Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
File:                     ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json)
Hash identifier:          d9DPdiWY+Jv5/uKrjLwC2fa80cgyeYSroFasCIFkcw8=
Subject key identifier:   9A:A8:6B:E6:72:35:1F:7F:BD:ED:F8:A1:73:33:08:88:E6:E1:72:B6
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Certificate issuer:       /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
Manifest number:          6E
Signing time:             Fri 31 Jan 2025 05:54:57 +0000
Manifest this update:     Fri 31 Jan 2025 05:54:57 +0000
Manifest next update:     Fri 07 Feb 2025 05:54:57 +0000
Files and hashes:         1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: ZZIMdwgCbhv56itondn9Rmnz4xG1AwByuuWufWZFczI=)
                          2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: QNsCGBs1m1kxcH19eAL+oNOTk3BSVk/mrReHFne6EVo=)
                          3: C82EFE8E38E311EF94CEFA33C4F9AE02.roa (hash: A22A7vfbdFCKohYtFWHmIoIwrTgE4FKBGK/cUFAx+GQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
        Validity
            Not Before: Jan 31 05:54:57 2025 GMT
            Not After : Feb  7 05:54:57 2025 GMT
        Subject: CN=679c65b1-707c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a3:60:17:37:57:8b:51:dc:e3:7c:f5:dd:66:
                    19:93:70:35:d8:ee:39:ef:a1:e4:21:6b:08:e9:9b:
                    23:77:d9:e2:52:19:15:fc:d3:7d:b3:57:8f:0d:e9:
                    91:32:97:61:9f:14:ad:a5:bc:f5:3a:57:da:47:ca:
                    09:09:97:20:8c:68:fe:87:d3:63:cc:d8:b3:56:d0:
                    08:41:13:37:1d:c9:e5:4e:45:bb:f6:de:97:2c:9a:
                    3c:52:4e:57:76:85:1f:1b:0f:d2:35:c2:ad:6c:9f:
                    5c:b1:85:50:50:0b:c1:84:5a:74:46:96:c0:a6:99:
                    fa:67:7f:1d:51:a7:5f:9e:a9:1c:f4:6e:07:4e:ae:
                    a4:09:e1:d1:d6:89:3a:6a:ed:de:8b:28:5f:61:8e:
                    1d:b4:f4:3e:cb:0f:71:1c:60:57:fc:d5:04:33:9e:
                    c5:51:d1:50:a2:7f:a6:ed:00:8f:2f:ed:bd:07:38:
                    90:84:00:6a:6f:f8:1b:a7:d2:12:d1:8b:cd:57:48:
                    39:28:c4:6f:e9:08:75:ad:b2:fa:68:86:6e:22:72:
                    66:62:3f:d9:ed:98:a7:d6:b8:90:0b:66:c8:6d:60:
                    a4:cd:c6:9f:7f:8b:a6:ed:eb:6f:f6:2f:16:4a:b0:
                    da:da:03:79:1c:1f:19:c6:4b:8f:e0:4e:67:c3:f8:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A8:6B:E6:72:35:1F:7F:BD:ED:F8:A1:73:33:08:88:E6:E1:72:B6
            X509v3 Authority Key Identifier:
                keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fe:3d:a7:05:78:8c:7e:07:ba:89:1d:ab:18:b4:f7:8d:ee:
         16:34:1a:bc:ba:2f:ea:1d:9d:09:03:70:75:74:af:f3:20:61:
         7f:e1:5c:6f:4b:bc:a4:b5:b6:e3:1c:d7:3c:7b:9b:1b:96:29:
         94:69:bf:ae:e0:16:b6:3d:e0:1e:e4:61:73:e5:ea:3f:02:4c:
         ec:ea:55:e5:81:8b:e4:39:3d:91:0b:29:86:58:61:84:4d:1b:
         03:40:a9:9c:7c:1e:c9:8f:2c:60:00:c1:28:5d:9e:0d:e9:ce:
         4a:02:34:0c:53:18:32:3a:04:8a:87:2e:87:82:75:e9:01:44:
         f7:a9:c1:ce:38:84:89:1b:4a:c7:19:b8:ac:ae:44:0e:cc:6d:
         92:36:26:ba:34:b0:fd:cf:0e:d9:16:e1:2e:39:87:08:ca:20:
         7c:bf:59:e3:fd:ec:c9:92:4e:06:a0:24:28:e8:76:47:80:ad:
         71:53:89:ea:75:7c:05:8e:67:fb:0d:2a:e0:16:68:8d:72:5f:
         08:80:0d:b5:e2:d4:85:b4:17:f5:32:b3:fa:bc:ca:56:97:2c:
         fe:90:3c:53:13:c5:c7:14:01:df:80:c8:03:e9:cf:8b:b0:91:
         b4:30:54:9e:28:e2:5f:99:18:ec:1a:5d:30:1b:87:02:92:f4:
         2c:a1:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:17 2025 by rpki-client