Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
File:                     JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json)
Hash identifier:          23SRlZbna6dp6pi8jfObItcebmTU6n0/lgeXfqqTNoo=
Subject key identifier:   53:0F:F0:A2:FF:C6:E0:50:F2:2F:20:3A:E0:DE:87:B6:25:11:D7:D3
Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD
Certificate issuer:       /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
Certificate serial:       0ACB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
Manifest number:          0AC5
Signing time:             Thu 30 Jan 2025 19:31:31 +0000
Manifest this update:     Thu 30 Jan 2025 19:31:31 +0000
Manifest next update:     Thu 06 Feb 2025 19:31:31 +0000
Files and hashes:         1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: H8UQiv23Y45sm6B9igqPgTydOQ5rFnsri8ualZdJqVM=)
                          2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: cME7E3dTvb+EGAR48GSsEEHAaLVHg6TnnZaiv9ezcQY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2763 (0xacb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD
        Validity
            Not Before: Jan 30 19:31:31 2025 GMT
            Not After : Feb  6 19:31:31 2025 GMT
        Subject: CN=679bd393-85e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:af:4f:e6:de:df:fc:4b:9d:12:63:34:3d:23:
                    eb:01:b9:ea:ca:14:d4:28:19:78:20:d7:99:62:02:
                    4b:67:6e:95:9b:bd:25:c6:55:38:ef:c7:8c:8b:39:
                    3b:f0:3b:be:f4:22:97:f5:23:87:d2:7c:4c:c6:72:
                    ca:38:96:c1:5c:b6:35:e3:0f:85:6c:44:0f:51:72:
                    77:b1:ab:a7:94:57:a3:04:a0:a1:66:ec:d0:72:59:
                    39:ff:ff:8e:49:e5:52:b6:a7:aa:e8:d2:ab:5a:1b:
                    b5:f5:de:50:89:74:a7:e0:d7:cf:b9:4e:bb:5f:73:
                    59:5a:a8:14:db:f5:cf:2f:91:ef:c6:0e:46:96:cf:
                    0a:76:13:85:24:f3:12:6c:a7:e5:16:bd:cc:42:e6:
                    f4:38:d4:a1:36:57:38:7f:a2:7e:63:cc:58:44:de:
                    a5:31:02:af:54:c9:fc:68:7c:91:94:cc:73:53:fa:
                    32:af:61:c3:a9:e8:5a:a2:34:71:04:24:2d:36:31:
                    50:11:54:6a:fc:1d:70:78:bf:85:29:8a:db:dd:ec:
                    3f:58:6f:c3:82:62:cc:14:1c:ec:56:15:3f:51:85:
                    67:cd:d7:d7:cd:a5:cd:18:d6:49:37:f3:7f:8d:02:
                    86:e9:ae:32:11:27:ab:4c:37:26:8b:3c:46:a5:cc:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:F0:A2:FF:C6:E0:50:F2:2F:20:3A:E0:DE:87:B6:25:11:D7:D3
            X509v3 Authority Key Identifier:
                keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b3:76:07:7c:db:62:c7:98:4f:11:ff:22:d0:3c:63:05:be:
         a3:68:2b:58:e2:f1:78:c0:eb:94:f0:31:9a:da:44:0e:b1:76:
         70:57:06:33:6a:a2:e6:36:93:d5:d7:12:80:6a:27:a0:39:f3:
         da:c2:84:02:3c:ab:7b:c7:c8:9c:83:8b:2d:e5:c6:ca:76:7c:
         b5:c4:52:ce:f4:e0:31:5e:41:a2:2e:53:46:bb:6b:22:5b:2e:
         ea:51:b7:47:21:57:3c:5a:c4:08:ba:8f:31:a7:b5:c2:9a:fd:
         96:3e:20:1d:86:93:fe:33:f0:d6:30:cf:34:39:c3:47:ba:51:
         d6:a3:14:64:cc:02:a7:a4:eb:f0:06:87:ba:31:05:bb:62:82:
         ed:4f:46:1a:7a:a2:34:02:dd:e7:a0:ea:27:de:de:3e:ac:71:
         41:9d:86:f7:f1:23:c3:1f:96:07:9b:56:26:20:56:fb:53:68:
         b5:20:12:9b:b4:98:ad:15:4a:e9:a5:8b:d3:81:f7:83:83:ac:
         eb:50:7e:03:de:f5:6a:24:af:6f:3c:98:57:06:89:59:33:4d:
         8a:d1:88:12:6b:fc:e1:43:bc:f6:7c:e6:97:b2:e7:1f:e7:74:
         0c:61:b0:5a:99:b8:34:04:e1:b6:db:49:0f:de:2e:d5:78:e0:
         0e:96:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:43 2025 by rpki-client