:33:bf:07:f6:b1:3f:92:7b:cb:29:
         73:9c:f8:ae:27:d2:88:f7:94:61:95:df:a1:ce:95:5e:bc:20:
         0e:a9:5c:70:ef:31:b7:d1:92:85:f6:70:29:f5:ba:68:31:5a:
         d1:f2:83:31:13:eb:3f:b6:1f:af:61:05:7f:c7:a5:1c:fe:bd:
         d1:9a:88:ba:61:63:8f:c7:e7:46:71:7b:68:5f:25:1e:43:d0:
         31:62:fe:15:02:41:f7:4e:02:06:e1:d9:5a:4d:ab:85:3a:62:
         5f:15:c7:0e:16:c9:af:c6:fe:a4:71:97:50:25:18:d7:0d:9d:
         af:40:e9:a0:61:f6:4a:ba:0a:86:d1:74:11:5b:41:b2:56:22:
         29:2b:42:92:00:07:1a:1a:97:8c:1e:82:85:a8:c0:42:6c:c8:
         c3:e0:92:fc:53:4c:04:b5:30:7b:01:00:af:79:8e:38:0d:71:
         30:2e:74:35:13:ff:05:16:2a:92:d2:54:19:6b:66:d9:f0:72:
         c6:89:df:94:aa:9b:cc:0e:77:a0:12:51:e6:c4:ed:dd:90:03:
         99:50:95:7b:bb:6a:1f:22:81:aa:ca:64:98:ea:c3:bb:81:99:
         c4:ac:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:02 2025 by rpki-client