Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File:                     EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier:          qxhQPGEzNC4eBTEp4gHVmLhQs8zLekzRyJt+YBHIFFQ=
Subject key identifier:   5C:DF:ED:F8:89:C6:ED:FE:BC:0F:F7:4F:9D:CF:8B:85:32:43:EB:0F
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer:       /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number:          B3
Signing time:             Fri 31 Jan 2025 05:19:05 +0000
Manifest this update:     Fri 31 Jan 2025 05:19:04 +0000
Manifest next update:     Fri 07 Feb 2025 05:19:04 +0000
Files and hashes:         1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: yhQZ4fo+j8iKTn3YG5snDXS/wHeBTbxpVQsv6ANd9tM=)
                          2: 93CAF586E8E211EEB8DF8C56C4F9AE02.roa (hash: 4W1eqwL5w21+QHmWRxtzZ390UrbWfM75t3gARvEGxcw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
        Validity
            Not Before: Jan 31 05:19:04 2025 GMT
            Not After : Feb  7 05:19:04 2025 GMT
        Subject: CN=679c5d49-445d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:79:62:9c:18:bd:c9:11:fb:c0:53:fd:0b:
                    02:83:76:96:18:7c:dc:47:4b:52:a6:b7:3d:5c:70:
                    55:5e:8d:c4:df:ad:d6:7f:32:3f:e5:c6:3a:ac:34:
                    ea:f8:fb:0a:2d:fb:1f:86:ca:07:f0:79:26:b5:0a:
                    a7:f0:b9:09:24:43:bb:f9:cb:8e:68:09:c4:43:82:
                    ea:3f:e0:a8:b6:ec:0b:5c:13:78:9a:2c:72:3d:15:
                    9c:cc:4b:e4:cf:2d:a3:22:4b:fe:31:e0:de:5d:59:
                    9e:33:21:4b:b6:ae:65:c0:8c:ca:b2:8b:00:eb:6a:
                    3d:2d:7b:9c:a1:a2:66:e2:60:76:ee:ef:79:a3:9a:
                    57:12:3a:24:6d:cc:cd:82:e6:74:81:ef:6d:42:fe:
                    cb:5e:7a:e0:0a:55:7b:78:a0:2d:49:db:d9:78:b3:
                    29:e8:50:60:74:31:6a:78:70:ab:e0:3c:5e:92:05:
                    fb:57:79:36:c8:9c:96:8d:9d:44:29:10:7b:af:99:
                    51:30:d4:92:5d:6f:eb:77:38:f5:c1:ca:8d:eb:1e:
                    85:35:76:03:20:8e:81:88:f0:3d:78:90:82:28:1a:
                    f5:d4:dc:e9:a6:ad:bb:93:2f:bc:49:45:47:aa:bc:
                    3c:57:1c:c8:38:ab:14:82:2b:26:7d:5a:0d:84:47:
                    58:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:ED:F8:89:C6:ED:FE:BC:0F:F7:4F:9D:CF:8B:85:32:43:EB:0F
            X509v3 Authority Key Identifier:
                keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:50:81:e7:0d:94:de:7c:a9:d9:0a:fa:04:47:1c:12:ab:
         b3:76:3a:65:45:11:8d:cc:e4:37:f2:5a:33:92:59:bf:ba:9e:
         cd:1d:2b:2e:f5:77:d5:ee:5e:c9:32:5f:e6:37:e4:d0:2a:9e:
         9d:e9:74:68:97:ee:fc:60:9d:03:cd:7a:6a:7d:4e:3c:55:7d:
         c6:16:0e:46:f5:23:67:49:1e:d8:6a:73:b3:5e:a8:e5:0c:9a:
         16:66:cd:09:16:bb:a1:da:35:5a:e7:a3:fc:9c:33:64:7f:20:
         27:35:48:6b:66:de:5e:52:aa:23:bf:6e:63:f7:07:1f:65:50:
         b4:a3:a3:82:84:aa:82:b9:2e:c6:95:e9:67:91:79:b5:56:f0:
         2f:db:43:77:b4:86:f5:97:e1:11:26:7a:51:dd:e8:8f:0b:46:
         57:97:98:cb:37:bc:1d:6e:b5:16:2a:68:44:f4:e1:e6:dd:a0:
         91:1a:fe:cf:3d:95:8d:d7:b4:5a:15:bb:ac:e8:48:3c:91:f6:
         3e:66:bd:ad:77:83:48:3c:85:cf:86:b8:c9:f2:e1:73:07:32:
         4a:f1:73:42:dd:eb:c9:be:81:89:da:3d:2d:9e:fd:38:69:a0:
         8c:6c:61:e6:21:58:64:4f:29:d1:e4:48:a0:3b:23:d6:7a:14:
         20:c4:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:38:41 2025 by rpki-client