Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft
File:                     lYpO2dfWT6yHvRbsijZXHhovUIo.mft (raw, json)
Hash identifier:          f8BpJwAN75gqSjcQqNOsnY3Alj7FaUUVnsGZ2/SWbSI=
Subject key identifier:   64:A4:1E:51:EF:0C:E3:C6:1D:E9:BB:19:30:73:96:36:DA:60:84:C2
Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A
Certificate issuer:       /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A
Certificate serial:       0C6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft
Manifest number:          0C59
Signing time:             Fri 31 Jan 2025 18:14:44 +0000
Manifest this update:     Fri 31 Jan 2025 18:14:43 +0000
Manifest next update:     Fri 07 Feb 2025 18:14:43 +0000
Files and hashes:         1: lYpO2dfWT6yHvRbsijZXHhovUIo.crl (hash: onuAHtwcs1MqJsocGT1MaXwPHVY/lzfigIYXFzwT+aA=)
                          2: 6385C93829BF11EEBB384B81C4F9AE02.roa (hash: 26n1t8jhpb4x50KXfNX17XYOsoU6AbrXOKXJB+8j6Vw=)
                          3: D060A788062711ED98FC531BC4F9AE02.roa (hash: q59NmHJMCVC3dpOE6B51oUif6kX0C+mT6Y8FTTLEHHM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A
        Validity
            Not Before: Jan 31 18:14:43 2025 GMT
            Not After : Feb  7 18:14:43 2025 GMT
        Subject: CN=679d1314-a5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:14:ed:1f:63:d3:87:59:15:db:93:e0:7f:
                    8f:a7:8a:94:2c:61:24:bf:e5:6a:0c:18:2e:c5:3d:
                    17:76:89:ca:9d:01:54:c1:1f:cd:43:22:78:94:bd:
                    6b:47:f2:87:8d:8a:9b:27:69:66:31:11:d8:86:29:
                    3e:3d:e2:d9:b5:e7:e8:25:b7:41:69:29:db:31:18:
                    86:ea:fd:b5:2e:70:0c:3d:75:f1:7b:a0:c7:b8:c7:
                    c0:b3:49:53:50:30:5e:a2:35:46:e4:64:94:00:4e:
                    f6:2c:c8:46:88:91:c1:73:7e:dd:30:4e:24:a3:5d:
                    0a:34:13:c7:fb:12:a1:7e:ce:38:24:58:1a:af:8c:
                    06:87:3c:e6:10:68:6c:22:bd:c3:59:06:bf:71:bf:
                    f2:db:06:d5:8c:e5:e2:b5:d5:1c:eb:f8:3a:eb:e0:
                    47:a6:a0:68:21:6a:d4:ab:a4:15:8e:2d:34:d6:75:
                    26:fa:b6:f2:6f:5d:e5:0b:5d:16:5d:7c:78:54:4a:
                    01:b0:35:fd:3e:7e:89:d2:4c:e4:83:a2:ba:d0:55:
                    d3:e4:9a:c4:6d:f8:4d:6c:f9:72:10:f4:fb:73:93:
                    ea:ce:20:93:4b:fa:de:a0:6e:7a:7b:67:ec:6b:f4:
                    f4:c4:33:0d:74:d0:d0:42:aa:d2:6d:37:2e:e0:e2:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A4:1E:51:EF:0C:E3:C6:1D:E9:BB:19:30:73:96:36:DA:60:84:C2
            X509v3 Authority Key Identifier:
                keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:fc:c2:ef:18:8c:55:2f:69:ef:9d:2d:93:69:0d:6c:e1:a7:
         9f:e9:1d:3b:34:53:7c:31:0c:9e:c2:63:50:22:90:f1:1e:7e:
         09:9b:69:13:9c:4f:ce:c0:43:1d:56:5b:cf:08:41:57:c6:ae:
         70:32:13:e1:be:96:06:82:bc:91:c0:61:08:38:ea:b8:8f:22:
         7a:ee:4e:6f:8d:09:b3:46:1c:f4:57:5c:ee:f7:5d:75:b4:0a:
         26:e5:d2:f7:e2:9f:e4:9f:ea:de:8a:08:db:3b:00:e7:84:62:
         fa:64:32:87:db:54:74:39:47:63:15:93:fa:c6:59:27:51:8c:
         07:5d:01:2b:b2:0f:9b:73:25:f1:22:24:43:85:2b:ed:c2:75:
         dc:0a:d2:18:8b:73:66:74:ff:7f:92:e0:1f:51:72:c3:eb:9e:
         a7:d3:7e:1f:39:c9:13:4d:6a:23:84:51:47:cf:90:38:ad:7c:
         61:4e:2c:70:e9:db:db:d2:2a:f9:41:f3:25:29:10:7f:3e:d9:
         b1:bb:8f:14:08:cd:74:33:22:d3:68:00:03:28:98:82:67:2e:
         0a:df:2c:b7:b1:ed:8c:cc:85:d4:23:17:b9:74:88:76:15:86:
         a9:d8:e8:54:ae:b1:cc:04:7b:30:83:f5:63:46:a2:da:41:88:
         96:0f:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:48 2025 by rpki-client