Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
File:                     GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json)
Hash identifier:          dH+88LrSS/IR4dFvX0xFxbt11bR2g/eQitjyWLahe4I=
Subject key identifier:   92:B5:F6:5B:C2:70:CD:A0:18:DD:E5:5A:1A:F2:96:61:28:50:35:32
Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8
Certificate issuer:       /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
Certificate serial:       075D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
Manifest number:          0753
Signing time:             Thu 30 Jan 2025 21:29:01 +0000
Manifest this update:     Thu 30 Jan 2025 21:29:00 +0000
Manifest next update:     Thu 06 Feb 2025 21:29:00 +0000
Files and hashes:         1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: boi1GrkV89sMJdtnMlzIpixdsuttCWdhcqtUAFIcjKQ=)
                          2: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: ioUnn9Sg1+1Knr69k6HvCYNkUAJj3SY+tArXzL4hN4U=)
                          3: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: 7BAdUQMZjuuZNgHFdOha+SYqXFalxz5F+SZR0XZCmpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
        Validity
            Not Before: Jan 30 21:29:00 2025 GMT
            Not After : Feb  6 21:29:00 2025 GMT
        Subject: CN=679bef1d-3933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:93:71:d2:bf:79:2b:fc:76:66:85:64:a7:
                    df:d0:26:4e:24:6d:e6:d4:b8:3d:2e:9f:5c:eb:2e:
                    80:ab:3b:5c:85:53:a0:c2:e9:99:80:08:45:e0:8d:
                    f1:ca:fa:87:7a:52:7e:6e:4e:98:fd:f9:64:f9:0c:
                    80:93:9a:d6:42:b4:99:ad:4a:9e:f8:69:f7:11:2d:
                    7a:3e:43:ce:6a:72:2a:98:d6:cb:11:08:af:36:70:
                    1c:f5:91:d1:83:9b:ad:0c:b3:57:b7:6c:01:79:75:
                    1e:69:f6:e2:3a:99:51:8c:d4:42:8c:ac:6b:df:42:
                    50:54:79:17:98:3d:fb:b4:67:9e:54:4b:49:fb:38:
                    5d:1a:ef:50:e6:ab:b5:b7:05:68:5e:ff:17:35:23:
                    8e:18:47:df:9d:61:44:f8:52:32:de:50:c5:48:17:
                    da:3f:6b:ea:41:05:9f:6c:97:cb:92:32:8a:32:73:
                    14:88:84:b3:fa:2d:58:de:eb:db:ff:05:19:63:cf:
                    05:3d:24:75:39:69:1f:35:0d:a1:d0:80:aa:74:8e:
                    78:36:09:89:00:39:b0:ed:b3:9e:3b:5d:01:57:ce:
                    84:cb:e7:19:b1:52:8c:d1:36:bf:1c:e6:bf:a0:02:
                    97:d8:aa:ad:3f:e4:34:c3:3a:23:50:05:f8:36:94:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:F6:5B:C2:70:CD:A0:18:DD:E5:5A:1A:F2:96:61:28:50:35:32
            X509v3 Authority Key Identifier:
                keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:42:51:5c:c2:03:02:07:25:9a:6f:01:53:3c:5d:a6:a4:1e:
         a5:c1:1d:ff:5f:e2:eb:4c:69:00:6c:aa:b9:89:fc:be:90:dc:
         50:14:60:7e:91:d5:3f:03:02:73:38:1a:73:ac:a4:68:87:49:
         f4:5b:60:bb:df:dc:bf:1c:50:db:ed:5e:32:77:96:f7:a8:30:
         e5:e8:c2:a2:95:36:b1:9e:0d:5d:b5:c6:54:e3:6b:ac:6a:64:
         cd:7c:49:f5:7d:bb:47:18:e2:71:17:86:51:12:b5:34:cb:1b:
         b7:76:7c:9a:4b:a5:88:43:00:80:fe:3a:06:15:25:ca:23:f3:
         9b:49:6b:06:fd:38:5b:87:8e:e0:73:e2:ea:c9:26:6e:7c:34:
         f2:c7:27:42:69:fd:55:7d:04:e4:e3:5c:a0:bc:c1:44:e8:cd:
         3d:fa:12:89:53:32:f3:87:c6:b5:c4:1d:8e:89:95:bb:08:37:
         cb:7c:d6:14:38:8f:59:17:94:9b:3d:57:f9:e2:38:bd:06:65:
         7d:53:f7:d1:0b:80:71:8b:3c:b9:00:3a:67:fa:27:60:e3:5e:
         ed:4d:b1:d5:eb:dc:63:e3:da:36:8e:d2:5f:34:7c:dd:e4:50:
         96:f2:5f:7e:85:aa:87:c3:d6:5c:74:6c:91:4b:d6:08:eb:43:
         cc:42:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:30:38 2025 by rpki-client