Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
File:                     FEVIn91QqkSsHSo8OhZuBsZir9U.mft (raw, json)
Hash identifier:          88IODWFl0sqbtIF/AIgn4YEAxEAAN9bHZI2eTRmE8xY=
Subject key identifier:   2D:48:CA:35:D3:04:91:AC:54:3B:40:31:3C:25:63:04:11:9C:0B:5F
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       055C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
Manifest number:          051C
Signing time:             Thu 30 Jan 2025 23:52:55 +0000
Manifest this update:     Thu 30 Jan 2025 23:52:55 +0000
Manifest next update:     Thu 06 Feb 2025 23:52:55 +0000
Files and hashes:         1: FEVIn91QqkSsHSo8OhZuBsZir9U.crl (hash: t4gR1vrEIM3smE3rB4o61SbuCmJUKoeen5n3DsKb+QU=)
                          2: C89AC2A0A4B211EF9FF62E86C4F9AE02.roa (hash: 8PXJVRiniSVe9p4ya9uyu85mww20ol2xvDWw6TIPMkc=)
                          3: F8769F9AA4B111EF8F61B261C4F9AE02.roa (hash: ag01obMxFpg/O5gJ9bwqUFDlT3J7Wgcr8Z3EtzVjPn0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Jan 30 23:52:55 2025 GMT
            Not After : Feb  6 23:52:55 2025 GMT
        Subject: CN=679c10d7-b720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:8c:5d:40:2f:d5:04:0f:3f:ea:82:a2:f1:
                    a7:d3:9d:d2:2e:86:b3:02:bd:e4:bf:34:e4:dd:ee:
                    29:6a:9e:a0:07:74:ce:a2:7d:21:07:98:a7:d8:c6:
                    59:c5:9d:60:bd:13:ad:94:7a:73:bf:35:7c:28:a9:
                    78:bd:36:a5:cd:c1:98:ff:00:89:d0:18:15:fa:0f:
                    22:51:3c:7f:25:42:4d:aa:e1:e4:09:77:a5:b2:f5:
                    6b:28:39:b8:0a:13:cf:23:5d:e5:dc:3b:35:3d:bf:
                    4b:b7:11:3a:92:4a:46:61:0a:34:3e:88:fd:f6:8b:
                    77:8c:73:59:d1:41:aa:de:8b:60:1f:51:2e:d3:2e:
                    71:96:3c:c2:58:95:5f:67:f9:a5:91:16:c2:17:53:
                    4e:75:6d:da:1f:bc:f6:a1:7d:42:ce:ae:84:1b:96:
                    3a:b9:1c:6e:1b:6b:e0:81:ef:04:79:d6:59:48:55:
                    ba:5b:55:df:72:21:13:64:d6:e8:8c:70:58:5f:a5:
                    18:4e:3f:89:9d:4a:d9:69:d1:d1:f9:aa:2d:54:f9:
                    c3:3d:1c:61:0b:e8:23:3e:5a:f8:a7:f1:3f:61:ec:
                    e1:0d:cf:f8:86:48:d9:b4:9a:4e:de:9e:86:cc:10:
                    af:ad:ab:48:00:df:ca:15:27:e7:47:48:5b:59:25:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:48:CA:35:D3:04:91:AC:54:3B:40:31:3C:25:63:04:11:9C:0B:5F
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9c:e4:56:98:41:fd:8f:ec:a6:9f:e8:13:3d:8e:10:75:ce:
         2c:5f:c4:3d:30:a2:78:95:02:c4:f9:ab:bb:2e:f1:20:b6:33:
         83:82:7c:73:29:58:04:9a:ab:72:b2:ce:b3:05:08:64:17:30:
         f2:1b:b0:70:7c:fd:c3:8e:9e:9d:fe:1f:ad:ff:10:86:0c:c4:
         10:fa:e0:9a:1d:1f:2d:04:4d:7c:ff:38:8d:83:cd:06:99:fa:
         a6:fa:59:8c:c2:9c:b7:7d:3e:87:f8:61:c6:d3:f7:86:39:ca:
         8d:e0:98:39:78:88:5d:62:08:a8:20:4a:d1:d7:1b:89:b3:cf:
         a6:6b:7f:cb:7c:20:c4:56:fb:74:e1:b4:af:d8:5b:90:da:12:
         68:a6:83:00:8e:02:ef:1b:88:fe:89:67:81:79:58:98:25:b1:
         ce:35:39:2b:e6:e8:b2:dc:f6:8f:ed:ad:3f:2f:0f:88:b8:64:
         e6:58:10:44:18:2c:19:15:39:d8:f4:72:a5:dd:ac:64:9a:78:
         19:29:1e:2f:06:e1:84:7f:16:88:55:d8:3a:27:17:07:2c:cc:
         0d:62:5f:f0:f5:a1:c5:bd:db:67:34:43:6c:87:8c:ed:50:f4:
         af:7c:d9:14:e2:2f:cb:b2:a8:42:67:43:5a:2a:98:6f:f8:7d:
         41:f0:8f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:42 2025 by rpki-client