Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
File:                     gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json)
Hash identifier:          96SFv+GzKRfv5q25DC5UuGvy+A0XfzETVwJ7Wq8uN0g=
Subject key identifier:   91:4D:3D:FE:08:37:4D:7F:EF:C3:4F:01:94:B4:7A:C5:3B:08:4C:09
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Certificate issuer:       /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial:       086E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
Manifest number:          085A
Signing time:             Thu 30 Jan 2025 20:45:11 +0000
Manifest this update:     Thu 30 Jan 2025 20:45:10 +0000
Manifest next update:     Thu 06 Feb 2025 20:45:10 +0000
Files and hashes:         1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: v2fqzEECB97YxYQyOX7vxRtov4ASaGx1hmr1RmydNQw=)
                          2: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: O/NO2IfdBXfSyfMwGAkT+IgbQvZgtu7lJ1dsaQhj82E=)
                          3: C011E716845611EFA55F8043C4F9AE02.roa (hash: pkFZgeOoJ8iOEM13k0fNneKGX0rGx1nkPohIG5roll0=)
                          4: EF2481168BCA11EDBED45E54C4F9AE02.roa (hash: yDLtGnYU5lMrLDnFX8vRyhLOoi06rgga2yxVGlgTVrU=)
                          5: 8867D06A4D8211EF8C95A448C4F9AE02.roa (hash: WGI7L4FYzb6GYe2YpV7oc/HelbiNBr643jFG1FE873s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158 (0x86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
        Validity
            Not Before: Jan 30 20:45:10 2025 GMT
            Not After : Feb  6 20:45:10 2025 GMT
        Subject: CN=679be4d6-77a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:30:b3:b7:7a:cc:c1:42:89:db:a9:f0:0f:
                    a2:6d:60:bb:e7:88:d6:1a:a9:16:9e:38:e0:6e:e4:
                    4d:3b:c6:bd:4a:b6:b4:88:a9:2d:ae:39:17:8a:11:
                    6a:c5:16:69:d5:5b:82:78:f0:49:90:1b:d6:25:4d:
                    30:2f:d2:e8:a8:6c:a2:5a:81:4c:8f:b7:df:fb:64:
                    f8:c4:c4:36:c7:81:1f:67:f4:26:46:74:de:d2:88:
                    6e:15:76:d0:ce:c1:a7:88:0c:00:96:73:c8:6b:64:
                    ef:15:a1:09:23:eb:9b:f8:db:9c:d3:1b:dc:0a:d7:
                    29:63:a9:6c:4f:fe:28:71:83:5c:41:cb:34:c7:2b:
                    9f:05:6c:3f:e9:a3:d0:9a:5e:b3:6d:25:66:e5:3e:
                    cb:0d:77:f6:7f:37:78:da:7b:8d:5d:27:c3:79:dc:
                    3c:dd:85:3c:c9:d7:88:76:bf:26:19:a4:29:61:16:
                    1f:3b:b3:e2:8c:ad:9c:ec:a1:2c:1a:c1:cf:84:fb:
                    8b:bc:44:c4:e5:85:78:8b:6f:30:f7:11:f4:a8:a8:
                    61:35:58:46:9a:f5:8d:ba:91:1f:ac:58:97:40:6c:
                    c5:a0:d1:23:c6:23:a8:27:a2:11:fd:d4:04:65:41:
                    c0:9f:09:58:ad:8c:e6:9f:72:38:31:1c:b9:87:75:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4D:3D:FE:08:37:4D:7F:EF:C3:4F:01:94:B4:7A:C5:3B:08:4C:09
            X509v3 Authority Key Identifier:
                keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f6:64:c2:ad:0c:b3:a3:10:22:ac:66:fd:2b:e1:7c:a9:d7:d8:
         cb:eb:b6:85:91:b9:0f:ec:a3:23:43:b7:29:f6:36:f7:47:4a:
         13:09:79:20:7f:d0:2b:85:cb:04:1c:43:90:bc:66:76:30:54:
         ef:92:1c:5b:95:52:5a:67:89:42:0c:c5:cb:a2:71:e5:d2:e5:
         3d:3e:91:b1:17:d0:ab:ce:05:d1:09:1f:21:d2:d5:d2:fc:45:
         b7:aa:3e:11:59:af:1c:51:76:b6:4d:76:7a:8d:94:5d:c4:55:
         eb:20:1a:45:88:7e:f3:21:61:03:ee:b1:ef:5d:36:1c:c1:96:
         31:54:16:e8:69:19:2c:3b:b0:24:db:22:c1:70:90:31:0b:93:
         4e:0b:61:59:cf:e4:67:6b:c9:bb:96:5b:50:1e:67:25:9c:ad:
         cf:89:d1:8a:a5:97:b2:10:24:97:06:84:d3:1a:b5:33:52:52:
         ac:60:ef:60:a7:be:1a:35:c4:96:9a:ee:be:03:f9:03:d4:ac:
         19:96:09:fc:7b:c5:e2:46:a8:ff:ae:ba:90:46:d5:da:88:60:
         6f:c1:cc:ca:5b:56:96:85:2f:2c:c3:9c:c7:a1:59:46:d8:f3:
         49:ea:50:3a:c8:e9:c3:4b:d0:bc:4b:48:f3:26:1f:6e:c4:37:
         29:d9:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:50 2025 by rpki-client