Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
File:                     OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json)
Hash identifier:          63tzzmsGYa+KFm7h6pjdK8RQFBd4VCEe8X/iMbQKtNU=
Subject key identifier:   E1:A2:37:72:4F:B0:E8:94:BD:09:8F:CC:2A:C9:F9:FD:C2:CD:7B:E6
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Certificate issuer:       /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
Manifest number:          83
Signing time:             Fri 31 Jan 2025 05:41:50 +0000
Manifest this update:     Fri 31 Jan 2025 05:41:50 +0000
Manifest next update:     Fri 07 Feb 2025 05:41:49 +0000
Files and hashes:         1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: iW1xEEuhEprInvc50KfVRwJXBIz4kAENsUHPzRtp9ps=)
                          2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: TR/9w+oCqGCqjfN5wK6VX8rAdbT3DnBKMOm4/b1iJZA=)
                          3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: y9ipesVJF6530t8WVs2qEr0X7RGO4yWHPQGA3YKJeHw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
        Validity
            Not Before: Jan 31 05:41:50 2025 GMT
            Not After : Feb  7 05:41:49 2025 GMT
        Subject: CN=679c629e-1e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:f3:53:27:b8:d1:d1:d7:b6:f9:ac:f4:19:
                    63:d9:9e:cd:9f:30:f9:b2:3d:9a:66:4e:3b:2b:8a:
                    61:2e:fd:61:ff:c7:de:19:00:05:50:75:4d:e0:9b:
                    25:c1:b1:c9:65:79:84:17:17:26:68:31:f4:89:4c:
                    c2:3f:df:62:5f:ca:0e:a2:0e:56:fd:71:db:2a:1c:
                    82:8c:bd:e9:67:5d:91:ad:75:2d:74:e7:38:fa:e4:
                    aa:fa:9d:1e:41:d4:29:3f:18:55:93:00:42:ce:92:
                    24:5a:84:a6:93:75:77:c9:82:a7:6f:44:2c:61:29:
                    22:53:0a:9f:84:e0:de:b7:e8:e3:4e:e6:02:e7:e3:
                    75:79:01:99:a6:73:f9:d7:73:ea:06:3c:55:f3:8a:
                    18:fb:31:f1:47:6c:c9:6a:40:b2:8a:46:c6:47:3b:
                    ec:3b:51:b2:51:02:cb:8b:ac:b2:f0:91:a1:11:d0:
                    22:6f:95:77:fc:66:aa:c0:b4:8d:e4:e3:3e:5c:82:
                    91:48:4a:c1:24:91:82:de:e8:9e:d7:b3:ee:4f:7d:
                    d4:aa:1f:65:1a:89:a6:18:26:6d:a5:0b:f1:33:d9:
                    8b:36:1b:97:ab:70:82:21:1c:14:24:e4:a9:92:29:
                    c1:b1:f9:83:8b:54:74:70:7e:60:b9:47:ca:9d:68:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A2:37:72:4F:B0:E8:94:BD:09:8F:CC:2A:C9:F9:FD:C2:CD:7B:E6
            X509v3 Authority Key Identifier:
                keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:18:42:e2:57:54:d8:d3:fe:a3:2a:d3:8b:08:f5:18:62:05:
         11:bd:f9:f6:a6:1c:cd:59:fc:0e:50:53:62:e6:eb:79:cb:89:
         95:3f:3f:06:70:eb:0a:77:8a:83:3d:a4:1d:04:56:64:35:01:
         98:61:5f:19:3a:d6:06:7e:d0:6e:14:e2:c3:04:37:4b:6f:ca:
         03:ce:d1:85:cb:91:56:ce:12:6d:76:0e:d1:68:66:41:ae:66:
         ed:86:2b:4c:0e:4e:01:dc:84:78:95:5b:16:5d:95:8b:e0:98:
         83:11:33:22:3a:36:91:f5:98:b2:2f:c6:ff:eb:a0:25:44:5e:
         36:cd:ef:e5:9c:5f:62:b2:76:98:12:fd:23:da:63:16:14:78:
         de:e5:74:cf:4a:66:2e:3e:bd:08:8d:61:a0:1b:a2:13:30:76:
         ae:c8:72:23:66:e5:21:0e:3f:20:64:22:36:fe:39:a4:7c:2b:
         57:3d:d5:fe:74:64:c7:c6:6e:b2:6e:10:8d:f9:1c:bd:1d:86:
         1b:28:c7:63:96:a3:a0:3e:e5:21:82:b6:d3:d3:75:67:35:6f:
         56:6f:a5:90:e7:fe:2e:d6:0a:69:cb:53:67:69:51:07:90:48:
         8f:70:00:86:fb:56:b2:90:2b:b3:71:db:20:88:a3:7c:a4:45:
         fe:a3:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:14 2025 by rpki-client