Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
File:                     cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json)
Hash identifier:          BUiHNhl0Hyn/HbX7gsOpjFvKp9vA1H0czPgpo+A4d2M=
Subject key identifier:   9B:70:75:EB:24:76:EE:76:27:7B:9F:32:82:1E:D6:87:41:3A:13:92
Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
Certificate issuer:       /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
Manifest number:          0143
Signing time:             Fri 31 Jan 2025 03:34:12 +0000
Manifest this update:     Fri 31 Jan 2025 03:34:11 +0000
Manifest next update:     Fri 07 Feb 2025 03:34:11 +0000
Files and hashes:         1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: a/KOmRK7Fx2E72YYXPJanVEHEsuanBjhcW9155+Xpr8=)
                          2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: jsmEuKgoeYiJY/PhkO97a7NHRngriTFFOmRBgoLfjbw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
        Validity
            Not Before: Jan 31 03:34:11 2025 GMT
            Not After : Feb  7 03:34:11 2025 GMT
        Subject: CN=679c44b3-8f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:40:a7:69:57:4e:16:b9:82:a6:65:e2:b9:
                    e9:8a:e7:78:4e:d4:b8:85:a3:ae:81:08:99:7f:41:
                    fa:94:e8:66:42:50:c2:42:f9:fa:dc:66:71:60:77:
                    8f:33:7d:61:b0:f0:18:85:5c:fc:66:b3:20:fb:98:
                    07:c7:32:d6:f4:49:9d:40:ea:be:68:84:77:39:a4:
                    8f:2d:6e:5c:8a:90:04:c2:1d:c5:20:44:20:2d:84:
                    3e:28:13:10:4d:b6:fe:4a:df:86:06:15:22:eb:f9:
                    82:81:01:52:33:85:e9:0e:9f:a2:c0:bc:77:ad:05:
                    69:6a:09:7c:93:b9:cf:09:b4:99:6c:a0:39:94:3d:
                    87:a1:a4:0e:d3:ac:1b:65:0e:4f:31:ad:2e:8e:16:
                    b6:20:5a:1f:f2:5e:03:de:c8:5c:0a:e2:3f:3f:e0:
                    c8:22:b9:64:e3:95:8e:45:56:36:61:16:e3:ff:20:
                    f8:33:5c:85:f8:8a:e0:4f:43:be:13:18:fa:a2:bf:
                    1b:f7:38:71:92:a3:2d:5c:71:94:9c:31:fa:93:84:
                    48:ad:fb:2f:bd:4f:e7:ed:b7:1b:18:c8:97:ef:47:
                    5a:2e:de:b6:6c:bf:ad:34:8d:42:88:e8:c3:b6:76:
                    37:d7:64:67:3e:37:41:ac:b2:54:b5:c4:31:74:f2:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:75:EB:24:76:EE:76:27:7B:9F:32:82:1E:D6:87:41:3A:13:92
            X509v3 Authority Key Identifier:
                keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:f6:15:63:6f:08:35:61:47:01:db:31:4c:42:e3:8b:34:a0:
         a6:b1:af:20:69:38:bd:a0:b3:90:76:80:82:d3:ea:19:a3:2b:
         e7:93:bf:fe:cb:7f:cd:82:82:aa:5c:21:c1:6c:55:db:31:ed:
         b7:69:0d:d2:d8:ab:89:90:fc:2e:ed:18:c9:ea:7a:80:23:b5:
         66:e0:47:b2:26:f4:7b:7d:61:d5:a1:e0:7f:94:06:d3:21:61:
         2c:63:0a:c2:7e:df:35:84:3a:d5:63:42:2c:a9:ad:72:b7:68:
         dd:dd:df:bb:20:b7:c9:4f:ad:4c:9e:c4:71:95:e5:a2:8b:36:
         fd:8d:1b:c6:fa:f9:ef:cc:e3:cd:ab:9a:da:11:47:3b:40:6f:
         3c:9e:b3:9a:f6:45:c5:b6:8b:f1:45:32:a8:37:a0:0e:83:e0:
         ef:32:e6:59:87:ad:c0:5a:56:20:3e:e9:e1:e0:62:78:c7:50:
         00:7b:c1:23:a2:88:38:6b:c2:76:cd:61:44:54:8b:a9:f4:28:
         79:31:8a:89:03:d4:aa:ce:15:3e:c0:b7:f4:a7:d9:89:ee:ee:
         47:99:33:4f:ef:93:3c:70:65:91:b3:ae:a4:20:0d:99:0a:65:
         65:51:95:1a:53:80:a1:58:23:2a:9b:3e:29:f3:6a:2a:51:dd:
         44:17:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:37 2025 by rpki-client