Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
File:                     EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft (raw, json)
Hash identifier:          s//IsrA6ygLISQeQ500jC1VFQO4O71VmoKKgvsOsKUg=
Subject key identifier:   4C:BB:89:C9:5A:1A:B6:E3:A5:D0:03:8D:00:FD:68:AD:CF:BD:D7:EE
Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
Certificate issuer:       /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
Manifest number:          40
Signing time:             Fri 31 Jan 2025 06:32:52 +0000
Manifest this update:     Fri 31 Jan 2025 06:32:51 +0000
Manifest next update:     Fri 07 Feb 2025 06:32:51 +0000
Files and hashes:         1: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl (hash: f6vn+YOSX5qbbTQA6eKfUWhMXuIhh7PAju+Ma6PeS/4=)
                          2: 7B026F0686C711EF9B284139C4F9AE02.roa (hash: EZr43Zd/nvWqNQBFSUi7UV8hDLrvC+/bbJUY/Mjkjnc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
        Validity
            Not Before: Jan 31 06:32:51 2025 GMT
            Not After : Feb  7 06:32:51 2025 GMT
        Subject: CN=679c6e93-cf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:56:21:cc:4e:69:cb:59:4c:a4:98:ec:ce:fd:
                    c2:03:54:6e:9e:57:1f:76:9d:20:2b:e3:56:1d:60:
                    0f:8e:62:06:e2:06:ac:4d:94:8f:94:ca:e2:ed:54:
                    13:39:5c:9b:c2:81:a4:68:b0:5e:48:53:c2:8a:0f:
                    71:13:0c:22:16:e9:92:db:27:5c:01:8d:4f:09:73:
                    88:91:9a:5d:19:5a:90:c3:e8:79:0d:ca:f9:d6:d7:
                    77:94:0a:2b:d5:36:8b:fa:f3:e5:4e:42:0b:b5:ba:
                    13:55:94:df:87:ac:59:1b:69:be:6f:c1:5d:6e:94:
                    b9:c8:c4:45:a6:da:c8:79:53:00:7c:8f:a0:24:78:
                    c7:cb:9e:0f:54:30:03:66:4c:c5:05:c5:ea:82:60:
                    c2:e5:c0:4e:ea:bb:8e:bf:3a:b8:4e:77:d6:2a:48:
                    db:a7:4d:5e:5c:f3:41:41:c3:fa:e5:d1:23:17:1c:
                    98:d8:90:e8:19:4e:10:db:e8:a3:60:4f:59:01:45:
                    be:24:0c:17:69:79:04:c9:2d:ce:05:ae:26:d1:5e:
                    e7:16:aa:e5:b7:d7:f6:d8:71:58:ad:a4:ca:d9:de:
                    61:db:e3:60:33:de:e3:8c:19:66:dd:9e:9a:2a:f6:
                    ab:92:e7:71:a9:0e:48:39:49:ca:b8:18:a1:1b:90:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BB:89:C9:5A:1A:B6:E3:A5:D0:03:8D:00:FD:68:AD:CF:BD:D7:EE
            X509v3 Authority Key Identifier:
                keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:60:d0:93:dd:c3:d2:bf:0a:c2:ba:7e:0f:db:57:7a:af:15:
         6f:94:b1:16:1a:6a:58:51:e9:85:0f:91:fc:e0:8d:94:08:0b:
         3b:a6:08:d4:78:d0:23:6d:a8:88:77:c1:22:92:b6:ee:a2:bb:
         b8:b1:4a:20:35:1f:57:22:81:6b:ec:d7:1c:34:a7:27:6c:7a:
         80:e7:ba:c6:3a:c5:80:dd:5b:9e:2b:87:64:a1:37:1a:e2:10:
         3d:62:c8:2d:c1:05:67:1c:87:ef:32:36:a2:31:1b:59:53:68:
         cd:91:86:dd:84:e5:f2:6e:e7:80:0f:37:15:37:3a:45:c8:d8:
         9b:29:f6:70:c4:06:83:f9:4c:de:8c:95:34:80:a5:93:11:55:
         ca:35:85:78:d1:94:b3:03:b4:e3:82:fd:29:fd:90:52:64:ee:
         75:c0:ba:b2:ce:b9:a6:08:4b:a7:7b:4f:17:d4:08:13:c9:78:
         a1:eb:60:2f:b2:a1:fd:52:9b:02:17:ab:b6:5f:07:ee:63:fb:
         9e:47:40:fa:81:66:fa:7a:74:a3:69:1a:e3:72:8c:4f:ea:d6:
         e2:1b:99:ec:e1:a6:6e:82:82:cb:c5:80:c0:a8:ae:f2:bd:02:
         f1:fd:32:f5:ee:f8:37:e8:71:39:be:85:c6:c0:69:fa:dd:a2:
         07:47:d9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:05 2025 by rpki-client