Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File:                     4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier:          sNcvTkaM/4BmXuA2R4DrAMJT+mPPg72wmcb2P4y7ZhA=
Subject key identifier:   B8:94:CF:F2:AA:A7:FF:A1:02:EE:AC:14:B7:01:9C:8A:7F:64:CC:C8
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number:          4E
Signing time:             Fri 31 Jan 2025 06:26:33 +0000
Manifest this update:     Fri 31 Jan 2025 06:26:32 +0000
Manifest next update:     Fri 07 Feb 2025 06:26:32 +0000
Files and hashes:         1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: PAsx1uM3esaFKEQqDIkcSBTbFiB36lqoZtLa5jeiEN0=)
                          2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: naM1jWBBF1HgB1gzetomIgtwuH6iwO3twg6Wvbh3nCU=)
                          3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: HEoFn428OSrwoj9FY9UBG8roOsE7KCgrYxU/d2SrcQg=)
                          4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Jan 31 06:26:32 2025 GMT
            Not After : Feb  7 06:26:32 2025 GMT
        Subject: CN=679c6d18-22c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:6e:3c:eb:57:73:b8:3f:18:40:96:69:e4:
                    6e:ab:bc:21:14:e2:53:ce:d4:c7:c9:48:6f:c2:32:
                    2a:89:d8:2c:7c:ae:ad:79:50:d7:19:f3:b8:a5:52:
                    b5:3d:38:3c:3e:cc:c1:ac:cf:b5:a4:67:a5:7a:68:
                    33:ac:bc:10:a9:14:81:cd:1b:6b:bd:ac:d7:16:74:
                    d5:6c:58:0d:33:99:c0:26:5f:4a:19:ec:7f:55:3e:
                    9b:72:b2:fc:fe:cc:e5:5b:f4:59:93:d8:17:fa:7c:
                    b1:c4:cf:b5:8e:45:a9:0d:a9:81:8c:a8:ba:61:0c:
                    ca:0d:57:bf:9e:24:d8:2c:08:38:12:83:11:3c:ad:
                    2f:a1:99:71:22:ac:50:0b:df:ff:b4:d6:06:23:4f:
                    be:b8:ac:37:9b:f9:96:e9:c7:fb:1e:ff:08:13:b3:
                    1c:c0:b7:33:4c:f8:5a:ca:fb:31:76:58:68:9b:25:
                    2c:a8:ab:39:6a:10:7e:5e:a3:9f:17:ec:ee:2e:3c:
                    86:ea:a6:46:e7:84:1b:b9:c2:a8:58:63:75:6a:1f:
                    5a:88:b4:38:95:30:e2:ac:87:e5:c4:d8:9e:52:3a:
                    84:48:de:2e:5e:00:22:d8:e9:2f:02:05:01:ff:cf:
                    c3:ac:a5:71:9a:3a:0c:3d:b2:57:f8:85:cc:a5:4b:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:94:CF:F2:AA:A7:FF:A1:02:EE:AC:14:B7:01:9C:8A:7F:64:CC:C8
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:81:b9:10:91:2f:fd:a8:90:1b:07:84:c8:f5:74:d7:0c:48:
         f6:0a:ce:22:00:d8:9b:c9:25:68:d0:8d:15:96:b6:40:09:66:
         65:ba:fb:3c:62:4b:bf:f1:f3:47:23:fb:f5:38:53:2f:79:fd:
         2c:9d:5e:ca:77:8e:0c:85:23:dc:a7:11:28:de:c0:16:08:ec:
         d6:16:e7:f3:ec:ce:86:20:fc:9d:79:69:e0:05:a1:69:fa:ba:
         37:c1:c1:5d:9a:30:6e:9b:01:b9:9c:59:dc:eb:37:52:f3:a0:
         5a:af:ba:d9:5e:23:37:72:45:7d:cf:03:04:82:8d:83:e2:cd:
         cd:5f:b8:44:a6:17:cd:f2:a5:2a:65:87:c2:c9:bd:5e:e7:ae:
         8d:ac:09:f4:22:c8:08:4b:78:65:92:49:38:a9:ed:7f:2b:94:
         ca:27:43:d6:e7:2d:89:8e:8d:5d:b8:e9:0f:93:a6:b3:21:4c:
         c1:34:19:d6:22:b3:b3:f7:a1:5a:b5:22:31:8e:6d:3a:bd:b0:
         ba:96:b9:f2:01:7a:df:4b:f7:08:11:fb:17:89:05:97:da:0e:
         a2:b4:0e:6f:75:19:dc:65:9a:ca:6b:90:b8:8e:5d:a1:bc:ad:
         7c:9a:81:2a:69:52:04:5e:db:d5:24:61:40:9c:e9:7e:4d:aa:
         d3:5a:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:36:49 2025 by rpki-client