Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
File:                     S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json)
Hash identifier:          EZmvwQYHUgzLGn5Du0RSkO7f+r/PmKv0mSGxTWWqSMU=
Subject key identifier:   BD:6C:12:F4:4A:B1:04:3C:2E:87:5D:58:C7:A0:ED:C5:D2:F1:38:D2
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Certificate issuer:       /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
Manifest number:          016B
Signing time:             Fri 31 Jan 2025 03:10:22 +0000
Manifest this update:     Fri 31 Jan 2025 03:10:21 +0000
Manifest next update:     Fri 07 Feb 2025 03:10:21 +0000
Files and hashes:         1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: fhZKTVqpVCN/4Hec3tMGgxKktPPCwOYZWgtjhmxJ1so=)
                          2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: ng/eOnYi4Xdy1o4WQsnieJhysvyMRUBiYik4ZaLFfxM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
        Validity
            Not Before: Jan 31 03:10:21 2025 GMT
            Not After : Feb  7 03:10:21 2025 GMT
        Subject: CN=679c3f1e-7cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:9e:23:5a:2b:c5:f9:2c:81:d8:57:71:b4:
                    d5:3a:a5:a5:9c:f2:53:fd:94:3f:55:32:78:17:90:
                    8a:66:5a:20:ff:05:c1:19:c8:59:6a:af:8b:93:50:
                    5d:59:78:8b:24:46:52:3f:39:07:b6:c7:00:81:7e:
                    55:8d:9d:3a:2f:f2:0f:dd:d8:27:86:29:d9:ed:e3:
                    08:a4:6d:28:7a:fa:36:d8:54:b4:72:21:48:ef:df:
                    da:68:0b:9d:33:2c:c6:45:4d:53:70:44:21:42:64:
                    5e:db:ec:05:fa:30:17:d3:d5:90:e7:96:18:f5:b2:
                    43:af:e6:ac:5c:4b:c8:66:f7:9e:73:78:d4:82:b7:
                    59:80:64:5f:dc:61:ee:69:fe:c1:23:94:12:9b:02:
                    4e:10:cb:70:44:77:8d:5c:d8:21:99:14:7a:f1:c1:
                    aa:5a:8c:b6:21:20:d1:78:9f:ce:20:c8:62:c1:24:
                    3c:d0:b3:43:6c:74:ba:cd:86:bc:3a:ea:a7:11:2c:
                    fe:0c:86:60:5d:1a:71:47:cd:d6:f9:78:12:1f:1f:
                    07:81:82:95:c8:22:0d:8c:10:36:02:3f:42:e4:96:
                    46:1f:21:f6:3e:3f:6d:be:31:2a:ee:49:18:94:1d:
                    c3:07:a8:57:54:f0:25:22:c7:10:b8:58:07:87:0a:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:12:F4:4A:B1:04:3C:2E:87:5D:58:C7:A0:ED:C5:D2:F1:38:D2
            X509v3 Authority Key Identifier:
                keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6a:43:9c:e2:f8:9f:91:a4:ab:53:db:3d:9e:88:05:18:7d:
         7f:d1:aa:71:9b:14:1d:9a:b3:77:04:6d:1d:18:47:63:86:1d:
         54:bc:43:92:12:40:74:ef:40:40:df:54:8e:51:df:b6:4a:ef:
         94:62:cc:97:85:5b:2e:17:77:18:94:ed:50:60:ea:3f:9f:03:
         4c:f8:ff:51:04:3c:b9:1f:5d:fc:7c:11:32:e3:bd:3d:8c:74:
         a4:f6:18:9c:9d:c3:5a:a9:72:61:9c:1d:f5:f8:4d:0e:f7:eb:
         d3:6a:47:79:ba:19:fe:b9:b2:83:f3:12:90:d1:c0:b0:2e:e9:
         0c:e1:8d:d2:17:08:b5:38:c7:63:b0:fb:ec:a3:07:f5:38:27:
         f3:67:2e:d1:69:ce:7a:9b:2d:1a:fc:20:c0:d3:02:2a:93:68:
         21:16:54:27:d0:f5:b8:16:b9:cb:af:1c:ce:b3:ab:8b:38:f7:
         29:6d:34:6f:3f:87:37:ad:60:05:c9:42:2c:5b:44:b8:e7:4c:
         0d:e3:f8:78:e1:4c:81:e2:a5:74:71:ec:dc:3d:80:b2:68:24:
         ce:7a:32:6e:22:e3:3b:3a:19:f1:dd:76:4c:37:3a:21:76:c4:
         fe:d3:9f:a2:d4:7f:e0:27:01:74:d2:64:10:a0:99:cc:c8:b1:
         65:05:be:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:56 2025 by rpki-client