Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
File:                     Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json)
Hash identifier:          kLxrqRWpMlumowUP0DypNMqP4N693XvmaAVdszKyrsA=
Subject key identifier:   F4:DF:B2:4D:8B:BA:C4:4A:0F:77:32:8C:BA:7F:DF:FA:B4:45:5B:36
Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
Certificate issuer:       /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
Manifest number:          7C
Signing time:             Fri 31 Jan 2025 05:45:33 +0000
Manifest this update:     Fri 31 Jan 2025 05:45:33 +0000
Manifest next update:     Fri 07 Feb 2025 05:45:33 +0000
Files and hashes:         1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: L0sGGRRI3jTjj7bRS3kWYyJcGBSrw7L+TbduXnY0spU=)
                          2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: UxAygpfGpi/7LbfgcrDHteILaaTojTUKGBKpExRn4ds=)
                          3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: tT0U7je/lStzl+Gd03/CVrFPBnBeNuZUlfzB9Ibn9Ho=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
        Validity
            Not Before: Jan 31 05:45:33 2025 GMT
            Not After : Feb  7 05:45:33 2025 GMT
        Subject: CN=679c637d-8611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:b9:d8:a9:34:cc:2e:db:89:b7:4f:3e:57:
                    82:c8:97:ee:52:95:dc:1f:e8:b3:1b:43:82:dc:9d:
                    90:c9:e5:36:bd:c0:9f:ff:fc:3a:b0:f9:0d:2a:08:
                    08:50:7e:78:82:2f:fa:b3:1a:3e:9c:e9:98:56:cc:
                    43:22:cf:bb:7c:fa:91:2d:44:f5:64:a4:6b:a6:82:
                    d4:1d:55:c4:d2:fb:ee:4c:12:20:03:04:be:eb:be:
                    f6:af:23:5b:c7:29:68:c4:eb:50:5a:7a:1e:c9:6d:
                    91:fc:26:1f:8d:bb:a5:7e:88:8c:5a:60:28:17:dc:
                    de:59:b8:85:b9:f1:b9:45:6b:2f:30:16:3b:e6:54:
                    89:01:68:e2:50:b4:8f:30:01:00:08:d4:9e:14:e4:
                    f9:9b:c4:4d:b4:09:d9:0b:97:4a:b4:99:d0:cc:08:
                    93:06:aa:cb:87:45:06:14:17:df:ff:ec:61:75:cc:
                    a1:6b:cc:d8:6f:f8:b7:35:3c:67:28:f2:2b:99:de:
                    54:ec:0b:1e:ae:09:1a:e3:f2:06:7d:da:1a:da:c7:
                    ac:84:50:73:89:af:ad:31:6b:ed:88:88:5d:c8:8e:
                    7f:ef:ab:6f:46:79:0d:2b:22:b6:44:a7:e5:27:cd:
                    ed:83:20:e4:d3:a6:63:e4:8b:d2:d3:3a:0e:71:73:
                    db:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DF:B2:4D:8B:BA:C4:4A:0F:77:32:8C:BA:7F:DF:FA:B4:45:5B:36
            X509v3 Authority Key Identifier:
                keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1f:64:bc:5e:7f:58:a1:e8:f7:cb:8f:52:2b:88:c4:82:2b:
         e9:50:60:f2:98:cc:34:66:96:c5:7a:cb:34:32:93:b3:d9:f6:
         b8:3c:53:12:3a:b0:b8:98:bb:f8:d1:e3:14:da:a2:53:da:ee:
         d2:9e:f1:d6:99:f5:39:e9:01:cc:e4:5c:14:d4:32:14:89:d3:
         b4:e6:3c:7b:59:23:f4:aa:a0:69:24:fb:22:66:ea:3d:b7:93:
         40:64:83:f3:3a:b9:24:69:b2:98:b0:cf:5f:21:5c:26:2b:02:
         69:6b:4e:87:06:3b:47:34:06:e0:6a:0d:72:87:7c:10:75:ec:
         63:b3:e9:a5:52:c0:21:d9:4e:1a:19:86:f6:8d:69:56:c7:ed:
         d4:a8:e5:37:29:5f:66:b1:2c:ae:cd:75:83:0c:42:42:d3:95:
         a1:7e:5a:e1:c8:12:68:7d:1d:f1:ac:24:b3:c9:53:32:d5:db:
         5d:72:c1:42:52:6a:d7:ab:1a:6f:f0:94:df:bf:07:5e:d3:78:
         41:c2:96:ef:cf:4f:00:83:a9:d2:e0:11:6b:ca:5d:4b:2e:16:
         bc:98:e5:61:a4:0a:61:7d:4b:89:69:94:3e:0d:5d:22:5d:b4:
         1e:bf:b5:bd:60:97:76:77:98:21:b6:1c:a9:7b:06:e4:3e:11:
         47:ab:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:17 2025 by rpki-client