Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
File:                     bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft (raw, json)
Hash identifier:          HNl92lOh2gHy+BEjUmq9Ol/keq05Vz2cf4AwViiOJ80=
Subject key identifier:   9C:AD:E4:23:55:03:EA:27:6E:DE:21:B6:9D:84:F4:DA:FF:4A:56:4D
Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
Certificate issuer:       /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Certificate serial:       0543
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
Manifest number:          053F
Signing time:             Thu 30 Jan 2025 23:30:48 +0000
Manifest this update:     Thu 30 Jan 2025 23:30:48 +0000
Manifest next update:     Thu 06 Feb 2025 23:30:48 +0000
Files and hashes:         1: bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl (hash: MaR2ug7OSu+I/BkPuTo8u1oj/wTiKdsEQiJFdzFRHgw=)
                          2: BF811486DC1E11EBB2C72F52C4F9AE02.roa (hash: iBf35JbhfXTByYtXYWLsbRPZqGHn3gi9s/hG2voZLCk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1347 (0x543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
        Validity
            Not Before: Jan 30 23:30:48 2025 GMT
            Not After : Feb  6 23:30:48 2025 GMT
        Subject: CN=679c0ba8-5b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:00:43:65:3c:0f:87:15:41:6e:d5:ee:83:0c:
                    d9:4e:be:fb:39:54:01:97:47:c9:34:f5:d3:fd:d0:
                    fb:2f:1e:b2:1a:0d:d2:f1:05:b6:51:6d:2f:a8:e2:
                    69:a1:8a:cb:d9:15:44:bd:5d:eb:b5:81:4a:76:41:
                    76:5f:f9:00:c5:a8:84:6c:d8:af:e3:f7:8c:05:2e:
                    17:f0:6e:9c:f8:2d:a9:94:a5:37:d4:96:24:67:4d:
                    58:bb:18:36:ab:80:05:67:10:93:5e:78:86:ed:03:
                    c2:7c:f7:c5:49:d6:14:ad:61:53:ca:cf:13:ec:12:
                    95:0d:de:39:b4:1d:b5:4b:03:87:ef:cc:81:cf:a7:
                    e4:27:05:ce:fc:41:7e:15:d0:57:a3:c4:7f:e1:e0:
                    87:78:1a:5d:ea:92:6a:0e:3a:28:27:66:d6:d8:52:
                    e9:de:a7:ed:05:5d:2a:bb:99:21:a2:60:54:4c:3f:
                    b6:69:db:47:f0:ae:40:19:30:99:04:dc:7f:0f:ae:
                    60:dc:6e:2c:b6:ad:60:20:52:b7:7f:f7:ae:a9:68:
                    ab:a8:d5:3a:99:95:30:3a:54:f7:0d:04:bc:57:91:
                    0e:82:cd:42:a1:08:08:4d:fb:e9:d6:95:45:24:8f:
                    7e:48:bc:af:41:81:d8:8f:ef:70:86:12:61:46:ce:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AD:E4:23:55:03:EA:27:6E:DE:21:B6:9D:84:F4:DA:FF:4A:56:4D
            X509v3 Authority Key Identifier:
                keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1b:eb:bd:d6:a9:e6:65:8f:31:46:5a:8d:af:34:5f:f0:e4:
         80:80:b9:ad:15:17:e3:a1:2a:ee:62:f2:eb:d6:8b:c1:bc:b5:
         11:a6:5e:95:47:c0:5b:0b:d2:af:fa:ec:9b:1e:02:b8:8f:2e:
         2a:05:86:4e:90:44:53:e2:f6:55:c6:12:5d:35:6f:c3:c5:2a:
         28:48:f5:20:9c:90:c5:63:25:04:55:b8:7c:38:4d:36:69:4f:
         94:c1:dd:e0:74:ae:32:a5:1f:5f:70:f3:5d:4d:1b:6f:c2:2e:
         57:9c:56:e6:8f:4f:a3:58:d3:2d:2e:4b:27:62:58:b7:c8:4d:
         05:95:23:13:c3:26:8b:f3:e6:6d:45:0b:8d:f1:13:8c:7a:f7:
         52:04:9a:3e:33:a4:b1:5b:95:09:33:7d:79:3b:e4:be:af:6e:
         53:e0:cc:28:06:ff:fc:a1:db:07:1d:fb:3a:bf:ef:0c:1a:53:
         5c:0d:38:b8:b8:a6:85:5f:98:be:7d:6f:7e:a6:81:c0:e2:69:
         89:3e:69:ca:86:61:98:07:3c:41:cf:30:bd:3d:de:a8:eb:1e:
         08:28:0f:45:e4:a7:99:03:21:00:e2:0e:27:c3:1a:b0:a6:90:
         e3:89:1b:58:4e:c5:ff:a7:41:6f:03:35:7e:de:9d:b7:af:8a:
         84:d7:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:56 2025 by rpki-client