Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
File:                     G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json)
Hash identifier:          drJYGgKhakYlyjMgd5Vtn264D11d3cTNPHaTuTT+ffw=
Subject key identifier:   42:ED:7F:CE:FF:34:B1:F9:02:C6:92:47:19:8E:6A:4F:27:F1:1F:A9
Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Certificate issuer:       /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
Certificate serial:       0BF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
Manifest number:          13C4
Signing time:             Fri 31 Jan 2025 18:36:48 +0000
Manifest this update:     Fri 31 Jan 2025 18:36:47 +0000
Manifest next update:     Fri 07 Feb 2025 18:36:47 +0000
Files and hashes:         1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: oMjnqk6CeYc5JALVn/kx6P0V7Xe/seDlzuIWRQJLFJo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3064 (0xbf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Validity
            Not Before: Jan 31 18:36:47 2025 GMT
            Not After : Feb  7 18:36:47 2025 GMT
        Subject: CN=679d1840-8c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:87:80:38:81:7f:94:a7:ea:67:c2:05:81:
                    3a:83:a9:c4:c1:94:4c:cb:74:21:7f:99:e4:29:04:
                    8a:da:3d:ee:2e:16:8a:fe:85:63:8d:72:de:27:1d:
                    27:af:98:ee:26:bd:ba:98:a1:2f:3a:2c:c4:1d:34:
                    13:ee:f7:e1:01:55:0b:99:c5:65:e7:35:f4:16:c8:
                    00:61:bc:1a:36:cc:de:63:3c:eb:cc:40:6d:83:82:
                    93:85:9f:1f:37:4d:b3:57:3d:f9:d7:09:16:98:d3:
                    51:de:54:40:b8:f0:7d:bf:4e:41:ee:c0:80:1b:cd:
                    16:6d:73:8c:05:a5:56:66:cf:74:49:03:ef:8c:f7:
                    d9:fc:9e:92:47:15:5b:ec:93:86:74:fb:8f:52:a3:
                    b0:49:60:d7:89:48:9b:30:dc:ba:e2:00:4a:9d:4a:
                    1a:bc:72:10:b0:8b:99:57:e5:a6:b2:24:dc:ec:7f:
                    a0:50:90:58:e7:c7:d3:99:de:7f:a7:27:f9:f2:27:
                    bb:89:27:74:69:0a:f7:7c:98:48:76:27:62:f4:1c:
                    11:a1:47:7e:07:7c:fe:a6:a3:5c:39:ef:62:4d:a2:
                    4a:98:e0:4d:2d:bf:97:f9:f8:2c:99:0f:f3:64:a3:
                    49:8b:72:f7:66:2a:bc:55:4c:24:7f:46:d2:aa:62:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:ED:7F:CE:FF:34:B1:F9:02:C6:92:47:19:8E:6A:4F:27:F1:1F:A9
            X509v3 Authority Key Identifier:
                keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b7:db:b9:e1:fc:57:b0:27:1c:22:66:e2:f9:55:3f:85:18:
         c4:52:99:75:23:d4:7d:6a:7a:1c:bd:db:0c:c7:02:88:56:a3:
         7a:34:b5:51:9e:77:d2:9e:1c:fc:cc:1e:7a:30:71:36:7d:10:
         8f:34:b0:e5:7e:b5:57:82:9a:05:81:46:da:6c:28:39:2a:2a:
         7a:14:18:2d:79:9e:77:8d:72:78:e3:3f:6c:3a:08:2a:f6:52:
         a1:06:e9:85:e2:1c:4b:84:f9:48:94:ac:b5:0f:08:c2:fc:4e:
         79:cf:27:3c:62:f7:e1:7a:53:81:8b:26:64:68:35:f4:22:92:
         b8:dc:af:09:64:61:45:1b:ab:3e:cc:68:68:30:62:bd:a3:f0:
         6b:93:7e:4c:fa:3d:87:9a:5c:2c:ed:d2:0a:c9:8b:1f:b5:0e:
         22:49:c4:7b:0b:9e:fa:82:6a:ea:c8:12:43:27:0e:1d:6d:3f:
         27:39:e8:85:90:92:1b:f1:89:5b:b5:12:2d:63:ef:b3:06:52:
         ef:73:0f:ca:b4:8d:93:ed:f1:27:92:ea:02:e1:cd:e0:35:61:
         da:f0:03:ed:5f:d1:12:2d:78:ef:a3:6e:bc:29:a7:15:6a:5e:
         b9:f5:a2:7e:3e:9e:3e:d3:53:8d:ff:3c:f6:14:be:54:8c:43:
         98:44:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:44:33 2025 by rpki-client