Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.mft
File:                     0vjfEE-cX4RUbpUJQxMjCXhQtFk.mft (raw, json)
Hash identifier:          YR00dBYqRmIDTziSMnbymElS8LvrKQRydTv/TN4Ptec=
Subject key identifier:   DE:42:83:53:4E:7F:AC:EB:7D:B6:BA:B5:60:15:09:6E:A6:C4:1F:6D
Authority key identifier: D2:F8:DF:10:4F:9C:5F:84:54:6E:95:09:43:13:23:09:78:50:B4:59
Certificate issuer:       /CN=A9186057/serialNumber=D2F8DF104F9C5F84546E9509431323097850B459
Certificate serial:       04E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0vjfEE-cX4RUbpUJQxMjCXhQtFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.mft
Manifest number:          04E4
Signing time:             Thu 30 Jan 2025 23:47:08 +0000
Manifest this update:     Thu 30 Jan 2025 23:47:08 +0000
Manifest next update:     Thu 06 Feb 2025 23:47:08 +0000
Files and hashes:         1: 0vjfEE-cX4RUbpUJQxMjCXhQtFk.crl (hash: ZXYsvEsLea84X1Mh+wzcmALzsZLFhg4nvfoOFqbTtN0=)
                          2: 44BB85E0000B11ECA5BE7350C4F9AE02.roa (hash: 05Z7Ds2KLYAnzX+mKbBWs/7keIcqi+GP5lg3R1Bn+2Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256 (0x4e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186057/serialNumber=D2F8DF104F9C5F84546E9509431323097850B459
        Validity
            Not Before: Jan 30 23:47:08 2025 GMT
            Not After : Feb  6 23:47:08 2025 GMT
        Subject: CN=679c0f7c-cfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:24:f4:9b:b1:95:78:92:b5:83:31:60:e8:
                    0c:39:c5:26:4c:36:9a:dd:fc:83:d5:52:3f:8d:b6:
                    7c:e5:8e:76:31:c0:a5:5c:43:84:cb:73:5c:11:b9:
                    4c:1c:81:04:36:78:e5:a5:77:6f:26:23:96:f6:12:
                    47:b9:b3:87:e5:cd:79:e4:c4:e1:ee:83:55:b4:16:
                    c3:97:7e:2f:30:8d:3c:63:ea:71:d9:b2:47:f9:7e:
                    28:23:7b:9f:ca:52:60:19:fc:e7:94:fa:62:b5:7c:
                    3d:19:c9:ee:7b:db:21:6c:10:22:03:aa:dd:2c:ea:
                    b0:61:cb:76:26:6d:37:28:96:fa:ea:19:f8:e5:37:
                    23:74:6a:75:bd:a5:67:1f:49:ba:8e:a7:88:ce:4d:
                    a6:13:cb:13:48:83:95:6b:55:cb:78:9d:f7:87:ad:
                    4e:e0:9e:45:d0:9c:fb:6f:50:9f:39:3c:b5:78:ff:
                    92:08:a3:9a:5d:9a:ce:68:a7:de:7c:65:46:e9:b7:
                    b4:0c:30:73:9f:33:91:9e:cb:b1:58:ba:81:82:74:
                    99:d8:cb:c8:7b:fe:94:88:31:c4:47:36:d6:55:62:
                    5f:49:69:ab:d2:0b:70:8e:2a:8c:7e:91:54:ec:4b:
                    91:e2:6c:bf:09:0c:2a:30:4d:5d:da:d1:57:da:05:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:42:83:53:4E:7F:AC:EB:7D:B6:BA:B5:60:15:09:6E:A6:C4:1F:6D
            X509v3 Authority Key Identifier:
                keyid:D2:F8:DF:10:4F:9C:5F:84:54:6E:95:09:43:13:23:09:78:50:B4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0vjfEE-cX4RUbpUJQxMjCXhQtFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186057/1172298E000911EC99E7D34EC4F9AE02/0vjfEE-cX4RUbpUJQxMjCXhQtFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:2d:b2:f9:db:c7:c2:b3:d0:81:65:e1:4f:10:24:90:43:
         c6:64:04:6a:54:a8:05:8c:83:eb:29:e9:b5:e0:55:5e:09:8f:
         6f:33:90:46:82:57:5e:ec:2e:a9:7e:33:29:aa:6b:46:97:e3:
         8f:87:e0:46:04:99:e0:5b:c2:8d:d5:f4:6c:ab:a3:fb:84:9d:
         08:f3:8c:ab:b0:0f:1e:38:6a:37:6d:68:8f:f1:cd:84:a7:a6:
         3f:06:39:28:3d:e3:a2:5d:47:c6:a9:ea:02:90:93:21:03:85:
         bd:12:48:50:03:e4:8d:6d:0b:3b:ab:0d:5d:4f:44:7f:65:80:
         be:4f:f7:ee:15:92:0a:2a:82:9d:d4:50:96:eb:d0:bd:32:63:
         d6:e8:04:31:c9:36:ae:25:8b:9c:9e:eb:1a:a2:3e:d8:06:f2:
         92:f9:ce:b4:a5:c2:40:a4:ed:35:8a:88:fc:5d:0a:09:2a:d4:
         3e:05:cc:ce:61:d8:5e:69:f9:27:c9:e6:e3:e3:9c:ef:d3:59:
         de:07:63:70:04:2f:16:b6:1a:6c:da:3a:92:f4:f9:0e:ff:ca:
         b5:f0:cb:5e:4e:66:a2:74:c6:21:a9:73:7d:7a:63:8e:e7:7c:
         f5:82:be:c4:f2:c2:61:df:30:4c:39:3f:05:a4:61:12:ca:16:
         ad:a8:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:18 2025 by rpki-client