Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
File:                     capYzfG2vXwm5hp1GKTQrSyfGhQ.mft (raw, json)
Hash identifier:          ychGdoV5PqB7iNFiVg7d/hInJCjfkvQrbn+kVXwGYFs=
Subject key identifier:   B5:27:F2:1F:22:66:9F:F4:77:32:4B:94:95:A2:96:FE:15:11:F7:90
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Certificate issuer:       /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial:       0876
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
Manifest number:          084C
Signing time:             Thu 30 Jan 2025 20:50:36 +0000
Manifest this update:     Thu 30 Jan 2025 20:50:35 +0000
Manifest next update:     Thu 06 Feb 2025 20:50:35 +0000
Files and hashes:         1: capYzfG2vXwm5hp1GKTQrSyfGhQ.crl (hash: EsZgddRrAnMF7RyZnpHAVKWg8kAklOcweD6FPGideWw=)
                          2: 8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa (hash: ulEoG77MrSiwSYhpxeW0HQs0UzURtgxGQwYkMWVPA0Q=)
                          3: 8BA9C1CAC4FB11EAAEAE7C1DC4F9AE02.roa (hash: fZLciG+K7KBAB8NViLLV71yANJqxZTohTScAC7z2iIU=)
                          4: 90606AD670AA11ED8DAE4C5AC4F9AE02.roa (hash: K/SJXrHKSaQpDMVLZJrukFZmfGOIIuOIUDxauUWHXXQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166 (0x876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
        Validity
            Not Before: Jan 30 20:50:35 2025 GMT
            Not After : Feb  6 20:50:35 2025 GMT
        Subject: CN=679be61c-3731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8f:14:e1:91:09:52:f9:29:fc:88:84:30:97:
                    87:9c:60:d8:73:99:22:7a:2b:09:d8:e7:71:35:bb:
                    99:3b:c5:3e:1a:1a:11:83:f5:62:ea:65:8e:02:84:
                    91:5f:f1:88:38:90:dc:e3:aa:20:a9:13:34:1e:35:
                    53:de:00:84:3d:07:f6:09:36:5c:f7:e7:fa:38:bf:
                    0b:f5:cb:5c:bf:fd:7e:86:67:35:44:0e:92:e6:53:
                    9c:e3:a5:a7:99:d2:ff:ac:3d:c3:2a:e5:74:67:a8:
                    35:e4:28:72:7d:6a:1f:d7:aa:ef:33:64:4d:4f:ee:
                    44:07:7c:ee:20:56:47:78:20:eb:e0:87:89:1f:5b:
                    87:48:07:24:7f:e4:12:c9:ce:13:33:f5:4d:83:84:
                    d7:18:76:40:2c:04:43:22:90:16:2c:60:50:53:fc:
                    58:b5:d0:a5:b4:b6:27:67:3e:f5:08:9f:df:4e:6c:
                    64:f4:a3:7c:6e:08:1a:0c:9b:6e:98:c6:d6:b1:f9:
                    13:74:ea:ca:da:65:e2:e1:7e:28:a8:ed:13:21:08:
                    d0:3d:08:2f:69:46:eb:0f:5a:b0:4c:9a:b9:f3:35:
                    2a:71:a3:2c:54:0a:58:b3:63:86:64:44:88:7c:e8:
                    b0:42:c5:11:66:58:9f:32:63:c4:f6:c4:b1:d8:92:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:27:F2:1F:22:66:9F:F4:77:32:4B:94:95:A2:96:FE:15:11:F7:90
            X509v3 Authority Key Identifier:
                keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f0:c3:6e:b6:b6:6e:ce:69:9e:fb:6f:30:db:0d:dd:49:69:
         cc:ed:85:3d:75:e3:ac:d2:f8:be:a2:2c:df:37:dd:0a:bc:78:
         1c:d6:5a:ef:1b:7f:3e:86:5c:50:94:38:58:16:fe:19:36:10:
         30:d5:3c:37:6d:f1:aa:55:60:2f:6d:ce:55:31:41:c7:bc:55:
         e1:02:07:5e:7b:c9:bc:28:e1:f4:95:20:fd:df:ec:d6:e0:c5:
         60:25:5f:8d:39:7c:39:b1:2b:ed:36:92:97:93:6a:a4:ed:a1:
         e7:c9:39:ea:53:dd:ea:34:32:80:cf:38:35:d6:2c:d3:ef:5e:
         33:b2:48:41:ce:f8:14:4a:42:21:b3:f4:3d:f5:42:58:8a:59:
         ea:4f:e2:15:34:f1:7e:16:66:9f:9a:53:a0:f2:0c:c4:b3:2d:
         c2:7f:8e:42:2b:a8:ce:b4:2c:d5:31:05:16:70:22:19:18:f7:
         8d:94:a4:4d:c2:57:c5:29:91:fd:33:5a:72:ca:70:e6:93:9b:
         9b:cb:4c:41:66:43:7e:2e:a3:41:1b:ec:68:8b:d6:ce:a5:39:
         78:7d:67:61:f8:be:94:a1:84:e8:cb:ad:18:e8:47:b1:31:37:
         5a:a7:29:4d:17:7f:b1:ec:60:5b:ad:64:fb:50:81:b0:7a:e1:
         cb:5c:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:16:39 2025 by rpki-client