Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File:                     MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier:          9UhvG0XI1bw950IN0uyPLcFMISU3hywEIM9OWdRso/U=
Subject key identifier:   5B:B9:25:85:79:53:DD:3D:DB:67:29:D5:66:12:77:9A:3C:15:46:01
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       0505
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number:          04EB
Signing time:             Thu 30 Jan 2025 23:50:02 +0000
Manifest this update:     Thu 30 Jan 2025 23:50:01 +0000
Manifest next update:     Thu 06 Feb 2025 23:50:01 +0000
Files and hashes:         1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: iEaZ47pqqiPm9QXQyuAjbjaxE0WLAlxpf4vRM/DvpTU=)
                          2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: /+OweeXh479/cD9G0b5e+2Jv53y0ihaHpeHFAQKxiuY=)
                          3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: MzCxa5//voyTa1PWfOUraFYhl6MRI6DeuUFpM68sXZU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1285 (0x505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Jan 30 23:50:01 2025 GMT
            Not After : Feb  6 23:50:01 2025 GMT
        Subject: CN=679c1029-6ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:aa:06:b3:66:04:a3:80:25:02:b1:79:d0:
                    b1:e0:1b:b8:61:03:2d:aa:23:d0:27:b7:fe:11:0a:
                    bd:8a:c4:b4:69:1b:10:f5:d4:de:a2:37:4c:1a:1c:
                    7a:06:db:74:82:aa:cd:f6:b9:a2:e2:aa:6d:40:c4:
                    1d:53:c9:83:47:6b:4f:e4:ea:b0:2f:0d:68:69:5e:
                    f5:43:5a:f7:93:d7:c5:25:fb:46:ea:43:5e:ae:86:
                    0f:ad:56:01:8a:81:81:fc:38:a1:cd:b7:0a:e7:fa:
                    b0:93:9f:8e:3a:f7:23:c3:30:38:ea:6f:7a:cf:c8:
                    9d:e8:18:93:6e:05:42:50:8e:08:2b:1d:4b:81:4c:
                    4c:d0:17:27:05:e1:10:8a:b4:75:5d:17:a0:a6:5e:
                    aa:6b:0a:32:10:c7:9f:95:87:f9:97:97:46:e5:d8:
                    b4:42:7c:9d:b3:50:54:6a:a6:30:ed:6f:20:10:da:
                    94:c4:6d:a4:7c:d2:e8:1e:31:88:20:2e:a3:dd:69:
                    75:94:a5:43:1c:76:57:b7:55:44:b4:a2:05:66:69:
                    b7:41:c9:9d:de:d0:16:cd:0d:13:b8:8c:23:9a:5b:
                    81:c6:62:f8:59:90:ef:5c:3e:d3:6a:66:97:d9:02:
                    2e:8c:76:15:be:63:41:17:d7:f7:65:57:70:a3:ef:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:25:85:79:53:DD:3D:DB:67:29:D5:66:12:77:9A:3C:15:46:01
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:49:00:90:02:6b:b6:25:cd:85:4a:b3:22:a4:1e:9e:e4:1b:
         27:29:48:f7:89:3e:67:cc:9a:19:14:cc:a0:72:56:e8:f4:8c:
         0d:51:2d:ff:40:f7:c3:65:73:a6:09:af:7e:54:88:d8:48:56:
         6d:d7:e7:a9:ae:ba:7a:64:ef:98:e1:d9:c9:eb:e7:a4:d2:84:
         18:4e:13:38:5b:27:d2:1f:d4:ca:b5:95:bf:0b:09:ca:d2:f4:
         b7:89:c1:5c:2d:b5:4b:1b:ad:60:1e:83:bf:38:e1:e4:a7:2f:
         b7:50:72:39:0e:01:fd:2a:f8:4f:7c:0e:40:58:3e:4c:af:20:
         aa:5d:99:44:ab:71:02:33:30:f9:04:c0:23:d9:76:26:f6:f6:
         56:de:eb:f1:20:d9:fd:29:16:2b:b1:3a:f3:f8:86:eb:af:07:
         8c:73:11:74:06:15:b6:eb:54:e6:9c:39:89:0c:09:cd:c1:7a:
         37:a3:ba:3a:ee:5d:aa:47:88:5a:08:f1:ac:d7:d1:6f:5a:88:
         e9:00:18:af:63:89:22:9b:f3:02:99:33:3a:fd:97:96:a3:0a:
         86:49:7e:91:5f:c9:dc:05:74:be:fd:18:3c:4c:8b:bb:aa:6e:
         30:6a:c2:d9:37:d0:54:22:d5:ff:7a:55:6f:3f:6f:ef:8f:86:
         72:fa:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:31 2025 by rpki-client