Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
File:                     ZVsEJuo0sZdG7B073LGzdnTfoew.mft (raw, json)
Hash identifier:          WG9CU+rJKSj5jWcfBOIt5ZZCl8c0cSbzwFss1lZ/F+k=
Subject key identifier:   2A:3B:7E:64:08:C1:71:C1:7F:88:6F:03:25:D8:B2:93:58:06:24:03
Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC
Certificate issuer:       /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
Certificate serial:       035C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
Manifest number:          0357
Signing time:             Fri 31 Jan 2025 01:02:41 +0000
Manifest this update:     Fri 31 Jan 2025 01:02:41 +0000
Manifest next update:     Fri 07 Feb 2025 01:02:41 +0000
Files and hashes:         1: ZVsEJuo0sZdG7B073LGzdnTfoew.crl (hash: aBEEPT6wayEAUNtRW9BGfy08SM++Kn4Zz0f3wHt9//w=)
                          2: 681F32BE9EAF11EC9F1F8B11C4F9AE02.roa (hash: uT+8T85I14HALFMS6CstBXWHxtpbrkYw0oumVPHzKVY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC
        Validity
            Not Before: Jan 31 01:02:41 2025 GMT
            Not After : Feb  7 01:02:41 2025 GMT
        Subject: CN=679c2131-9d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a2:2d:b1:fe:d8:a4:d6:b7:5c:dd:5d:39:f2:
                    74:60:fe:27:dd:ba:b2:54:16:89:86:f3:cc:6b:c9:
                    d1:db:09:65:21:cd:ca:65:2d:33:3d:cd:e9:05:55:
                    85:ae:13:4d:24:df:b8:87:85:89:20:64:39:2c:1d:
                    39:3f:da:d8:e4:dc:d8:ff:3f:9b:c7:0b:e3:dc:2f:
                    33:34:b7:6b:10:50:c3:2d:7c:56:1c:ac:5c:b9:67:
                    75:26:18:23:d5:e9:1e:f4:99:46:47:08:83:db:2d:
                    08:03:39:62:7e:35:ae:fa:45:79:66:0a:d7:b7:c2:
                    02:73:f0:fd:eb:77:a6:f9:e5:ef:2a:52:64:ca:01:
                    e1:10:1b:04:86:c0:b6:af:66:ca:66:b2:1f:9b:1f:
                    c7:64:49:ed:52:c0:e9:a6:07:be:ec:cf:e8:42:70:
                    05:e5:23:79:cd:7f:ba:6a:1b:74:69:67:ac:a0:73:
                    5a:ea:24:ac:8c:37:dd:ff:89:7d:f5:89:63:ed:d6:
                    65:83:8f:ff:d3:70:1f:32:e8:8b:d8:41:5e:41:be:
                    bc:f7:d5:b5:d3:db:88:52:29:28:d4:96:fe:8d:1f:
                    50:b2:67:7b:a4:f4:df:de:4b:51:b7:94:77:0c:bf:
                    77:c7:89:94:7b:40:a1:2a:15:30:f2:61:2f:79:df:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3B:7E:64:08:C1:71:C1:7F:88:6F:03:25:D8:B2:93:58:06:24:03
            X509v3 Authority Key Identifier:
                keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:71:9a:b9:39:88:bf:a7:98:65:fd:e0:ab:ae:f9:7b:82:1e:
         1e:f0:5f:e4:4d:f4:6b:e4:e3:94:9e:39:5c:37:1e:56:23:a2:
         8f:cc:0f:e9:0b:32:cc:b3:13:f9:14:73:5a:63:5b:04:81:1a:
         cd:45:3e:9d:a9:16:41:f3:da:3e:d3:54:70:38:0c:45:17:54:
         80:2e:c1:5b:f7:7f:6f:dc:84:68:56:45:6f:3a:da:71:57:44:
         f5:0e:c4:25:44:f9:c8:1c:c2:04:3d:54:6a:b2:51:41:dd:5e:
         1c:5f:f4:93:f5:d0:86:81:a6:7d:1d:f3:e5:26:f8:c9:b9:a0:
         59:2a:ce:d1:1b:d5:ec:23:1e:e4:31:ff:1e:9b:d8:dc:4d:db:
         47:c6:da:ff:d4:0c:37:a4:4e:5d:92:9a:09:44:ed:5c:f1:e2:
         5f:03:72:5a:f3:31:92:66:9e:25:7f:30:90:9f:32:02:76:70:
         eb:c5:0b:52:e8:58:af:da:44:4a:60:49:89:63:14:a6:73:4c:
         d4:d3:5a:fc:13:e9:84:93:26:55:a0:d8:24:39:4a:9a:06:14:
         14:1b:f5:4d:8f:b2:88:15:d3:95:f7:52:e5:dd:d5:ac:e1:85:
         66:96:c1:f0:15:e1:13:a1:12:98:f9:f1:05:8a:d5:36:c7:b8:
         3a:cf:b4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:14 2025 by rpki-client