Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File:                     YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier:          S12Z3/LuMTCUTqANw48ydnXwFyWy95dPC2IPmtrQLug=
Subject key identifier:   C1:F0:B1:E2:A2:F0:71:05:81:67:BD:27:0F:47:47:B3:1B:9F:B3:39
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       043D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number:          0438
Signing time:             Fri 31 Jan 2025 00:21:43 +0000
Manifest this update:     Fri 31 Jan 2025 00:21:42 +0000
Manifest next update:     Fri 07 Feb 2025 00:21:42 +0000
Files and hashes:         1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: LxLW5H4kspdseq+2KDt2Ykf9pWQ9iUY+5DPZBijuwsc=)
                          2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Jan 31 00:21:42 2025 GMT
            Not After : Feb  7 00:21:42 2025 GMT
        Subject: CN=679c1796-43d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:c7:b7:74:0a:26:59:fb:af:54:66:5d:84:
                    80:71:2e:41:a2:2e:4c:48:49:bf:f2:e6:70:a2:9a:
                    c5:12:28:0e:e0:39:74:78:d7:91:aa:bb:f2:4f:c5:
                    20:d1:67:51:f9:0c:7e:76:ae:14:f5:40:71:12:04:
                    f8:68:45:5a:b2:8a:44:22:d1:df:6b:0c:14:58:af:
                    46:ca:8a:36:24:e6:55:0d:89:e8:ee:58:9d:4e:bd:
                    f6:3f:1b:22:60:33:6c:38:85:b1:75:e8:3e:09:86:
                    4c:c3:8a:bf:fd:39:fb:b6:5e:4d:29:40:40:a3:3d:
                    8c:fc:01:50:13:8c:80:92:b6:f0:2b:81:11:c1:56:
                    6b:0e:b3:e9:75:5d:50:4d:31:53:d0:e5:1d:2d:92:
                    b8:de:31:46:c5:d3:be:19:70:d5:0b:24:e8:33:bc:
                    6d:f7:e5:46:11:7d:56:04:6b:cd:e9:31:cd:37:ac:
                    e7:92:2c:8c:16:41:cd:34:6d:29:d1:fa:b5:4f:3c:
                    90:c0:99:a2:e8:86:53:97:1c:9e:b7:d4:3e:a4:26:
                    cb:97:af:04:63:11:c4:dd:11:f7:f0:26:f7:41:d5:
                    2f:38:f5:bd:e4:2a:82:1e:8b:ea:4f:42:0e:31:89:
                    43:53:96:fd:c0:0a:9d:1c:5e:3a:21:1c:79:9f:6c:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F0:B1:E2:A2:F0:71:05:81:67:BD:27:0F:47:47:B3:1B:9F:B3:39
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8e:dd:f5:1e:da:79:ac:c4:bf:c4:d1:a1:36:ca:ff:9c:7c:
         ae:dc:63:e2:56:34:91:95:35:52:af:ee:e5:fc:4c:04:97:c2:
         72:fe:b5:f2:5a:a0:07:e9:42:e0:b0:b6:78:4f:bf:24:b5:0c:
         fc:53:57:df:fe:03:a0:a0:2c:4d:3a:d6:a8:76:fd:2a:01:6b:
         c3:60:68:54:6f:29:28:6b:eb:38:93:0c:dd:1e:7b:20:d5:0a:
         19:4b:f0:a2:b5:91:8d:3c:b8:9c:b1:28:dd:11:c3:93:f8:45:
         9a:9b:cd:a0:30:2f:0f:c3:cc:04:4d:ed:6a:57:3b:4d:58:33:
         44:51:6c:1f:0b:a1:e7:3b:d7:8e:27:1c:35:08:16:5b:d9:1d:
         09:21:2d:a8:76:7d:d2:4a:7e:61:68:58:bb:ce:60:7a:f1:65:
         6e:09:1e:79:d4:5c:8f:1a:5b:60:7a:1b:74:f4:a7:10:6b:03:
         ef:c6:d7:56:8f:64:a8:1d:83:fd:a2:de:88:6a:bb:90:e8:a7:
         03:00:d0:bc:98:d7:62:63:d8:2b:bc:55:3f:bc:21:a7:75:6f:
         62:92:07:8c:3a:0a:a9:bb:0d:ec:e2:d9:9e:6d:60:6c:05:2b:
         2b:c2:bf:5b:71:1d:02:43:48:bc:7a:ab:f2:5c:0c:ba:81:42:
         81:fa:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:35:55 2025 by rpki-client