Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
File:                     gprYV1claHsfCkxV-UIq8zsA_LE.mft (raw, json)
Hash identifier:          taNE2yQPf1DAWDtOXpadRd+05Nh31Hk6I52ygW2ctzA=
Subject key identifier:   4B:DF:84:59:C7:A4:DD:C6:B9:C3:52:77:5C:21:68:19:A9:5F:3E:69
Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1
Certificate issuer:       /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
Manifest number:          58
Signing time:             Fri 31 Jan 2025 06:11:47 +0000
Manifest this update:     Fri 31 Jan 2025 06:11:47 +0000
Manifest next update:     Fri 07 Feb 2025 06:11:47 +0000
Files and hashes:         1: gprYV1claHsfCkxV-UIq8zsA_LE.crl (hash: FDIOgp+d6/nHethPbFvB79AecpMsmoAuLaLDAPJp3Ls=)
                          2: 833934745B9E11EFA7D10E5BC4F9AE02.roa (hash: EnqdtS67GGIoHjrrVwErYsAO96Kw850mS6kZEXiWy+M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
        Validity
            Not Before: Jan 31 06:11:47 2025 GMT
            Not After : Feb  7 06:11:47 2025 GMT
        Subject: CN=679c69a3-2ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:10:f4:10:0a:d0:3b:8c:e5:24:f3:3b:c9:
                    86:ca:b7:c4:98:81:d9:7e:24:01:b3:54:f3:54:d7:
                    48:a9:ac:fd:d4:da:a7:36:a3:7c:1e:b2:ff:5e:5c:
                    79:66:bd:3a:11:b2:6b:24:4d:c5:32:dc:9e:96:30:
                    6b:05:25:4c:26:80:d6:b0:83:b4:b5:c1:7e:e9:59:
                    13:6d:a9:13:73:d5:8e:6e:56:67:64:de:d0:fc:c4:
                    da:af:c4:ac:ea:b8:35:e2:1f:68:52:45:fa:fb:d8:
                    cf:bc:4e:27:71:64:bb:21:a5:4f:d4:1a:d7:31:98:
                    dd:44:6c:bf:f5:11:14:a0:0d:03:2a:d9:bb:2e:3f:
                    af:e7:db:ac:b8:68:a2:f1:fd:d8:d0:da:cc:17:ff:
                    45:8f:7c:7a:64:ba:38:ad:91:c9:80:f7:42:b1:47:
                    bd:b5:c7:67:af:46:75:ab:8c:c8:f0:0b:a5:b8:86:
                    1f:86:06:df:f0:b7:f7:44:11:aa:44:6c:98:3b:7f:
                    90:65:87:69:30:bc:41:a6:3a:c2:49:b2:f8:b8:77:
                    f7:bd:72:4c:f5:0d:ee:42:34:c6:30:34:ae:d7:d4:
                    99:c3:6c:7e:3d:b9:42:e1:c6:eb:9c:a3:ef:2a:27:
                    35:f3:6b:c0:be:c6:1d:c3:c2:d4:ee:db:df:9e:4f:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:84:59:C7:A4:DD:C6:B9:C3:52:77:5C:21:68:19:A9:5F:3E:69
            X509v3 Authority Key Identifier:
                keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4b:63:5a:62:c9:68:df:76:82:16:cd:98:e9:8f:85:47:0a:
         61:05:8d:89:54:db:81:b6:f9:c0:f1:4a:be:3c:b2:7d:37:bd:
         b9:53:39:53:47:8f:39:42:3a:37:3d:1e:3b:5f:26:a3:85:ce:
         ff:4d:fe:18:6e:59:be:41:2b:57:21:0d:27:44:18:c5:ab:74:
         b9:6f:5c:5b:a9:af:56:96:10:97:1f:92:a4:35:79:78:9d:89:
         0c:a3:38:43:21:3e:e1:6e:0b:fd:e9:ef:08:1a:97:06:da:93:
         0a:70:f1:a7:d0:82:b6:9c:2a:20:37:77:76:61:04:b5:b8:dd:
         7f:99:9f:de:d3:3e:44:11:1a:73:ff:c6:d4:f5:1c:d6:a7:b5:
         e5:c3:af:fd:a0:17:84:77:4c:26:2d:48:8f:94:67:7a:f1:4c:
         34:b9:e5:27:48:47:29:6c:e1:a5:c9:ea:4c:a8:45:cc:ee:31:
         07:66:28:aa:2f:98:fe:31:e8:df:c7:24:b4:85:3a:91:9a:0b:
         2d:1d:85:7d:b7:8c:7c:bd:7b:0b:61:3f:ca:3f:f2:5c:5f:19:
         79:2c:08:e3:0c:b8:01:65:7d:07:2b:b4:ee:ce:f9:b3:8b:fe:
         7c:48:96:ff:81:65:c0:36:a2:a3:45:a4:bd:3e:bf:05:ba:cd:
         a7:e7:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:02:15 2025 by rpki-client