Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File:                     xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier:          HAXtlZ8f5nAv5JD7EP/LxToevIiSQjk3loErHr3Hgmk=
Subject key identifier:   00:FC:9B:D4:FD:EB:60:86:6D:74:5B:B2:A2:3C:E3:81:64:A9:D8:0B
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer:       /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial:       1C7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number:          1C45
Signing time:             Fri 31 Jan 2025 16:11:55 +0000
Manifest this update:     Fri 31 Jan 2025 16:11:55 +0000
Manifest next update:     Fri 07 Feb 2025 16:11:55 +0000
Files and hashes:         1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: x8sK7nd/b7fCEL/sZBWBHmzhITwkYyOgOJa4U7ao+ME=)
                          2: 846D5AAA9F8A11ECB8E03812C4F9AE02.roa (hash: tHmXSemPBAEugdq+1SpWTBtqCV+h0O0Beyp/Z1zrfnk=)
                          3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: Lk2qEHSCNbYOjvU+PcwacX3VW6CH6qyKSanfWEzTYmU=)
                          4: D1A2301C98DD11EAB0763B4BC4F9AE02.roa (hash: qdKyGX4xxRevTgRyuUDVCfnZN3FgRwIiItUlquHsQOw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7293 (0x1c7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
        Validity
            Not Before: Jan 31 16:11:55 2025 GMT
            Not After : Feb  7 16:11:55 2025 GMT
        Subject: CN=679cf64b-5ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:66:42:57:e2:7a:52:86:55:72:a7:57:01:
                    09:99:1e:65:fb:fb:e3:dc:a5:d0:08:5f:03:ee:06:
                    cc:d2:7d:fb:3f:50:c1:91:84:e0:c6:10:1a:b3:ff:
                    1f:20:22:85:08:c7:24:2e:bc:10:33:fd:75:5f:86:
                    fe:46:9c:90:81:e5:f3:8a:89:16:c1:2b:73:45:b1:
                    1e:cb:19:de:fa:44:ee:02:cd:32:95:a5:f2:6b:80:
                    92:fd:84:7c:a9:24:67:6a:9d:0f:be:08:bd:e2:27:
                    bb:81:2e:ae:a8:82:74:4f:3d:5c:18:d8:60:2f:9e:
                    1b:d5:aa:30:32:46:e7:05:51:a0:f7:72:0a:16:68:
                    68:40:23:2f:a4:d5:56:5c:e6:ec:50:c2:cc:e3:b3:
                    b5:31:c8:4b:fd:91:73:d3:1e:0b:13:00:12:dc:e3:
                    1b:85:58:14:99:d0:a2:a8:09:8f:ce:fa:3c:0d:3f:
                    58:71:b2:e8:04:30:c0:ec:21:74:0f:45:ee:cc:bb:
                    fc:cb:b9:1d:e9:2d:cb:d9:b1:1d:56:38:a5:1c:79:
                    69:bf:72:68:18:6a:6a:aa:1f:be:da:4d:43:3d:b2:
                    a4:41:6a:b3:50:48:92:96:4c:c5:a9:c8:a6:eb:08:
                    28:8e:56:80:32:4d:88:e1:f6:97:18:02:6b:95:9d:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:9B:D4:FD:EB:60:86:6D:74:5B:B2:A2:3C:E3:81:64:A9:D8:0B
            X509v3 Authority Key Identifier:
                keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:93:b6:85:af:11:87:77:2a:af:2e:78:48:c5:37:ff:03:
         24:8f:10:8a:1d:5f:b5:14:d1:b0:d9:7a:3d:84:96:f3:7c:23:
         31:0a:d6:60:d1:24:cc:98:26:0e:88:b7:57:8f:63:79:25:f8:
         d4:72:ac:83:6b:f5:96:cf:f5:bd:35:f2:a7:e0:79:a4:38:00:
         97:b1:74:a4:97:77:91:2a:bf:6c:45:f7:cf:c8:e2:07:09:2e:
         e8:0e:4e:a8:67:bd:33:50:db:84:db:0b:9a:80:05:15:a2:88:
         db:53:f6:0c:99:0d:1f:6d:db:f5:89:93:56:df:ab:9c:df:b5:
         9f:6b:ee:9b:d3:68:2f:c2:bf:94:2c:7a:03:53:f4:ac:fc:9f:
         93:bc:e4:50:be:b6:f9:19:c2:7a:d1:5c:d0:54:c5:89:59:6a:
         98:4d:23:a0:33:eb:af:e4:fc:0f:5e:da:c6:a6:f7:e0:ae:3e:
         a5:d7:13:d2:d7:2d:08:91:0e:4f:05:e3:ac:7d:83:5e:b2:8d:
         84:74:40:e6:6c:15:a6:ae:54:d3:a6:03:0c:63:da:41:87:a1:
         69:ff:c3:91:c1:55:45:ab:d2:ea:2a:45:9f:c0:06:7c:56:4d:
         18:c1:ab:ca:63:8c:3b:75:15:e6:34:89:9d:c9:e7:3e:ed:b2:
         4a:92:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:02 2025 by rpki-client