Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
File:                     GHJyN_a30WUlK_m9s4a24ergVXQ.mft (raw, json)
Hash identifier:          7fnxivsIrbgzo/6gRxeyp1jT/dvgelDvcpG1jFa8pBg=
Subject key identifier:   3E:08:41:26:6C:E4:2B:F7:2B:91:DE:B9:7D:93:F1:0C:67:AC:78:DA
Authority key identifier: 18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74
Certificate issuer:       /CN=A917418A/serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
Certificate serial:       02A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
Manifest number:          02A4
Signing time:             Fri 31 Jan 2025 01:36:30 +0000
Manifest this update:     Fri 31 Jan 2025 01:36:30 +0000
Manifest next update:     Fri 07 Feb 2025 01:36:30 +0000
Files and hashes:         1: GHJyN_a30WUlK_m9s4a24ergVXQ.crl (hash: tVhEOXNl0fZGt5WL+ycgTTDY1Ewi1i+qBs5HzbPn8rM=)
                          2: FCA92EAAE4AD11EC839CED77C4F9AE02.roa (hash: wW4HCqhcoyo/dCvusJDIhbj+A+f9Rh4hUlMCJe2c3dY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917418A/serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
        Validity
            Not Before: Jan 31 01:36:30 2025 GMT
            Not After : Feb  7 01:36:30 2025 GMT
        Subject: CN=679c291e-6da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:d2:c0:fa:50:fb:3d:fe:18:0b:1c:67:a6:
                    93:39:88:f2:c8:12:95:c6:5a:01:3e:00:c7:b3:d4:
                    cf:c5:e5:d0:32:41:4a:82:20:8b:02:2d:06:3b:18:
                    8b:52:4c:8d:88:8c:04:98:9b:7a:c1:5e:68:ab:91:
                    1c:3d:99:4d:22:e5:2a:0e:d5:12:d4:0a:84:2d:c4:
                    ab:19:cf:8f:8a:bf:b2:cf:e5:50:1e:75:2d:d4:ef:
                    1c:95:ac:30:b0:b3:f9:f7:94:fb:60:cf:36:2f:d5:
                    78:0a:9e:7f:88:8f:85:02:21:93:70:1a:97:c2:32:
                    8b:1d:c2:30:80:75:d3:0e:d1:51:a6:a2:27:42:37:
                    25:44:99:2f:f5:df:23:a7:f5:18:ca:4f:38:56:7a:
                    62:52:0b:75:40:c2:2f:68:c5:12:8e:e3:56:64:eb:
                    ea:9b:11:6a:df:db:77:c2:93:cf:ec:7a:79:35:d6:
                    39:c1:1a:8a:99:8f:54:53:5d:d7:a4:94:a3:ca:f1:
                    09:3d:5c:de:a8:68:e7:b8:4f:27:de:cc:2b:bb:c3:
                    71:da:fe:9c:84:31:68:0e:95:b4:ef:bd:11:36:f4:
                    eb:fa:39:a2:61:fc:a9:0a:1a:c7:61:1b:b7:81:41:
                    22:6a:c1:2b:22:79:24:c7:af:d7:75:77:15:2f:bf:
                    b2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:08:41:26:6C:E4:2B:F7:2B:91:DE:B9:7D:93:F1:0C:67:AC:78:DA
            X509v3 Authority Key Identifier:
                keyid:18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:74:d4:fe:f0:71:76:d0:37:a3:6c:a2:67:ac:d3:4b:40:b5:
         b7:ad:e7:b3:02:da:1f:9a:07:13:18:de:52:05:ec:86:3b:b6:
         2c:14:8d:5e:19:6a:35:6e:8f:f2:eb:d3:66:b9:95:ea:c3:0f:
         21:9b:9b:f8:59:1a:15:7f:99:b9:c2:88:c8:03:ae:9b:45:f1:
         f4:3f:33:89:83:c9:05:a8:df:78:3a:5f:37:fc:f7:d9:90:7d:
         7b:3f:1e:44:fb:aa:bd:44:7c:5e:86:74:55:9f:54:21:f6:d3:
         2f:09:bb:55:c6:e1:e3:47:25:3c:d3:9f:c8:2f:3d:89:83:1f:
         8e:41:0c:bc:6b:bd:96:4f:6a:dd:d4:f0:9c:45:25:a5:e4:3d:
         24:d8:a1:b5:fe:4b:a6:f4:db:91:fa:39:7b:fc:a8:13:05:27:
         02:7d:53:19:ea:79:90:c4:e7:d3:54:1a:0b:de:31:1e:1f:f1:
         ea:69:ad:59:74:30:26:ab:23:de:9b:e8:5d:18:38:1f:4b:15:
         d6:72:79:7e:1f:ba:cb:88:4b:df:df:f4:77:1a:1c:c9:66:79:
         25:41:b9:ab:ba:b5:96:c5:ee:b1:71:4d:37:f1:38:fd:41:46:
         d2:08:8b:32:f1:3b:8b:6b:b2:73:22:71:68:c9:63:ce:5c:d9:
         47:ce:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:12 2025 by rpki-client