Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
File:                     ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft (raw, json)
Hash identifier:          rvSJKGrI2j81zlJAzmN960Onfd8ZGFdAezBL/k+mTBA=
Subject key identifier:   EB:61:3E:BF:FA:E1:0D:9A:4B:70:19:DA:91:A6:D5:94:07:AD:E2:86
Authority key identifier: B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
Certificate issuer:       /CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Certificate serial:       0953
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
Manifest number:          0948
Signing time:             Thu 30 Jan 2025 20:19:53 +0000
Manifest this update:     Thu 30 Jan 2025 20:19:52 +0000
Manifest next update:     Thu 06 Feb 2025 20:19:52 +0000
Files and hashes:         1: ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl (hash: FaX8U8x7fteRuPwgnjlhZMQh781ql3lHLyh4Ks575fI=)
                          2: A7FF3E74AD2511EFB6717A1CC4F9AE02.roa (hash: 8jyodIT0lA23GFn2Etdimkb1I3FPJx9giYmFsDGMJ2Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
        Validity
            Not Before: Jan 30 20:19:52 2025 GMT
            Not After : Feb  6 20:19:52 2025 GMT
        Subject: CN=679bdee9-418f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:a5:24:4a:28:83:0d:f0:ba:14:c6:e8:1c:
                    29:4c:68:9e:30:73:f0:fe:a4:ec:65:b2:15:ae:ce:
                    bd:1b:c0:07:bd:2a:e4:fb:1a:61:3a:b7:2b:a2:50:
                    95:85:b8:32:54:aa:f9:b3:87:9f:78:f6:cd:15:2e:
                    a4:82:3c:3c:f8:8c:4e:73:c1:3b:7a:e6:da:89:45:
                    9c:94:a2:d9:4b:30:af:c3:5b:fd:c8:d9:8f:bc:2d:
                    8f:2d:6c:07:17:42:b1:f6:3e:96:5e:37:34:05:5b:
                    e4:91:9b:b5:ac:e4:7b:59:91:13:ec:1b:bf:8a:00:
                    22:ff:b2:98:02:e3:88:aa:a7:25:ed:46:56:33:76:
                    23:a4:21:bc:95:50:0b:9c:cf:be:07:d5:da:8e:33:
                    3d:51:60:5d:64:42:de:d5:5c:00:33:03:5d:85:c2:
                    e8:15:c4:3a:fc:08:75:b9:06:7b:79:e3:be:af:a0:
                    9a:cb:9a:8d:e3:95:25:57:91:e2:0a:0a:c0:bb:64:
                    4a:9d:75:be:e2:a1:e2:3d:7e:38:1d:bd:62:96:28:
                    d4:d8:50:8c:70:bb:ec:bd:45:99:1c:6e:71:d4:fa:
                    71:87:49:35:17:89:4d:64:d5:50:fc:eb:83:54:a6:
                    5c:f7:9c:ef:7e:68:7d:3a:e3:56:90:cb:3e:7a:e1:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:61:3E:BF:FA:E1:0D:9A:4B:70:19:DA:91:A6:D5:94:07:AD:E2:86
            X509v3 Authority Key Identifier:
                keyid:B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:35:9d:c1:af:0b:37:65:26:33:ad:43:f1:8a:f0:59:56:61:
         21:03:97:df:4b:54:22:20:f4:eb:77:9e:b3:f8:ab:ee:bf:cd:
         a9:19:02:11:69:5d:0b:82:5f:3e:76:a2:52:82:ca:9e:c5:71:
         86:e8:90:ca:b1:5d:98:7f:3c:c0:96:b1:15:e4:21:88:36:fc:
         e4:e6:cc:a8:09:e2:fd:31:3e:01:72:1c:51:ee:9a:89:d0:4f:
         49:0d:08:f9:62:6e:38:07:2f:95:b7:e8:b3:a6:8b:c3:3a:63:
         a1:b4:2a:76:4b:d0:2f:40:8f:c6:0a:ef:70:83:37:e6:99:e1:
         5b:aa:c2:20:76:a6:56:51:3d:0d:d6:2b:4e:0e:a3:89:4f:40:
         f0:f5:9a:f7:59:18:2f:c9:06:81:40:d6:f1:68:48:bf:8e:6a:
         b9:41:10:02:de:59:73:e3:a9:3c:c5:3f:6a:eb:d3:43:4c:8e:
         99:2a:04:11:3e:cf:2d:93:10:73:90:e6:99:10:64:1d:a3:7f:
         df:44:16:04:43:ea:3e:8d:c8:f2:a5:ae:1d:96:e1:b5:83:a0:
         65:91:55:6f:bf:46:b2:49:dc:15:d3:aa:40:04:ee:2f:bc:5c:
         06:d9:1b:18:b0:46:29:7f:ae:68:34:f2:e8:96:03:65:53:8c:
         b2:7b:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:00:11 2025 by rpki-client