Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.mft
File:                     rDMhMLHAn9SrI3SVpOqWNLdMEro.mft (raw, json)
Hash identifier:          k5LksVJyErzUp8jpu1pXBQOkVUUtt28SkLkvEgNP+SA=
Subject key identifier:   71:2B:36:D9:CD:89:1A:CA:BA:FF:7B:25:BA:CB:85:0C:85:CA:0D:6B
Authority key identifier: AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
Certificate issuer:       /CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.mft
Manifest number:          E8
Signing time:             Fri 31 Jan 2025 04:49:27 +0000
Manifest this update:     Fri 31 Jan 2025 04:49:27 +0000
Manifest next update:     Fri 07 Feb 2025 04:49:27 +0000
Files and hashes:         1: rDMhMLHAn9SrI3SVpOqWNLdMEro.crl (hash: k6TmZ9bvuo72iBaThg2aNtk3xIWXeUTQSy3IjcHgL+M=)
                          2: 73E8DF82849011EEB85F7368C4F9AE02.roa (hash: HKHYsbrDNoyp6GAcOekOnGiTAew+Pu8wY19MflDDeMQ=)
                          3: 748FABB4849011EEB85F7368C4F9AE02.roa (hash: kcSFIm+j37epu7yAKtzNGX1uejJ3Ld05AF64c0nkpm8=)
                          4: FA3586ACDC2011EE9D863154C4F9AE02.roa (hash: H8EYMHV4v6AJtk+fkMpqdoQTIIY1mGFVtSVsa+Q1cFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
        Validity
            Not Before: Jan 31 04:49:27 2025 GMT
            Not After : Feb  7 04:49:27 2025 GMT
        Subject: CN=679c5657-a5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:b3:46:85:75:6d:0b:fa:74:41:39:36:03:
                    29:5f:23:9e:ee:4d:41:b1:8e:9a:57:2e:3a:df:1f:
                    cf:d2:1f:ba:d1:03:28:8e:ab:f3:8b:24:12:b1:57:
                    d7:ce:af:c0:f7:ec:03:5c:65:b2:31:f5:c0:d4:16:
                    38:6f:7f:73:f7:77:9a:0f:9f:d2:8f:a7:e5:32:f4:
                    24:3f:c9:f7:79:b6:b1:bb:04:c3:72:dc:5e:8e:10:
                    b1:4b:d6:8d:d7:42:5e:a9:ec:40:43:e2:68:f2:cb:
                    cd:f5:da:a4:6f:c4:90:af:3a:6e:92:a8:5f:e9:b2:
                    31:cd:2b:0f:47:16:66:e3:c3:a9:a1:79:9f:d4:c9:
                    30:3c:6f:62:a2:29:f6:b0:06:97:b4:95:67:60:01:
                    e4:23:99:28:72:d4:ae:77:22:da:b5:f5:f9:11:ca:
                    43:40:14:90:4d:ca:c1:9b:ae:f8:55:6c:88:cd:19:
                    35:51:f9:30:a0:cc:9e:79:08:f1:18:1e:64:fd:c6:
                    ff:c3:40:1d:34:e3:09:94:2f:63:da:9c:96:62:3d:
                    d9:27:19:34:72:7f:46:f2:57:13:84:18:1b:ff:23:
                    b9:4b:a1:48:72:3b:fb:38:c3:48:ff:0c:80:88:ce:
                    0e:9c:59:9d:fc:f9:53:3e:a8:04:28:4a:93:94:85:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2B:36:D9:CD:89:1A:CA:BA:FF:7B:25:BA:CB:85:0C:85:CA:0D:6B
            X509v3 Authority Key Identifier:
                keyid:AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:39:fa:c3:9b:64:d7:ac:8d:e2:3b:d2:38:16:fe:5f:39:
         30:9b:ad:64:b4:ff:eb:d8:6e:ae:33:e2:d1:63:f6:7b:02:cf:
         7a:b0:0a:0d:0e:b5:61:ef:7f:44:36:3c:1d:55:e3:e2:1e:de:
         a7:95:11:03:4f:c9:45:81:0e:bd:51:4b:6c:bd:5f:e2:9e:e6:
         61:b8:88:3a:a6:37:32:86:2c:0a:b7:7e:14:eb:ed:31:b9:f9:
         78:ad:61:74:0f:4a:79:9e:bd:1d:d3:e9:0d:4a:a6:e8:b4:6f:
         d9:e9:ba:23:4e:7d:73:dc:ee:8e:7c:c4:19:8e:d9:bd:25:5c:
         cf:f6:79:4c:de:3e:f0:20:6a:38:94:fe:bd:a8:18:03:78:6b:
         ed:bb:f3:ac:6f:12:31:07:ae:61:7b:07:2a:95:a0:c3:5e:74:
         76:19:0b:6d:d7:ed:12:9f:56:26:3d:0a:71:55:f9:ec:01:53:
         84:e8:57:64:4a:9f:f2:71:e7:17:e4:ae:50:62:32:fe:34:a2:
         d6:f6:bb:8e:ff:a1:0b:3a:37:fc:30:dd:7e:5e:0b:ac:9b:54:
         b2:ce:05:3a:7f:88:4d:70:a0:84:67:0c:d8:8e:4e:76:91:d1:
         f3:85:79:d3:04:fd:06:30:4d:7e:76:b8:b7:4e:31:e4:c9:34:
         6f:49:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:37 2025 by rpki-client