Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
File:                     RE63U1TDcG453qCP6VBEzSZj1q4.mft (raw, json)
Hash identifier:          4JnR0EJgcePYxxyiK7QB+/yP8dDqrlXRP7h5c8ntOvU=
Subject key identifier:   80:B5:1A:68:EA:71:14:8C:02:E8:E0:91:D8:F6:B3:E3:C7:C9:81:37
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Certificate issuer:       /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
Manifest number:          0125
Signing time:             Fri 31 Jan 2025 03:48:12 +0000
Manifest this update:     Fri 31 Jan 2025 03:48:11 +0000
Manifest next update:     Fri 07 Feb 2025 03:48:11 +0000
Files and hashes:         1: RE63U1TDcG453qCP6VBEzSZj1q4.crl (hash: wxEI3pC6dpzhz2ASWbz47s5Syn9zVvmdQfjt4H6+TXA=)
                          2: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (hash: dpE2TI6QCYIe9HLRMKDulM368RG27zsQFQ0bkNTHfzY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
        Validity
            Not Before: Jan 31 03:48:11 2025 GMT
            Not After : Feb  7 03:48:11 2025 GMT
        Subject: CN=679c47fb-980c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:36:29:70:82:c6:86:5b:8d:6e:5d:3c:1c:
                    59:53:eb:70:33:ec:bf:1a:d2:3b:9e:6f:27:89:b2:
                    fe:11:b3:25:f9:d7:74:f4:b6:ad:da:62:00:7e:5a:
                    9f:a6:af:7a:05:08:63:f1:c3:0e:c4:ff:35:1e:e5:
                    5f:66:ef:57:85:f4:10:d2:3f:8c:16:e1:e4:70:db:
                    0b:7d:45:14:14:e7:d7:52:c7:25:74:13:1f:b0:18:
                    bd:b0:7e:7d:cd:3c:70:7e:b8:92:43:e5:2e:9d:49:
                    d1:96:a4:a8:cb:f1:d9:d3:3c:f6:05:75:41:9b:ec:
                    d9:17:07:b8:bc:ee:02:13:4d:77:e2:c7:c8:10:c2:
                    4d:0f:e4:43:c2:7e:cd:54:11:7d:42:f3:41:9b:c7:
                    0d:c1:a8:f2:1c:8b:32:02:b4:c9:37:59:8d:32:a5:
                    88:21:32:9d:ec:4d:ea:d2:26:3e:f9:da:d6:ee:df:
                    23:38:39:e8:10:06:ac:56:c6:a0:7c:f7:52:ff:d9:
                    c2:7b:89:1e:8f:9e:32:54:cc:7d:c8:82:3c:cb:db:
                    ee:18:18:ad:cf:07:05:1a:ad:a3:f2:f9:27:3c:99:
                    63:0d:06:6f:1a:39:03:1b:02:4b:ee:de:eb:cc:93:
                    0b:0a:de:52:b2:62:09:cd:41:67:95:3e:3a:ad:ab:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:1A:68:EA:71:14:8C:02:E8:E0:91:D8:F6:B3:E3:C7:C9:81:37
            X509v3 Authority Key Identifier:
                keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:d4:cd:3e:63:25:2d:3c:9f:17:c6:67:20:15:7e:e3:8c:
         17:db:d5:f6:94:40:1e:4c:d5:61:4d:f7:53:f7:23:67:9e:b8:
         a4:ed:6c:84:00:a0:4e:b0:a9:13:6c:59:38:ec:13:33:ac:9c:
         68:6d:1c:4d:0c:f9:c7:37:36:f4:47:7e:a8:95:29:7e:f9:0d:
         ca:e1:df:45:db:b7:53:49:44:96:46:4e:13:6d:d2:11:da:de:
         1a:2c:98:b1:fa:84:64:ca:a0:54:68:dc:3c:b9:1e:23:a8:85:
         9d:a0:59:a2:6e:4d:f1:91:98:92:58:6e:79:9f:5b:5b:95:ea:
         3b:51:8b:35:1f:f3:eb:35:65:cb:95:7f:13:69:a0:a4:a0:21:
         9e:d0:93:68:39:a5:9f:64:92:d1:10:c1:ed:55:fc:f8:24:09:
         5f:db:e4:5a:e4:67:bb:44:3f:02:a5:37:59:4f:6a:2c:44:a0:
         b8:6a:b0:73:59:95:2c:10:8b:67:49:20:9d:f1:b3:72:00:2b:
         e4:7c:37:54:6f:70:a8:08:3b:33:a0:fe:01:e6:e8:e6:25:fc:
         b3:fa:40:54:fb:13:fe:a8:be:79:74:89:6b:95:c8:cc:74:07:
         ce:f6:b2:6b:34:9c:2e:bb:9c:43:48:d1:b1:30:e3:e6:f2:fd:
         2e:f1:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:35:11 2025 by rpki-client