Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft
File:                     vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft (raw, json)
Hash identifier:          hFFxBiEWH7SvrZB2S/SGdNDuCXVU82Gs82FLEh8zIOw=
Subject key identifier:   F6:25:79:11:F5:90:34:73:94:21:71:17:00:74:45:01:54:13:9A:F5
Authority key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12
Certificate issuer:       /CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312
Certificate serial:       0653
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft
Manifest number:          0647
Signing time:             Thu 30 Jan 2025 22:28:38 +0000
Manifest this update:     Thu 30 Jan 2025 22:28:38 +0000
Manifest next update:     Thu 06 Feb 2025 22:28:38 +0000
Files and hashes:         1: vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl (hash: BcMCmV1XHQ0ABpUgUa4ADVo5qnr8NLcv8XrCqmw1jz0=)
                          2: 62D6FB5474D811EB99569279C4F9AE02.roa (hash: d5GYDhOIlD2Y6V3aPBFRagLvqFIYFYSveCQyFaynEfU=)
                          3: 625827FC74D811EB99569279C4F9AE02.roa (hash: nuHbMZ7jdYXMsw/8MYqt1N+pl2yGg3LZQWJTXeLOE+g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1619 (0x653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312
        Validity
            Not Before: Jan 30 22:28:38 2025 GMT
            Not After : Feb  6 22:28:38 2025 GMT
        Subject: CN=679bfd16-e74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:2d:13:43:67:63:46:06:de:54:3d:0f:fc:
                    51:a1:72:00:3b:07:5b:51:07:23:c9:3b:fe:e3:c5:
                    f5:07:af:a0:e7:cd:b7:24:76:6a:b6:c2:7f:50:7c:
                    c9:62:5c:e8:30:b3:58:d9:77:a2:ba:bc:80:9c:c7:
                    5e:23:5e:46:b6:e8:8e:48:f9:26:22:79:b5:59:41:
                    fa:d7:5f:eb:5f:e5:af:07:8d:d1:31:91:70:7a:9b:
                    45:05:16:46:70:9c:d9:92:15:10:c3:48:68:d6:a9:
                    0b:ad:b9:68:d6:20:43:b9:ef:aa:c2:cd:ce:9a:c4:
                    b7:0f:68:95:d2:46:39:56:f6:10:63:c2:fc:3d:93:
                    f8:98:d9:73:fc:0e:52:08:06:b0:59:9c:83:9d:53:
                    7c:c5:cc:9d:81:06:d7:f7:b0:c1:9e:8e:ec:35:4e:
                    02:fe:06:5d:2c:71:22:c3:09:f6:14:7f:3b:95:14:
                    53:11:f1:09:75:eb:74:78:7e:16:05:ee:44:b9:58:
                    0f:f3:9b:47:2f:44:f1:87:78:23:b4:85:53:0e:10:
                    f6:59:61:36:e3:72:47:f8:fd:44:95:36:2f:67:d0:
                    49:c3:27:b4:ca:68:f5:1c:75:eb:8c:92:c0:e1:46:
                    ae:3b:2f:40:8f:87:7f:3f:ff:8c:4e:87:69:0d:96:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:79:11:F5:90:34:73:94:21:71:17:00:74:45:01:54:13:9A:F5
            X509v3 Authority Key Identifier:
                keyid:BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:5f:63:a3:ad:cb:0b:6a:af:c4:5c:87:80:12:80:45:61:
         ec:2c:41:c4:34:ba:12:4e:3d:8d:51:ad:75:58:d2:a8:72:d0:
         09:a8:f1:e9:88:a6:de:58:5a:b8:2b:8f:72:66:43:23:d7:24:
         13:fe:13:1c:04:4a:2b:7c:50:98:52:17:3e:39:b5:b9:6d:30:
         4d:5d:88:9e:89:13:fc:1b:bb:bd:25:cd:9f:6b:35:e4:ca:c6:
         67:9e:2a:ae:2c:78:7f:61:d9:5e:6d:9b:52:0e:25:75:37:38:
         ba:18:08:e7:4d:79:a7:f2:b4:59:05:1f:41:e5:da:50:07:64:
         42:ee:ec:40:24:44:bc:05:ce:f7:7b:5e:be:8f:07:4a:8a:d5:
         96:e1:55:b8:b2:38:12:c2:9f:77:a4:8f:fe:7b:eb:da:72:aa:
         c1:05:0d:ee:8a:d5:9c:06:11:e2:50:a1:79:0b:0e:08:43:2b:
         ce:48:43:3b:0e:ce:65:d6:77:42:76:6f:69:40:ef:74:84:2e:
         c0:fb:34:28:4b:9e:e3:de:d2:40:00:3f:e2:2b:ac:b9:99:a6:
         86:41:7e:4e:f6:9e:49:89:b9:b7:8a:e8:ae:e1:41:ee:a3:07:
         5e:73:f9:c5:d8:92:e9:2a:99:da:71:8d:75:1b:2e:a8:49:40:
         b6:72:31:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:18:19 2025 by rpki-client