Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
File:                     RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json)
Hash identifier:          SpQR6jMeKP8Oy4ZHLMSzGmteTH6lY96p3Vd6PkLNi9k=
Subject key identifier:   2C:97:AB:2C:63:07:1B:9A:EB:4C:CA:23:C7:D4:A8:39:2D:4F:53:4C
Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75
Certificate issuer:       /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
Certificate serial:       028A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
Manifest number:          0285
Signing time:             Fri 31 Jan 2025 01:41:31 +0000
Manifest this update:     Fri 31 Jan 2025 01:41:30 +0000
Manifest next update:     Fri 07 Feb 2025 01:41:30 +0000
Files and hashes:         1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: EJJbkCNeaaufmAr2HNm2gYnokV7VM+tdsfuHpEDgbHY=)
                          2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: cDpvh3Uhyb1LJHdjMZekAyyaNaYh9ET+ttEg2FAl8DY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75
        Validity
            Not Before: Jan 31 01:41:30 2025 GMT
            Not After : Feb  7 01:41:30 2025 GMT
        Subject: CN=679c2a4a-d690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:b5:62:b6:2e:77:64:20:9b:58:01:d6:2c:
                    44:5a:10:ad:1a:22:b7:1f:87:3b:34:0b:1a:c5:52:
                    34:15:1f:b0:6e:4b:5e:29:fa:38:f0:90:ab:1b:63:
                    3a:ec:b4:ca:6d:e8:de:e2:79:74:47:88:35:ae:40:
                    fd:3b:2f:dd:db:4e:b5:29:fa:3c:8e:20:44:e7:4a:
                    df:4e:e8:83:0f:32:1a:8b:ef:33:b4:f0:f4:af:3d:
                    ed:a9:f8:ea:8a:ec:20:63:75:cf:02:0f:00:33:b1:
                    98:36:ae:07:9d:10:74:aa:dc:ec:30:62:c5:fa:dd:
                    d4:a4:04:db:d2:01:8b:f1:ea:bf:03:d2:f1:85:81:
                    04:23:d6:70:57:01:a6:81:92:8d:c1:1e:08:8c:4b:
                    8d:76:24:f7:79:13:95:95:3b:17:58:41:4c:5c:12:
                    5c:10:0d:a9:18:9d:35:a6:cd:25:f0:a7:e0:c2:60:
                    71:64:b1:27:ce:47:d5:1e:bb:2f:c5:ac:43:af:c9:
                    ac:9f:c5:fd:09:4c:94:3e:26:5e:a9:0e:96:a6:9b:
                    ea:a4:26:1a:8c:5b:b8:4d:38:6f:57:92:27:50:96:
                    ba:bc:72:c6:b7:71:0f:2d:53:be:b5:b7:87:79:6a:
                    7f:bb:40:c4:b0:64:63:f6:18:62:49:cb:93:20:49:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:97:AB:2C:63:07:1B:9A:EB:4C:CA:23:C7:D4:A8:39:2D:4F:53:4C
            X509v3 Authority Key Identifier:
                keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:03:7c:39:a2:c6:05:6b:23:3b:d8:5b:8e:fc:97:88:a2:ac:
         5b:44:9b:5e:d3:26:45:5f:ba:0f:94:35:0b:f8:9c:74:ba:57:
         10:83:eb:2d:32:9f:ce:24:ab:03:a2:70:31:27:06:cd:33:a7:
         8d:46:43:12:6e:c2:53:5d:1e:9f:66:c7:11:0f:81:57:bc:dd:
         2a:25:5b:ae:24:bc:1b:df:e8:18:46:e7:ea:70:26:f1:68:6b:
         6c:65:2c:ac:e1:30:43:70:27:8c:77:eb:84:08:8d:78:ee:cf:
         c2:85:63:1e:7d:fd:ed:15:1e:48:f8:81:88:fa:8d:b7:9d:cf:
         0c:33:2c:a3:08:4e:1a:41:be:7b:8c:d3:8f:f7:9f:9a:70:64:
         ae:1c:a1:12:9a:e9:b4:16:f5:48:30:70:a9:d1:5c:55:70:75:
         27:64:b0:c2:66:72:7d:88:09:2e:7f:3c:b8:0d:7c:d6:ae:e5:
         f6:66:d1:a5:f5:a4:1e:ec:8c:04:47:55:1a:96:ad:88:a1:bd:
         8a:9d:5f:a8:8b:69:52:09:35:f1:20:52:3e:db:eb:ff:bf:28:
         70:05:43:c7:5d:26:d3:6d:12:ad:24:2c:a6:f7:1c:36:01:c7:
         8f:38:c8:a8:2e:a0:d4:e7:c9:2f:58:98:ec:29:6a:6b:45:f4:
         fd:fb:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:56 2025 by rpki-client