Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
File:                     H7TDxXlvFLOd9R77qdra_Vzr0Js.mft (raw, json)
Hash identifier:          gEAPKRCv2hLILX0YHe4PWesv7L+vJk/jKkN6Pb8AGgg=
Subject key identifier:   4F:ED:38:14:E1:1E:2C:F3:3F:80:99:75:CE:A2:23:14:C3:E0:86:24
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Certificate issuer:       /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial:       0562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
Manifest number:          0552
Signing time:             Thu 30 Jan 2025 23:27:49 +0000
Manifest this update:     Thu 30 Jan 2025 23:27:48 +0000
Manifest next update:     Thu 06 Feb 2025 23:27:48 +0000
Files and hashes:         1: H7TDxXlvFLOd9R77qdra_Vzr0Js.crl (hash: p8vd3UkF8Rhk4Gq7gP30RB6dUnv9hu4wmmOwncGXY7Y=)
                          2: 8DA93CBEBDDD11EFB1946851C4F9AE02.roa (hash: 0+1YoEpfMajvg53SL4gOebhqOGyRHlx7OSHPjEcp7CQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
        Validity
            Not Before: Jan 30 23:27:48 2025 GMT
            Not After : Feb  6 23:27:48 2025 GMT
        Subject: CN=679c0af5-3259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:09:53:ac:44:cd:a6:04:40:c7:bf:b5:b2:0c:
                    05:93:5f:6d:3f:c6:da:e2:70:29:12:d1:57:e2:8f:
                    10:7b:25:c2:50:9e:8a:17:ba:e6:88:11:ef:99:50:
                    0d:b1:00:7d:6f:61:e0:49:3e:23:18:ed:82:14:62:
                    74:53:3b:40:7f:d1:61:5c:09:73:bc:5c:3b:1b:7f:
                    68:79:e1:fe:18:22:92:69:54:fa:26:55:64:1a:60:
                    f4:ac:93:9f:07:21:8a:a9:82:c2:37:cc:c3:1b:12:
                    2c:1a:f4:2d:55:6d:82:d2:4d:a3:b3:5e:3c:f1:03:
                    c6:42:1b:d6:76:c9:40:4e:37:35:f6:5c:59:a8:b2:
                    f1:33:c8:07:e8:01:98:48:86:80:49:8b:d4:35:a5:
                    6a:c5:02:01:2a:78:32:14:5f:91:ac:1e:fc:ac:83:
                    e9:98:31:07:7b:11:69:25:9b:6c:d2:14:80:9f:da:
                    0b:0a:58:e7:72:84:0b:09:a4:39:b0:2c:48:34:e9:
                    36:5c:ac:c0:82:7c:7c:5d:a8:c4:b4:ec:55:34:08:
                    36:cc:c3:87:3e:99:83:1d:0f:7d:ba:5d:bb:3b:6f:
                    f5:5d:9c:26:ea:46:71:af:2d:51:1e:19:55:f4:f5:
                    c7:f6:06:88:f0:e7:77:71:8b:91:f6:59:94:de:38:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:ED:38:14:E1:1E:2C:F3:3F:80:99:75:CE:A2:23:14:C3:E0:86:24
            X509v3 Authority Key Identifier:
                keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:20:e7:c5:56:d2:03:51:b1:2b:18:7a:af:78:46:1f:2b:0f:
         52:29:d4:25:ca:cc:55:5e:7d:7f:f9:2d:6e:d0:c7:e5:92:82:
         c9:3b:97:f2:75:b9:14:30:46:d2:6c:ee:d2:cd:d9:19:57:f9:
         a7:24:d7:1d:d6:0f:85:26:2f:b0:32:67:bb:70:6c:40:d3:6e:
         cd:4f:7e:1a:96:6f:0a:ab:88:ef:bd:d7:b1:93:7f:a0:19:1a:
         e6:7b:95:30:4f:21:c3:e0:bd:c3:50:07:6e:18:eb:54:fd:3a:
         eb:d2:ee:92:8f:a1:58:81:0f:e4:70:8b:e1:0c:6e:4d:81:91:
         a6:31:8e:ae:1c:d2:02:c7:22:07:85:6d:24:69:bd:f6:17:0c:
         cd:09:60:90:e2:5f:f0:f6:9d:72:c1:16:dc:26:91:77:71:d3:
         1c:59:78:e3:4b:7b:6c:5b:e4:4e:31:3d:8a:b3:b1:27:2e:1b:
         ce:fe:c8:38:1a:7b:e0:ad:9b:e9:84:40:96:bd:17:87:96:af:
         aa:02:86:e6:1e:01:4b:b0:7c:5d:51:ad:5d:8e:7c:fb:99:a2:
         6f:29:d3:af:90:65:94:03:a8:fa:8c:9d:4b:ad:b3:11:d0:78:
         25:09:d1:88:12:72:5d:3b:a8:0d:10:db:59:03:77:80:b8:a8:
         60:d8:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:09 2025 by rpki-client