Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
File:                     agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json)
Hash identifier:          SOVnZ+pdDjzcbE3AVA9IxY86TvfR1CqedafZjM20Yt8=
Subject key identifier:   E2:DB:A2:25:95:DB:BC:27:55:F8:8A:C5:91:8A:00:BA:7E:7E:D3:A6
Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
Certificate issuer:       /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Certificate serial:       031D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
Manifest number:          031A
Signing time:             Fri 31 Jan 2025 01:14:27 +0000
Manifest this update:     Fri 31 Jan 2025 01:14:26 +0000
Manifest next update:     Fri 07 Feb 2025 01:14:26 +0000
Files and hashes:         1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: AAbwy/JU/bN08sMhXd5bohmIEPg8LSWrlJHqaC9K4eo=)
                          2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: m1lmrBomInv3RwGPR6n2Hax1CjT2qYjyfLp3Bhn9XcA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
        Validity
            Not Before: Jan 31 01:14:26 2025 GMT
            Not After : Feb  7 01:14:26 2025 GMT
        Subject: CN=679c23f2-89cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:84:56:01:12:18:4a:06:c1:ae:2f:af:97:
                    a5:47:9a:46:00:2a:a7:a5:b1:c0:80:1b:46:48:9d:
                    6b:de:ae:9d:ab:4c:4a:9d:cd:7d:fb:b1:24:71:14:
                    0f:f0:74:ea:8e:77:c8:3f:5d:15:96:31:91:79:0b:
                    45:6e:2e:3d:5b:36:ec:66:c3:50:74:92:67:8e:ed:
                    c2:9b:00:2f:d3:d7:b9:be:d8:93:f8:10:e2:e9:c9:
                    57:15:39:27:5a:1e:c9:c0:fa:f7:15:92:a3:9d:58:
                    e7:1c:d7:b8:24:de:64:d4:19:1e:13:d8:15:bd:aa:
                    37:d4:91:34:d6:98:83:f0:3c:e3:e4:95:be:80:af:
                    af:e9:db:ab:f7:74:9e:3f:60:35:bf:76:03:6f:33:
                    f7:84:33:bd:8f:c1:6a:de:8f:bf:42:b0:5a:3b:06:
                    42:ca:99:8e:e3:8b:b0:26:ed:4b:41:5d:e3:54:26:
                    68:2d:27:71:ad:c7:39:2a:9e:84:25:27:1b:f6:87:
                    55:c3:91:1c:e6:2c:12:41:10:57:16:80:92:04:c2:
                    5f:73:9f:de:95:5f:82:6d:cd:9b:73:a0:c7:ea:f4:
                    a1:39:67:a9:38:f4:ed:dd:5e:dc:34:58:06:31:41:
                    c5:87:f5:49:36:2a:24:84:5b:9e:04:9a:56:93:6b:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DB:A2:25:95:DB:BC:27:55:F8:8A:C5:91:8A:00:BA:7E:7E:D3:A6
            X509v3 Authority Key Identifier:
                keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:60:7c:2c:83:4b:ec:27:38:60:ae:b2:6d:49:3a:fa:6f:c5:
         30:d7:79:57:83:59:2e:93:a3:99:e6:f7:8c:e1:bc:9f:72:a2:
         25:34:5e:ed:51:93:61:d8:67:12:30:74:67:55:1b:ef:f0:65:
         6d:e0:50:eb:e5:d1:54:75:f3:77:de:39:5b:03:bc:40:7a:c7:
         ac:f7:c9:59:81:2e:6b:07:b9:ba:db:b8:d9:27:ae:73:f4:45:
         51:3e:2a:c0:2b:c0:82:f7:ca:5a:10:c9:44:ef:79:6e:06:6e:
         fa:8d:11:9d:cb:0e:b8:4e:94:33:69:96:d9:c9:d0:b9:f1:30:
         d3:a0:29:4a:ec:02:6a:f2:40:ee:d5:c3:6a:6e:0f:b2:e3:c9:
         e0:26:5c:1b:70:2c:5e:0f:aa:3b:5b:47:4b:51:37:ae:6f:32:
         1b:8b:c9:fd:44:6a:e1:dc:29:86:d9:aa:42:f7:f1:44:e3:fb:
         39:de:bd:fb:ed:79:67:7d:39:91:bd:b1:be:77:51:59:b7:3f:
         b6:77:a7:87:84:9b:e9:0c:c5:d6:40:8c:20:2b:e1:e4:44:04:
         c8:e7:5d:b2:af:5c:ff:7d:9b:c9:f8:38:a4:a6:90:ce:2b:8f:
         de:8f:c1:83:a6:97:20:f4:53:6d:24:54:4f:89:83:39:37:85:
         76:2a:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:07 2025 by rpki-client