Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
File:                     cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json)
Hash identifier:          irRvHCQVelZYcrpp8pwyrNcMfAfAADJrDLpt/MP/ij8=
Subject key identifier:   54:53:EE:29:67:C2:E2:5C:56:DB:5F:4A:10:3A:80:78:36:E8:14:83
Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2
Certificate issuer:       /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
Manifest number:          3F
Signing time:             Fri 31 Jan 2025 06:37:23 +0000
Manifest this update:     Fri 31 Jan 2025 06:37:22 +0000
Manifest next update:     Fri 07 Feb 2025 06:37:22 +0000
Files and hashes:         1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: zzkJsemQSMtp4KL67sfPmqXxgbfaJh+f0RIcjFQ0Qz4=)
                          2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: 72ohKD9MI8KWe2+cLtI8D2+EcsRtUej+Qleoucq8OgE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
        Validity
            Not Before: Jan 31 06:37:22 2025 GMT
            Not After : Feb  7 06:37:22 2025 GMT
        Subject: CN=679c6fa2-aaf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:bf:39:72:f2:17:02:f7:a3:e6:18:3e:91:
                    38:52:20:a2:fc:ab:20:85:bb:9c:e4:c8:9c:49:a8:
                    26:29:cc:82:02:49:eb:56:00:24:46:3b:72:79:ff:
                    1a:b4:0b:04:f6:e1:16:d7:b9:a9:93:84:24:f4:11:
                    76:d4:4a:35:4b:b9:c7:78:cf:69:ae:75:9f:24:04:
                    6c:59:ad:06:f5:29:3c:43:73:62:88:4a:cc:45:a7:
                    89:7b:23:c7:45:c2:27:c9:b3:f6:d7:ca:d8:1b:eb:
                    19:36:e0:47:f6:a3:58:68:39:c2:04:da:26:33:fc:
                    96:a0:cd:5a:0d:1a:20:9c:f4:f7:ec:b6:13:b1:46:
                    3d:cc:95:5f:84:aa:68:28:4f:1c:be:86:2a:cd:85:
                    70:36:ac:c1:c9:67:3a:91:bc:d8:3a:fd:ac:59:99:
                    12:7a:6b:da:9b:50:0e:c6:dd:bc:98:81:7f:8d:a0:
                    07:5a:31:5a:29:d2:fa:d1:38:eb:45:15:e3:30:64:
                    a0:71:21:7b:79:a3:37:c3:8c:73:f8:8c:cf:08:99:
                    47:4c:a5:32:9b:ea:86:e3:77:0d:64:b0:d7:5c:ba:
                    9c:1c:1f:e7:00:d2:4e:94:a8:72:de:30:97:df:20:
                    8b:29:88:9f:69:fb:c3:79:31:f2:62:77:0f:65:77:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:53:EE:29:67:C2:E2:5C:56:DB:5F:4A:10:3A:80:78:36:E8:14:83
            X509v3 Authority Key Identifier:
                keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:82:7e:be:37:0f:bb:51:e5:3f:d1:dd:8c:87:b3:25:df:2c:
         95:5e:ec:ca:b1:f9:fd:32:03:ee:7a:d6:68:a4:d3:e1:c1:39:
         fe:e9:35:c0:24:36:f3:3a:a6:8e:c0:98:94:e3:76:c5:81:ea:
         a3:35:4e:a9:da:4e:c9:98:cc:27:69:17:be:43:b5:55:8d:89:
         66:5b:77:24:61:ba:94:d0:0e:49:82:df:b7:e5:ad:ea:11:29:
         4f:36:9b:c2:e9:bb:e4:c7:d1:e9:b4:25:c9:bc:0c:98:ea:23:
         61:a7:6b:b8:2d:73:2b:e0:e5:fc:09:bd:eb:da:e4:1b:13:57:
         fb:f0:bd:b5:56:f9:aa:2f:69:3a:17:f1:37:7a:f1:74:4f:36:
         8b:c9:2d:26:14:70:18:73:37:7f:7c:b0:64:e3:2a:01:85:81:
         e0:46:2c:87:b9:ab:d8:39:99:33:17:af:4b:83:04:12:05:f5:
         d4:5e:d9:30:3b:1a:23:f3:16:a0:58:b4:dd:24:f6:69:b8:dd:
         04:b2:fb:8c:ed:b4:91:c3:da:55:89:be:25:08:87:8c:06:d4:
         ad:9a:f0:39:7b:7b:ac:9f:be:54:79:4a:ce:ad:9c:55:d4:33:
         fe:7e:a7:e8:9a:b6:ad:10:d0:c9:97:a3:29:9c:9c:bb:b3:79:
         de:45:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:58 2025 by rpki-client