Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
File:                     cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json)
Hash identifier:          IOEhalwFLVnarb/1CEJGUgZ9SOIXfigRr6u0afr5lfc=
Subject key identifier:   1D:15:43:91:58:BA:53:18:99:99:F4:7E:94:9A:51:42:EF:14:19:59
Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
Certificate issuer:       /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Certificate serial:       0725
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
Manifest number:          0722
Signing time:             Thu 30 Jan 2025 21:42:23 +0000
Manifest this update:     Thu 30 Jan 2025 21:42:22 +0000
Manifest next update:     Thu 06 Feb 2025 21:42:22 +0000
Files and hashes:         1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: kCkY3Scg/l31SaaebWz6ghxiDHbre13Hb40FtRKGWzc=)
                          2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: q05bnDBuCJsrUlvlSely8w0jnLrUU3dVN/rTyJ4umLg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
        Validity
            Not Before: Jan 30 21:42:22 2025 GMT
            Not After : Feb  6 21:42:22 2025 GMT
        Subject: CN=679bf23e-1c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:af:03:ec:ae:8e:cf:e5:39:8a:f9:65:c7:
                    08:35:86:68:07:b8:92:16:42:52:a3:c3:7d:7d:b9:
                    f7:25:c1:6f:0f:42:2d:61:92:76:24:86:02:a6:d3:
                    2e:7c:ec:e6:39:1f:7e:ba:9c:18:00:8f:d9:48:1d:
                    4b:a5:6c:2b:a4:b9:b3:1f:f0:c7:7d:fb:5f:5b:8e:
                    7f:e6:4b:b4:e2:08:a6:1b:a9:b4:c8:8f:be:83:43:
                    4e:6f:70:75:c1:99:a6:1a:c3:aa:cc:b6:56:28:4e:
                    d5:f3:1a:01:1a:a1:b4:d9:fb:28:8c:95:98:86:e0:
                    6c:43:fc:bb:91:fa:16:c6:7e:f3:05:ba:05:37:83:
                    dc:6e:f6:92:f7:eb:83:71:6c:c8:16:5e:df:b7:1c:
                    6f:01:54:a8:7a:93:50:ca:02:22:61:0e:64:50:45:
                    34:01:b8:d8:92:51:6e:3d:c5:31:26:3a:81:9d:7a:
                    60:e2:1e:86:ed:99:16:2f:15:37:94:ee:72:ed:51:
                    ad:30:e6:af:06:82:24:42:6d:5d:13:02:25:9c:c4:
                    fc:ac:59:69:30:d8:ed:cb:6a:8c:d7:4f:14:a1:a5:
                    44:8a:fc:9a:c8:ea:3f:e9:b2:d6:81:13:43:ac:db:
                    54:ca:51:22:57:47:25:9d:77:b5:0c:69:90:3f:b2:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:15:43:91:58:BA:53:18:99:99:F4:7E:94:9A:51:42:EF:14:19:59
            X509v3 Authority Key Identifier:
                keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:7a:bc:f1:5b:b0:ad:d1:24:85:99:6e:fb:92:ca:8d:cf:00:
         20:ed:53:34:5a:82:f1:7c:62:e8:37:49:7f:f4:1c:05:0f:bb:
         d4:8a:2f:5f:ca:c3:9f:6f:96:58:cb:c2:d1:0a:2c:b7:79:8b:
         f1:26:e8:df:a9:fe:bd:5a:1d:6d:d9:94:fe:b4:7b:03:6e:36:
         7e:3d:ae:64:91:16:f2:07:f0:31:19:8a:e1:dd:00:80:14:2b:
         47:79:23:b0:d2:c1:f3:b6:7b:f4:6e:79:6d:6f:de:e7:8f:32:
         10:61:0e:16:7b:86:aa:87:c5:65:73:04:41:1f:f9:6d:25:ae:
         09:13:26:da:8c:47:9e:ea:e6:10:24:77:1b:e2:ba:c2:de:d0:
         96:9e:c3:f6:98:96:6e:84:3f:da:e8:63:ee:8c:92:9e:75:37:
         42:4d:77:de:65:c5:ac:fd:1a:0e:6f:3a:74:14:42:26:e6:38:
         b1:99:d4:0e:74:c4:f7:e3:bc:55:0c:a3:96:04:38:29:3b:e8:
         de:32:53:07:fd:db:e3:6a:f3:59:c2:e3:e9:35:c3:3f:b1:84:
         f1:71:59:a6:b2:17:35:dc:e3:42:b5:60:0b:2e:1a:ed:e1:ed:
         ae:3f:2c:8e:25:59:07:e5:56:1d:8e:13:e6:46:94:b5:5b:58:
         af:71:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:26 2025 by rpki-client