Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
File:                     g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json)
Hash identifier:          nkDcFegiU8LunZjV5qvxLVwAMX2d5uYQQWHP1Jk76PU=
Subject key identifier:   77:77:4E:E3:C3:83:5A:35:AB:F4:EA:81:E7:5B:5D:B7:E3:61:C0:C5
Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
Certificate issuer:       /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Certificate serial:       0E12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
Manifest number:          0E0C
Signing time:             Fri 31 Jan 2025 17:47:48 +0000
Manifest this update:     Fri 31 Jan 2025 17:47:47 +0000
Manifest next update:     Fri 07 Feb 2025 17:47:47 +0000
Files and hashes:         1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: QAWVbQ6j0CaUFIU6kEH36bzHMcPqkLJ8npBTewkNwQU=)
                          2: 54E64EE89EAE11E9AF631F7DC4F9AE02.roa (hash: te7ZL6Agw1ZkmX73jXqU7VyXLTyhkC8WpICIHQQUpj8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3602 (0xe12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
        Validity
            Not Before: Jan 31 17:47:47 2025 GMT
            Not After : Feb  7 17:47:47 2025 GMT
        Subject: CN=679d0cc4-04b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:4b:0a:55:1a:c9:7b:92:d5:7f:cc:5c:0d:
                    8b:36:51:00:6c:1a:1a:6e:2d:e3:84:5f:86:18:27:
                    45:7e:d5:a3:a2:b9:ae:a8:ca:12:90:63:13:d2:05:
                    a6:73:ee:47:cc:49:64:3c:d2:eb:5c:7e:90:3c:63:
                    18:fa:68:4d:94:23:24:6c:c5:c1:c6:1d:b1:ac:cd:
                    b6:5d:99:d6:f0:ed:b1:b0:9c:a9:80:e2:27:89:47:
                    10:9e:78:59:0e:65:46:c5:10:56:fb:f1:8d:8d:e1:
                    31:44:87:2b:d1:b0:13:01:3d:9c:3b:fe:30:84:de:
                    c5:0f:eb:61:5c:ed:cd:dd:93:73:99:cc:ec:34:ed:
                    fb:72:a6:5d:e8:d6:a3:c4:7b:3b:c6:4d:c1:c0:9f:
                    d8:03:42:e5:5d:b9:db:b0:3a:1f:1a:5a:2c:a6:20:
                    ed:49:a8:6e:22:46:4f:d7:e9:9f:33:fa:88:86:2c:
                    15:2c:7b:46:16:2a:84:74:1c:1e:78:93:e5:45:d6:
                    cf:cf:83:32:27:24:cf:37:47:00:64:9c:f6:48:77:
                    ed:5c:bb:32:c5:38:c8:e2:4f:d2:75:b3:34:16:4e:
                    eb:29:1b:fb:db:a0:75:b8:e2:39:87:b2:12:7f:5a:
                    95:56:62:9d:a8:97:80:3e:4a:79:d1:8f:ad:2d:a3:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:77:4E:E3:C3:83:5A:35:AB:F4:EA:81:E7:5B:5D:B7:E3:61:C0:C5
            X509v3 Authority Key Identifier:
                keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:48:cc:d6:26:b1:b7:d9:4b:23:b3:5d:47:63:d2:87:dc:
         39:34:26:89:cf:71:00:85:d5:98:27:19:8e:61:22:32:3a:e8:
         50:01:5e:51:00:fc:3a:05:46:ce:12:f0:e6:e0:7d:ea:37:1c:
         3b:cf:ec:7c:38:db:71:1e:88:db:50:b2:0b:8b:ad:6d:b2:49:
         f8:84:1d:d7:09:d0:3c:a9:46:dd:3a:e3:6d:d6:1c:fb:e1:92:
         8e:0b:59:48:9b:73:22:6d:7c:7c:40:ae:06:e2:0c:30:30:ad:
         fe:68:f8:73:e7:32:d0:3e:b6:35:d2:6f:0f:6f:f3:b5:40:b9:
         d8:af:01:82:b3:1e:1d:ee:56:c2:ed:63:0d:3b:ca:52:b5:69:
         1b:cd:d1:c7:71:cb:29:f1:95:3e:b2:95:f8:67:32:cd:4d:9c:
         a1:ff:be:a3:52:c6:ce:f0:b1:09:d5:59:b8:6b:60:1e:7c:bb:
         74:eb:b9:3b:c5:6e:c6:02:74:96:02:6e:a2:57:1f:64:10:40:
         b9:ae:b6:96:27:63:c2:57:f8:c4:5b:8b:bf:a0:80:ee:25:f0:
         7a:c0:2b:95:0c:5f:55:00:49:80:96:ba:92:1a:61:18:90:b0:
         9e:db:a0:c2:f6:19:3f:d4:61:0e:4b:3c:a1:d0:56:f3:47:a4:
         d1:da:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:41 2025 by rpki-client