Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
File:                     VKpPIROg0aG37lUSvq5TcextpCE.mft (raw, json)
Hash identifier:          jG9inBWsAxWLuYLrcwFD0B4IB3WrHHOHxBX8J9XrQSY=
Subject key identifier:   3B:93:9F:82:37:68:95:82:98:D1:57:99:16:AE:C7:C2:10:21:D7:0E
Authority key identifier: 54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
Certificate issuer:       /CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
Manifest number:          97
Signing time:             Fri 31 Jan 2025 05:31:54 +0000
Manifest this update:     Fri 31 Jan 2025 05:31:53 +0000
Manifest next update:     Fri 07 Feb 2025 05:31:53 +0000
Files and hashes:         1: VKpPIROg0aG37lUSvq5TcextpCE.crl (hash: XqS5rhZCa8tAu3QsGV6k77TT/ofKKivr0SbY3F+F7WE=)
                          2: E135D94C04A511EF84B5D783C4F9AE02.roa (hash: qeKpax6tWFd6dXRCCgHpRrEIFHUWf08cbXJ0Npcf3Z0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
        Validity
            Not Before: Jan 31 05:31:53 2025 GMT
            Not After : Feb  7 05:31:53 2025 GMT
        Subject: CN=679c604a-1d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:db:4f:c0:64:8e:31:86:9b:c8:7c:37:d2:
                    b3:2a:de:bf:a2:28:ac:3a:0d:5d:3e:fd:5f:75:14:
                    dc:74:70:29:82:b7:df:05:a4:48:d2:5a:cf:c6:17:
                    0a:fc:6f:00:22:f7:c0:2b:1f:4b:de:2a:12:70:84:
                    62:8b:06:80:fc:6a:31:eb:0d:83:ef:8a:91:f5:c4:
                    f9:45:89:31:25:a6:af:59:64:a8:70:2d:e3:ef:6f:
                    3f:13:76:d1:1a:53:10:ee:95:44:d4:8f:ca:74:34:
                    2c:c9:b1:1a:5f:e2:47:fa:95:67:55:b9:84:c4:58:
                    ba:e3:61:e8:a3:3d:88:20:ff:f9:b6:1d:bd:fc:a7:
                    8d:e7:c5:cd:c1:e8:90:67:85:87:6e:ca:85:0d:65:
                    4d:37:53:77:9a:6e:d2:d1:40:ce:8e:c7:a1:f3:78:
                    30:fd:33:d6:1e:bc:36:41:fd:98:df:9f:ff:d0:c7:
                    0a:b4:f1:d4:e5:80:38:41:09:12:6d:1f:56:d7:c2:
                    5b:35:c0:4d:4f:30:54:d4:5f:0e:64:a6:0c:03:68:
                    23:ec:c6:56:29:7a:c1:ca:21:b9:ec:56:22:2d:7b:
                    53:cd:a5:90:35:8e:2b:6c:06:99:f2:4f:0d:fe:34:
                    65:ec:e5:34:0e:59:9a:3e:6a:8f:48:7d:e0:71:2f:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:93:9F:82:37:68:95:82:98:D1:57:99:16:AE:C7:C2:10:21:D7:0E
            X509v3 Authority Key Identifier:
                keyid:54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:87:03:70:0e:7a:0e:1b:37:ab:c5:e1:47:29:22:06:82:5a:
         b8:9e:ae:46:cf:3b:96:39:a4:a1:1b:0e:d3:ae:95:75:f6:e9:
         bd:50:c0:05:20:aa:b0:bf:cf:71:e7:48:e3:21:22:c3:fb:f6:
         7d:92:49:9b:97:f0:9a:92:8d:47:d9:48:ff:e9:ca:b0:8b:51:
         22:ef:f9:e1:d9:39:53:11:8b:94:00:87:aa:ea:39:68:1d:5c:
         13:53:14:74:a8:86:f8:f0:60:0e:05:7c:7d:ca:f5:de:a0:75:
         5d:33:2e:ee:0e:f0:92:07:ec:c9:47:69:fb:ae:ca:cd:9a:46:
         09:ec:a2:3c:ab:4f:d1:e1:1b:45:b9:c4:ee:fb:72:61:a4:f5:
         ac:11:72:60:b4:b8:d1:8d:f3:77:12:89:d4:5b:95:2b:0f:00:
         09:96:4d:db:4e:56:79:38:6c:ba:d6:48:72:9e:0b:d4:b4:69:
         ea:cb:fd:0c:07:58:17:0f:3b:75:6f:1c:0f:ac:50:dd:25:60:
         73:5f:e4:63:5f:2b:e8:03:38:19:19:62:27:21:dd:57:1c:cc:
         19:86:11:84:f6:e2:07:17:6e:ea:92:a7:01:00:1b:01:ae:40:
         f1:c2:5e:c5:52:18:7b:02:f2:c2:6c:d7:3a:b7:43:17:26:eb:
         1a:96:45:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:14 2025 by rpki-client