Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
File:                     h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json)
Hash identifier:          smJbgWFS45yIl2mXVzK/C8qyDtUFuY2o3xtLx+kUJxw=
Subject key identifier:   30:CC:0F:05:BE:BB:CE:BF:7E:4F:E8:D9:A2:04:E6:5C:C3:10:16:A1
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Certificate issuer:       /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial:       059C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
Manifest number:          0594
Signing time:             Thu 30 Jan 2025 23:15:48 +0000
Manifest this update:     Thu 30 Jan 2025 23:15:47 +0000
Manifest next update:     Thu 06 Feb 2025 23:15:47 +0000
Files and hashes:         1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: 8oq19lgieu0gHVN/aStSEQO5+Ny1ycQaYpqjRl85ZiA=)
                          2: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: UO8+/PNJyP8F2PV5d82ae9pJgiAAnCCFoOA6ej/PePM=)
                          3: C49CE482BEA411EB85828650C4F9AE02.roa (hash: SYzw7W4I8ERB2k6TGS/FM3oGH7TQqDLdsyK12v9ZWyo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
        Validity
            Not Before: Jan 30 23:15:47 2025 GMT
            Not After : Feb  6 23:15:47 2025 GMT
        Subject: CN=679c0823-1fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:2f:89:d9:94:04:8d:73:83:56:fe:02:c2:
                    b9:e2:4c:e4:30:24:76:a0:aa:1e:07:bb:3d:34:8b:
                    94:f6:85:73:7c:81:87:78:33:5d:2c:9e:15:5d:da:
                    c9:ef:3e:83:ac:4c:18:b0:37:f3:56:c7:99:01:71:
                    46:5b:20:df:fe:e7:10:ce:71:d8:4b:49:70:b5:92:
                    5c:2d:3d:1e:77:21:19:fb:54:fa:60:77:af:7a:2d:
                    b3:78:8c:8f:34:ef:f8:9b:1b:e4:22:84:a8:88:f1:
                    ff:38:1b:99:2b:e6:fa:e8:87:97:47:74:d3:e1:2c:
                    09:a6:42:e0:04:34:6d:a4:fc:d0:7c:f3:e3:da:d0:
                    5b:ae:5d:6f:10:df:cc:a1:90:ae:06:cc:c2:67:a3:
                    c5:94:a0:75:2c:72:7b:3e:43:12:a7:c5:21:02:95:
                    00:0e:e3:76:6c:99:90:9e:fe:bb:11:72:f2:cc:1e:
                    8d:b0:5a:cb:f6:02:d9:11:14:5e:9d:9c:28:37:32:
                    b2:a3:b0:f1:82:70:c6:c0:18:08:3b:75:89:c5:1c:
                    52:f7:4a:30:fa:c3:39:44:a7:34:bb:a0:b3:a9:14:
                    73:e5:ca:d3:52:a9:11:13:3e:60:f2:8e:34:65:66:
                    22:d3:a9:dc:45:8b:fa:a4:03:ec:ab:35:e0:52:bd:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CC:0F:05:BE:BB:CE:BF:7E:4F:E8:D9:A2:04:E6:5C:C3:10:16:A1
            X509v3 Authority Key Identifier:
                keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d1:fe:86:a0:9d:0b:25:e0:f5:c1:57:ee:74:9b:c5:e2:be:
         e9:9a:1c:d6:d4:3e:9b:df:c0:ea:06:de:7f:4c:62:c9:29:aa:
         74:85:39:74:85:9d:5a:d0:55:23:71:88:86:18:84:0e:a1:7f:
         be:a8:b5:b2:f1:d3:be:9f:7a:e2:de:16:18:1d:e3:20:82:ca:
         15:95:7c:97:91:2e:3d:ae:f6:ee:06:11:1d:41:dd:46:f7:38:
         33:8b:e9:1d:75:90:43:42:82:09:95:0c:50:eb:44:16:2c:63:
         4e:2d:f8:4a:1c:db:c1:5c:ff:7b:56:c7:5e:87:af:41:42:48:
         47:b8:7c:8c:5e:89:33:71:25:55:d3:07:3e:ba:1b:1f:23:54:
         39:af:7b:54:14:d0:b5:2f:2d:f8:62:c1:65:d4:ba:44:83:d0:
         34:2f:c7:54:b0:a1:e4:e2:19:67:c1:45:4f:c5:5d:b6:de:3f:
         7f:db:0b:ce:2b:ff:2c:6f:cc:7a:1b:0a:1c:7f:1d:5c:74:63:
         8d:cf:78:ea:7a:de:00:20:c4:7a:39:f0:ad:63:46:53:6e:ae:
         66:a0:01:1a:f7:81:8c:af:0e:6e:0e:2b:54:da:f5:aa:30:00:
         99:e7:21:d4:a6:b8:46:54:89:99:b0:62:86:72:b3:48:24:a4:
         9f:30:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:38 2025 by rpki-client