Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
File:                     6osEPoaPdVc7zEVArUlUEC3JIrg.mft (raw, json)
Hash identifier:          Dw2poN+enPUgeHKouP+vB2rJyYgYncpJCxQ0+lPlheQ=
Subject key identifier:   14:2E:BD:06:50:E0:70:3D:6B:B8:CB:D7:EF:1D:B8:5C:E4:57:BE:B1
Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8
Certificate issuer:       /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
Manifest number:          8F
Signing time:             Fri 31 Jan 2025 05:34:38 +0000
Manifest this update:     Fri 31 Jan 2025 05:34:37 +0000
Manifest next update:     Fri 07 Feb 2025 05:34:37 +0000
Files and hashes:         1: 6osEPoaPdVc7zEVArUlUEC3JIrg.crl (hash: LxADGIKoRDPDSLXGvcOTjLkwArpzlUV8AfwK0HcEK/g=)
                          2: 6EF22D0A07C411EF8A38A486C4F9AE02.roa (hash: Z/bRh5gfICRhTgZIBmGvmKVx5q7fvhoDOyqb8F4Xn3w=)
                          3: 4F038F1007C511EFB3AD2E14C4F9AE02.roa (hash: YLqUw8RXSjFSw9i6iZFHkMU1fvDuVln4F0j/za3GPYo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
        Validity
            Not Before: Jan 31 05:34:37 2025 GMT
            Not After : Feb  7 05:34:37 2025 GMT
        Subject: CN=679c60ee-697a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:c8:9f:3f:59:d1:58:63:36:f2:68:6d:4f:
                    e7:43:50:d2:3f:70:06:55:36:d7:b1:67:f6:83:cc:
                    22:a5:32:a8:55:0b:1d:22:f5:62:e2:06:35:fb:8c:
                    ee:eb:fc:1a:8d:49:9d:5d:20:25:bb:c3:ed:b2:00:
                    a6:7d:c6:89:c6:de:aa:1e:9b:1d:ba:70:4d:98:15:
                    33:e4:74:69:54:35:63:1a:aa:1a:c5:40:5a:be:74:
                    a6:a7:4d:4d:dc:ab:11:49:b9:fa:56:3e:df:6c:15:
                    fd:86:e6:35:52:45:37:98:3a:75:16:90:a8:4f:93:
                    d0:43:8b:c5:b5:89:44:44:d7:04:37:e8:4d:45:63:
                    fe:7a:99:d1:c6:20:24:b9:fa:70:60:7b:55:49:df:
                    26:e4:1e:6c:68:ae:f2:87:05:0a:fa:ac:e9:70:06:
                    50:23:6c:ef:9b:1c:7c:f2:22:2b:77:b8:89:92:76:
                    af:94:a8:fe:ee:c5:2b:b6:8a:3d:31:6d:c3:74:7d:
                    eb:c4:3e:cb:84:51:1b:0b:f5:95:37:51:16:6a:ab:
                    7f:92:34:49:c7:8b:bf:d3:a0:2e:ad:0d:fc:51:8c:
                    46:4f:8c:67:aa:ea:f5:a9:c2:2e:b1:a1:f9:33:82:
                    1c:8d:35:6f:b2:12:a5:d2:8b:c5:0a:62:0f:27:0a:
                    24:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2E:BD:06:50:E0:70:3D:6B:B8:CB:D7:EF:1D:B8:5C:E4:57:BE:B1
            X509v3 Authority Key Identifier:
                keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:3e:0b:52:9f:fb:35:92:34:c8:15:b1:e9:66:e0:a6:5d:
         e8:06:57:74:f1:0b:2b:f1:6c:03:14:c3:f8:be:b2:bc:1b:29:
         01:87:3a:8b:93:ea:a8:94:ae:92:a1:0d:6e:41:33:23:62:66:
         d9:16:06:dd:1c:85:37:0d:11:39:ec:81:b3:21:42:09:c6:b3:
         28:b9:82:41:d1:5e:b0:7d:c8:ca:fd:99:c3:74:d9:d6:3a:78:
         2c:38:63:8a:f1:64:ce:a7:81:87:e8:b7:80:c8:88:50:b9:22:
         95:21:ab:84:27:46:7c:97:60:32:31:f3:55:72:e4:99:28:5f:
         5e:44:4e:48:36:9d:0d:68:ab:59:d4:5e:07:95:75:ec:14:1d:
         ab:3f:d0:6c:80:c2:8d:4a:66:b2:4e:ad:41:59:b3:62:36:88:
         03:93:cd:51:62:b2:4a:40:eb:10:8c:7e:99:fd:1c:2e:47:43:
         c4:a5:2b:c7:33:a0:b0:d5:71:d4:f2:8f:95:4e:13:ea:a1:93:
         d4:aa:0e:34:67:f3:77:49:84:28:cf:2d:6b:8f:ed:ee:11:9d:
         fe:94:a6:4a:f8:28:5c:19:92:43:e0:8f:e6:d1:af:48:10:65:
         39:63:66:db:26:40:5c:f6:18:52:a4:df:3d:1b:dc:d1:e7:af:
         8f:b7:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:24 2025 by rpki-client