Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File:                     tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier:          T1rLxgMc+gjg6LV6jknCMXpevJoO+WUWzEjg8+SkKbs=
Subject key identifier:   7C:3D:F6:D7:A0:6E:12:28:DF:93:3A:58:CD:53:50:D4:28:9B:46:16
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0AD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number:          0AD0
Signing time:             Thu 30 Jan 2025 19:30:00 +0000
Manifest this update:     Thu 30 Jan 2025 19:29:59 +0000
Manifest next update:     Thu 06 Feb 2025 19:29:59 +0000
Files and hashes:         1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: yD/BRppQYhrPrz+O35c+nsOqfCfGo8NgskzFPSA9dzk=)
                          2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: muZS9WNxEL2wJKlgL2513BvJDYDXcwI4cyb0WW+U1LY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: Jan 30 19:29:59 2025 GMT
            Not After : Feb  6 19:29:59 2025 GMT
        Subject: CN=679bd337-580f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:06:b0:45:ea:35:43:ea:55:a6:75:76:55:95:
                    c4:2f:c7:06:ea:4f:98:6d:14:7d:81:c9:f5:83:c2:
                    67:d7:33:cf:38:1e:94:0a:96:17:4d:98:d7:6d:a2:
                    90:c9:96:e5:01:89:b8:21:30:d5:19:6a:a5:d9:fd:
                    ac:b5:48:78:78:f3:42:3d:cc:12:66:9a:67:08:7f:
                    3f:d7:9e:48:c9:aa:9b:bb:86:2b:a6:83:3c:32:77:
                    4f:19:8c:0b:4b:2a:8d:c1:84:d7:44:be:20:4a:05:
                    77:16:be:a3:18:20:fe:8a:ae:23:94:43:cb:27:bc:
                    0a:6b:e7:0d:69:1e:9f:8c:55:30:82:2e:50:cd:30:
                    67:33:10:34:13:01:5a:98:b8:b8:a5:73:c2:e2:5d:
                    d5:14:87:96:c9:12:6f:06:35:ad:99:3c:0f:a5:4c:
                    c0:82:d6:84:b1:49:44:b0:6c:35:51:31:51:64:76:
                    84:32:78:60:f8:83:0a:7e:c1:2f:aa:41:3d:06:d0:
                    03:9c:44:43:42:d0:9f:6d:bb:fe:4c:cb:78:e4:8b:
                    9f:2a:ca:13:3b:74:16:39:4a:4a:a1:3c:c7:ac:c8:
                    3d:d9:c9:ee:f7:7a:ae:97:3c:5c:bd:3a:d5:e2:18:
                    22:62:4d:88:c0:71:3d:8e:91:2e:16:19:3d:e4:2e:
                    f6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3D:F6:D7:A0:6E:12:28:DF:93:3A:58:CD:53:50:D4:28:9B:46:16
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:33:35:03:1b:5a:ec:ba:8a:d6:60:37:8d:da:d9:02:d3:43:
         c4:5a:90:5a:31:07:e6:8d:5c:78:40:e0:d7:95:90:21:aa:b8:
         ef:05:be:57:93:3e:0c:bf:5e:4a:26:e1:74:72:19:3b:c9:74:
         8b:80:cf:5b:c7:0a:6a:c3:20:7f:0d:ed:5a:48:3e:8b:45:57:
         ee:34:d2:7a:fc:4e:d9:82:73:30:cc:b6:7a:7f:9c:b4:04:28:
         ff:d3:1b:1e:b9:cf:52:e7:a5:03:51:0b:8a:5d:0b:9a:7b:c3:
         f3:be:9d:0c:70:56:21:43:ff:d9:04:d3:ff:e3:ab:88:d9:40:
         a6:49:3c:c8:00:4b:c4:2f:cf:85:5c:a4:ef:3b:12:68:d1:00:
         87:e3:8c:91:2e:1d:f4:75:cd:20:81:14:47:6c:c6:c0:8c:5b:
         8b:44:a0:d7:de:b6:ff:71:a3:99:e4:5c:d3:fc:5b:2f:15:fc:
         f5:1b:eb:c9:4a:11:d4:0e:f3:79:f6:84:a7:66:92:05:38:5b:
         22:82:37:54:9d:fd:cc:39:fd:2b:e2:30:8b:6e:43:79:e3:1b:
         1b:e3:28:38:33:9b:b3:85:ff:52:21:87:47:09:f3:ee:64:60:
         ed:ff:f8:99:9e:59:3f:8b:2d:27:6a:32:d7:61:a3:be:ee:db:
         9c:48:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:37 2025 by rpki-client