Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
File:                     YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json)
Hash identifier:          /LHi0Zde/Q8gPQZveJaog22HSDlnN7JrAZtnln7nwPs=
Subject key identifier:   4C:6F:BD:FA:0C:57:AC:D8:30:45:FF:8F:05:8D:FB:74:E4:E1:DC:06
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Certificate issuer:       /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial:       0773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
Manifest number:          074B
Signing time:             Thu 30 Jan 2025 21:38:25 +0000
Manifest this update:     Thu 30 Jan 2025 21:38:24 +0000
Manifest next update:     Thu 06 Feb 2025 21:38:24 +0000
Files and hashes:         1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: zWwt4Wrx1dcLDomKu+3MWoaBhULdHZah5GmEXFNjJYs=)
                          2: CDA6F2D0111611EFAD808A81C4F9AE02.roa (hash: m3HRY//GpdVT+hpG8y49SxDvHAGnCrO93hZGlg6oP6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
        Validity
            Not Before: Jan 30 21:38:24 2025 GMT
            Not After : Feb  6 21:38:24 2025 GMT
        Subject: CN=679bf151-9a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:d8:d5:b1:13:7c:34:cc:0d:62:ed:65:cb:
                    71:e3:6b:28:5c:65:55:c7:d5:9e:ab:9c:7f:f5:5a:
                    03:6a:a3:15:8d:fd:2a:f7:89:f9:1d:bf:2a:6a:68:
                    25:f2:34:19:d9:eb:eb:b6:9a:49:7e:d8:38:3d:d8:
                    77:53:ae:87:ff:a4:5a:5a:37:57:13:71:68:5e:db:
                    79:dc:d0:88:a8:a2:23:64:6c:d7:3d:c1:e1:da:da:
                    10:cb:65:c9:57:a4:98:04:07:83:bc:a9:59:98:bc:
                    a4:66:17:c3:06:f8:92:9f:53:bf:eb:1f:96:2e:3e:
                    32:9f:92:b6:fa:ab:3e:9a:d9:3f:06:1f:e7:73:2e:
                    e5:f6:c5:40:d5:97:96:05:24:80:f0:11:05:6f:19:
                    6f:ab:57:ba:79:40:4c:9e:ec:52:b4:18:d7:4a:21:
                    86:66:71:c5:39:67:06:a9:db:2f:68:39:76:f5:7e:
                    4d:ee:ca:77:74:2e:80:e9:cf:f9:61:a9:7a:ec:34:
                    8c:90:6f:bc:f5:42:c8:22:c2:0e:2d:ef:8b:d0:fc:
                    24:4e:04:90:dd:4d:5c:e1:1b:39:ec:4c:92:12:39:
                    07:e2:07:27:d7:13:2e:5e:e3:4b:3f:a7:2d:4c:1f:
                    21:6d:99:50:76:15:23:04:05:f9:a1:c2:71:4a:11:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6F:BD:FA:0C:57:AC:D8:30:45:FF:8F:05:8D:FB:74:E4:E1:DC:06
            X509v3 Authority Key Identifier:
                keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b0:0d:6e:d7:14:28:8e:75:4e:a2:66:a3:ef:0f:07:79:be:
         7e:63:4b:c1:af:c2:c2:71:0e:0a:0d:3a:65:30:88:a1:1d:bd:
         bc:14:e8:4c:03:14:01:5b:82:0d:0e:ef:b2:b3:da:f7:dd:25:
         b9:d3:a4:7d:7d:c3:25:90:b8:03:4c:4b:c0:3f:b9:cd:b4:87:
         5e:ab:1f:b2:63:e4:ee:97:bf:b4:d2:c7:fe:f2:4e:a5:05:6e:
         54:d5:0a:a2:90:88:a6:c3:0e:32:94:38:e0:91:6f:37:41:c1:
         3b:c5:6e:e8:cd:bc:1d:9b:a5:57:b6:30:3f:11:c6:02:ec:36:
         06:66:e7:87:91:df:80:b8:72:18:46:16:ca:2a:d8:51:97:ca:
         08:d6:a6:b9:0f:f7:9a:cb:ef:ec:89:80:6c:b1:85:48:39:fe:
         53:7d:62:25:16:93:6a:a9:68:5d:3e:f9:6e:f0:01:ce:19:25:
         65:3a:57:3d:4e:7e:53:28:cf:a2:d6:e4:4b:23:ea:84:5e:1c:
         64:d8:6f:45:a6:14:f7:e2:80:1e:57:52:0b:ce:34:61:6e:da:
         b9:0e:65:ad:88:16:3e:db:db:a2:8b:72:dc:de:97:a1:5a:1b:
         74:1c:03:c9:d8:b5:4b:ee:a9:e4:07:b4:77:13:15:8a:b2:a4:
         2f:0b:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:24 2025 by rpki-client