Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
File:                     iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json)
Hash identifier:          6m8j61rjROhy7YKKcpHQeDoL7Jet4e0K11dfZlG0Va4=
Subject key identifier:   88:57:42:98:7B:FC:BC:F7:F6:B5:9F:35:28:17:BD:A1:C3:01:B1:96
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       12EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
Manifest number:          1291
Signing time:             Fri 31 Jan 2025 17:07:37 +0000
Manifest this update:     Fri 31 Jan 2025 17:07:37 +0000
Manifest next update:     Fri 07 Feb 2025 17:07:37 +0000
Files and hashes:         1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: 3OgdrHqH9wCG8+K7yBf0/BFjIrxPtsiBiUUcOKXiY2A=)
                          2: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: MpSwwr6a+AIoc+TObg4xTyGo2LybXSMxQRZJjtl6eX0=)
                          3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: P8l1FNXOYT7PgZwkM5WwT5I4kFXlU2g1aMiRVrxecW0=)
                          4: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: fuwDNiZ3+QLVhkbit4ZnZ+4J6WBC2B0ArdJyFk12B18=)
                          5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: gCSPbOmfN88YObA69zovcSPPL1AYU9CNWO0gKhcOASM=)
                          6: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: CQoH7dF+prokYvHDbMofZqTT8CWUOmwoH8dvQkA7+eE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4842 (0x12ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Jan 31 17:07:37 2025 GMT
            Not After : Feb  7 17:07:37 2025 GMT
        Subject: CN=679d0359-c5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:42:b3:56:c8:88:d0:84:09:e2:69:0f:33:
                    ea:a7:ce:51:ef:de:11:a0:b6:5d:af:14:67:38:ac:
                    d8:aa:b3:de:42:db:da:a4:96:4e:88:bc:19:9a:ad:
                    c6:be:ca:d9:da:c8:dc:4b:c6:73:ea:aa:12:d1:7e:
                    7f:70:d4:fe:7f:ae:c6:94:bd:41:0e:27:75:3f:e6:
                    e1:86:86:b7:ef:3f:de:a8:c2:b3:26:25:e4:01:f5:
                    5e:11:ab:82:00:12:2d:bd:80:35:bd:ab:02:f7:37:
                    1a:f4:a0:94:38:02:43:a0:f6:a4:8a:9e:5d:cb:81:
                    ab:ec:33:46:6b:b9:4c:eb:eb:c9:3d:3b:80:6c:39:
                    d5:f2:95:94:84:39:66:35:03:12:15:8c:09:54:3e:
                    53:c7:82:ef:9d:41:2f:4f:28:34:da:ab:6b:24:d0:
                    f0:a1:42:d8:2e:5a:1b:d7:e0:ae:b2:4c:9f:a0:db:
                    95:40:f8:91:68:1f:c4:5d:ae:fe:56:f6:f4:57:75:
                    e7:57:5d:83:f7:76:53:fc:b9:52:44:e5:fb:0d:05:
                    c6:90:5a:92:b4:8f:84:28:e3:07:38:de:82:01:db:
                    99:6b:48:90:50:c1:88:e3:a6:ce:b5:c5:85:bb:ff:
                    b1:95:f3:dd:a2:c8:0f:16:dd:88:7b:2b:ab:9f:fe:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:57:42:98:7B:FC:BC:F7:F6:B5:9F:35:28:17:BD:A1:C3:01:B1:96
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0c:0a:ad:16:60:e4:ee:43:64:17:52:fb:50:14:69:05:6a:
         4c:c5:3f:fd:24:db:a6:dd:d5:37:c4:5c:71:fe:3a:71:94:53:
         ea:e2:b4:1b:08:9e:ed:9f:e9:c4:61:26:aa:1a:74:28:01:0a:
         f8:9e:90:ef:c8:67:dd:8e:fa:6f:db:14:a6:25:55:a4:0f:6d:
         fb:80:bb:9e:c1:c7:fd:5f:c0:6b:06:8a:75:81:ef:0f:13:dc:
         59:b1:87:1e:e0:28:18:5e:41:9d:41:c6:24:e2:3d:df:66:81:
         ff:98:11:5b:c2:f1:ec:65:bb:69:8e:22:34:f6:8e:9a:65:c5:
         97:af:68:80:fa:41:a1:d3:54:23:fe:49:a3:fb:1d:8d:0e:3d:
         32:49:b7:24:08:ae:e1:52:dc:06:12:69:27:04:b1:e4:d9:12:
         bd:4e:70:c0:fe:13:f5:d0:cf:ae:77:66:a1:ca:f4:18:c3:58:
         95:14:10:94:2b:56:77:55:fb:c8:89:51:f4:13:6c:b0:6e:86:
         f9:6f:ea:2e:87:d3:bc:9c:3e:ff:67:99:20:ad:83:ec:8f:67:
         ad:2b:41:6e:f2:40:45:e3:82:f7:5c:36:cc:54:8c:27:58:a6:
         f2:66:a6:4e:df:76:f1:bd:42:08:24:60:4f:3c:74:f7:26:9d:
         04:8b:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:03 2025 by rpki-client