Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File:                     Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier:          aImPsZHb+D772CbHvn1y1jghrFXxliEzK7nIUNmnqx0=
Subject key identifier:   59:F8:BA:7F:95:54:0D:80:D4:00:FD:21:2B:A2:72:7C:9F:EE:E3:84
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer:       /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number:          0151
Signing time:             Fri 31 Jan 2025 03:24:21 +0000
Manifest this update:     Fri 31 Jan 2025 03:24:20 +0000
Manifest next update:     Fri 07 Feb 2025 03:24:20 +0000
Files and hashes:         1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: Lknoyade+jhF0Vae8unFRXG+VSh+WHmtjOgDcV6QOC4=)
                          2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: /9Uf2838bCZKpE133UWLyKcpXUA7N6aybd5lPLH4kiM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
        Validity
            Not Before: Jan 31 03:24:20 2025 GMT
            Not After : Feb  7 03:24:20 2025 GMT
        Subject: CN=679c4265-8092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:41:fd:0e:a9:c4:bb:7c:1b:a9:2d:9f:3b:
                    c7:08:ba:8a:a9:80:48:98:6f:45:dd:9e:77:69:0e:
                    29:e3:6c:6a:b7:bf:bc:29:2a:dd:c3:8d:3c:42:0e:
                    1f:37:5a:36:57:6b:42:fe:bd:a7:05:35:01:4e:af:
                    04:82:88:39:9b:41:39:27:2b:fa:0b:e7:07:e3:37:
                    ed:70:32:b5:d2:4b:cf:2c:7f:3b:12:a5:b8:ac:c2:
                    f4:75:94:9a:3c:a8:9f:19:25:55:b5:d1:9f:bf:87:
                    de:06:71:fe:77:bd:5a:07:76:b8:57:e4:1e:2b:ca:
                    94:ba:9d:4b:07:b6:c0:cd:43:8c:3e:c0:d2:6d:42:
                    c8:55:a2:bf:07:c7:f2:f9:d6:e5:72:13:fd:fa:a2:
                    d1:92:8b:5b:bc:d6:5e:a5:e5:9d:ee:56:a6:98:34:
                    86:f6:0a:6f:46:ae:79:45:d6:51:3b:d4:4c:91:38:
                    88:3f:c8:44:4e:8e:4d:47:10:1f:80:1f:26:84:d2:
                    fc:85:d0:48:08:84:da:8e:d2:5d:77:b3:73:a3:cd:
                    50:28:53:e7:93:ad:eb:a4:45:23:bc:18:88:c8:b7:
                    49:52:01:14:78:8d:7c:9d:a9:8c:0a:2c:88:19:e4:
                    59:48:59:95:e6:2f:b2:2a:82:5f:d0:88:8c:8e:c0:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F8:BA:7F:95:54:0D:80:D4:00:FD:21:2B:A2:72:7C:9F:EE:E3:84
            X509v3 Authority Key Identifier:
                keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:30:f7:09:e1:df:50:8b:72:fa:1d:5d:55:e7:01:b6:52:28:
         74:c1:5a:39:52:be:c2:d7:c0:cb:3c:53:3b:04:ea:1d:68:44:
         7d:9f:c2:9a:75:d6:f5:ee:e6:16:e9:93:e1:4e:a6:2b:7c:92:
         9c:2f:8b:f7:8b:6f:2e:dd:b8:56:05:d8:27:a8:a9:e1:c4:92:
         b2:85:ed:3c:df:50:5b:cd:3b:ec:b2:bd:9d:0b:37:58:7b:ff:
         8d:01:ae:1d:98:3d:65:60:0e:5a:f9:b4:88:3c:0d:ae:e6:75:
         dd:03:ba:8c:b1:41:cc:57:6f:ae:83:f7:af:60:94:b8:4f:02:
         12:7a:3c:60:fc:0a:6e:2b:56:e3:3e:ed:e5:19:06:90:81:f1:
         71:42:4b:8d:11:f0:eb:ce:30:54:9a:de:c2:94:18:c9:50:cd:
         0d:3f:b9:ac:76:1e:63:56:f6:f2:8e:db:fa:92:ae:55:68:52:
         b8:33:a4:95:73:d3:c1:b0:76:3c:3e:1d:ee:62:62:73:6d:19:
         1e:d9:2d:53:ec:a7:e7:c0:98:58:08:2c:3a:b5:7c:c3:10:e3:
         74:80:18:3c:e0:76:84:bf:ef:af:7a:9c:1c:bf:74:74:9b:3e:
         fc:bb:df:15:6e:fe:dd:84:b1:f7:b2:28:cd:d9:a2:54:e6:9d:
         23:ad:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:13 2025 by rpki-client