Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
File:                     n0OyarpyjoL2JjN_omUh-Oafu8s.mft (raw, json)
Hash identifier:          aoNMflVhwkzJKiF6iDECvXVjZzKLTWqerFkmCr5Ij8I=
Subject key identifier:   CA:E1:E2:10:EB:21:2E:CE:11:FE:51:90:F6:7B:88:4A:8C:45:ED:6B
Authority key identifier: 9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
Certificate issuer:       /CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Certificate serial:       0235
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
Manifest number:          022A
Signing time:             Fri 31 Jan 2025 02:06:42 +0000
Manifest this update:     Fri 31 Jan 2025 02:06:42 +0000
Manifest next update:     Fri 07 Feb 2025 02:06:42 +0000
Files and hashes:         1: n0OyarpyjoL2JjN_omUh-Oafu8s.crl (hash: MRbU7ddOXmn94SXLCO9fkxN8BXeRdoawQvX28hjo58s=)
                          2: 22D1D50A58BC11ED96790F65C4F9AE02.roa (hash: 2pEt0xXsYxk6tYBoEReVG3YbGtxVL1xpYQ5ON1fpVho=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
        Validity
            Not Before: Jan 31 02:06:42 2025 GMT
            Not After : Feb  7 02:06:42 2025 GMT
        Subject: CN=679c3032-54fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:78:d2:33:e1:7d:cb:84:a8:cd:ea:51:38:
                    1a:82:ca:77:68:f3:da:b3:e2:cb:30:39:b8:52:97:
                    bc:89:9b:16:e2:55:03:5f:83:98:50:f8:98:29:03:
                    90:95:01:7b:04:26:b2:3f:e3:29:d7:a8:62:3c:bf:
                    35:a2:a9:64:cb:00:23:9c:5a:1e:78:c1:7c:c5:33:
                    09:97:f0:da:37:40:3e:92:75:60:28:b7:5c:56:de:
                    1b:90:6a:39:f8:c2:b4:55:78:f2:2b:dc:eb:5a:6b:
                    08:2a:5b:9c:02:3f:9c:93:04:90:11:be:81:79:7d:
                    22:f4:27:02:c5:20:39:79:56:1f:62:98:8b:1e:36:
                    21:58:5b:94:c9:4a:78:95:ef:ab:0c:98:fc:5f:22:
                    02:b6:ad:1e:6c:f4:02:ea:3f:f1:53:bf:47:d6:a1:
                    b6:3b:38:74:29:cb:66:09:5c:c0:ed:e4:f3:87:86:
                    32:25:87:0d:c5:e5:17:de:f1:8e:0a:04:b4:9e:5a:
                    2f:26:f8:81:d0:6e:ff:0e:ec:70:99:aa:92:37:7e:
                    0b:9d:c5:6e:26:1c:55:8f:82:e4:18:7f:62:1f:73:
                    58:e5:fd:17:ab:d3:c9:03:f5:e3:3c:b5:b1:e6:a2:
                    e3:b1:b3:cb:3f:c3:cb:4c:da:de:ff:df:85:f4:f8:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E1:E2:10:EB:21:2E:CE:11:FE:51:90:F6:7B:88:4A:8C:45:ED:6B
            X509v3 Authority Key Identifier:
                keyid:9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ab:92:77:2e:cf:a2:f7:b0:43:a4:2a:22:cd:ec:e3:6c:60:
         19:5c:ea:81:0b:d5:79:7b:40:09:e9:11:04:c0:cc:df:ca:af:
         e6:e9:73:ef:01:99:02:58:95:a4:d8:70:e9:2e:ef:23:f6:a3:
         a0:53:f9:bf:9a:f0:fb:27:81:22:ef:39:93:91:79:63:85:18:
         eb:06:73:d6:ac:68:aa:c0:e6:3f:84:02:66:1d:b3:fa:e3:6b:
         7b:3c:94:36:98:c4:7a:c3:07:1d:9d:5c:e8:a1:86:06:2e:9a:
         c1:ae:2d:0d:2a:56:52:9f:99:3a:3b:d6:61:a7:14:59:9b:da:
         95:7b:87:43:46:e8:26:f0:21:2d:38:9d:2a:66:7f:cd:d5:0e:
         ae:b2:2a:6e:15:bd:98:5f:41:7c:cc:74:f5:85:8f:29:42:86:
         e6:82:b0:4f:59:be:4a:bf:1d:4e:8d:c3:de:3d:3c:5a:ad:c1:
         e3:33:d8:42:a0:ab:11:9c:b9:56:17:3c:3d:cd:1e:26:ab:a5:
         9d:b8:d1:27:fe:3f:8b:36:6d:66:77:b8:aa:b1:65:79:12:61:
         de:8a:0f:78:96:51:e6:7c:6c:54:47:08:c2:a5:c8:94:05:dd:
         39:e4:42:98:ae:39:c9:5b:3c:35:ec:5b:61:d5:16:df:2e:29:
         94:2f:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:49:05 2025 by rpki-client