Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
File:                     YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json)
Hash identifier:          0HKmDO+6DP6SDxVXVTxHzg34wEW4KFYp++FHhyc0/tQ=
Subject key identifier:   B1:91:50:53:EB:38:0A:77:4A:BD:13:9E:C6:8C:2D:75:5B:F4:84:D4
Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7
Certificate issuer:       /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
Manifest number:          34
Signing time:             Fri 31 Jan 2025 06:42:30 +0000
Manifest this update:     Fri 31 Jan 2025 06:42:30 +0000
Manifest next update:     Fri 07 Feb 2025 06:42:30 +0000
Files and hashes:         1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: RVJXzGfZKQSlinMN+8X7Gt9DkN1WUVhWOI3rO5ep/XQ=)
                          2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: +UFQWnXReAket39ycprPx9UMMcj46jyJIl0XNC8+2yo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7
        Validity
            Not Before: Jan 31 06:42:30 2025 GMT
            Not After : Feb  7 06:42:30 2025 GMT
        Subject: CN=679c70d6-dfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:b6:35:51:7d:06:93:6c:31:a8:1b:80:2a:
                    80:92:b8:24:b5:62:f7:34:1b:87:0f:d7:0e:0b:ab:
                    a1:07:72:bc:e0:5e:54:72:c1:ec:32:ad:2a:35:b4:
                    20:35:b1:f3:23:6c:df:3c:84:3a:c8:5e:6e:6a:f0:
                    0f:1a:5f:8b:23:1c:4a:79:ac:09:e0:43:13:d2:0a:
                    45:90:5d:61:53:e0:da:9f:5e:e6:a9:d0:01:1f:85:
                    55:60:f1:5e:a7:5f:a1:9f:cc:91:8a:0a:82:39:a5:
                    b6:2d:b3:0c:fb:70:28:1d:7f:d7:f0:60:07:87:a9:
                    62:2c:57:db:0d:c6:cc:19:e0:15:76:52:d5:b9:06:
                    99:9f:5e:2c:41:79:00:60:96:18:86:ad:c9:f8:49:
                    b0:68:4e:27:a2:fb:94:cc:74:a7:a4:8b:26:a3:63:
                    e0:57:84:64:fc:80:7e:87:3a:ab:ff:6a:ad:4e:c3:
                    f6:86:07:f6:d8:f4:ab:f9:8f:f6:7f:e9:44:f7:d2:
                    4d:f0:2a:19:7a:27:92:55:48:86:39:5a:0f:50:bc:
                    38:47:b2:3a:af:76:10:55:e4:45:ca:7a:fc:aa:51:
                    c5:5d:42:fa:47:4c:e0:df:12:d1:ba:77:cc:a1:d5:
                    70:f6:3d:75:7b:55:3d:a7:e2:1a:5a:6c:63:e0:76:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:91:50:53:EB:38:0A:77:4A:BD:13:9E:C6:8C:2D:75:5B:F4:84:D4
            X509v3 Authority Key Identifier:
                keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ad:b5:0a:75:c0:e9:69:f4:2d:23:d0:c7:44:d7:c3:2e:64:
         2b:00:83:6b:72:01:5a:1a:6f:dd:99:7b:86:bc:ae:07:c0:53:
         8f:9f:83:38:9b:0d:1f:76:5b:02:bc:e0:99:66:f9:8d:2d:de:
         f5:0a:b2:bf:aa:e6:14:6a:c8:3a:39:19:aa:4e:2b:58:b4:25:
         2a:a3:ca:2c:53:3f:18:84:02:29:f4:ef:f9:52:32:67:56:d5:
         2b:7d:3f:1f:d1:cf:be:5b:37:a0:44:61:4d:2a:8e:05:b4:05:
         a3:00:dd:f6:08:79:b5:da:ec:0c:d7:2c:8c:04:d1:dc:3a:82:
         0f:47:36:78:9d:84:9a:55:83:64:6d:22:2f:bf:49:d5:64:81:
         26:8f:55:7d:ec:63:9d:6a:ce:de:53:16:d5:1e:49:00:33:f2:
         a1:82:23:f7:5a:80:4e:bf:f3:fb:e2:e2:f1:8b:2e:40:16:88:
         fa:45:16:96:3b:16:e6:f7:f9:ac:f0:e4:f6:5b:9e:d9:c9:48:
         cf:57:7d:35:73:03:84:61:4b:18:e2:84:b9:21:29:3a:50:34:
         c1:e2:35:ab:de:01:48:17:d1:ea:7f:10:3f:2e:da:2b:02:b7:
         b6:ca:06:93:cf:d6:e4:5e:42:f3:08:2a:0c:be:c8:9b:cf:97:
         67:54:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:39 2025 by rpki-client