Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
File:                     t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json)
Hash identifier:          d4DmNPEe3j7UKDNYeZt5cowKFAeVb6SZbFIgVWlY6qk=
Subject key identifier:   84:D7:C7:DB:38:71:81:B4:B2:83:29:57:5F:E3:45:29:F8:A5:13:55
Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44
Certificate issuer:       /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
Manifest number:          C3
Signing time:             Fri 31 Jan 2025 04:56:22 +0000
Manifest this update:     Fri 31 Jan 2025 04:56:21 +0000
Manifest next update:     Fri 07 Feb 2025 04:56:21 +0000
Files and hashes:         1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: NOs+lCCf5OYFo6HxQmugU52d2GT5cNcgPletttgTY1o=)
                          2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: gHv97LbD597egHzs1DHhKJuGArhYuwuC/fceU19SEJE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
        Validity
            Not Before: Jan 31 04:56:21 2025 GMT
            Not After : Feb  7 04:56:21 2025 GMT
        Subject: CN=679c57f5-ed41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:4a:76:54:e7:df:8d:9f:22:63:be:81:c4:
                    55:83:c2:5c:2f:b4:6b:25:34:30:7b:d7:10:3a:df:
                    07:bc:fc:62:62:94:b3:c4:a7:f6:7d:75:71:3a:62:
                    e0:11:40:da:cc:10:be:00:f1:55:86:e0:ef:33:81:
                    48:1b:7d:1a:fa:5b:a5:d0:90:6f:96:06:82:fd:f5:
                    ba:da:9d:78:6e:f7:cf:ba:ec:cd:38:c2:86:3e:a7:
                    3f:d6:9c:42:3f:40:46:f7:e8:e8:fe:72:c1:2d:93:
                    60:e0:e8:86:41:df:88:65:97:a3:90:02:33:52:cd:
                    c6:50:21:d1:df:bc:2b:4b:9f:b4:05:61:63:5c:c1:
                    26:c3:3f:ea:c7:bc:f0:de:3b:ce:c8:15:dd:ad:1d:
                    dc:16:da:33:14:11:c5:34:c6:c5:ad:b7:3e:a8:66:
                    0d:ad:fd:0a:25:73:a2:d0:ac:c1:6c:fd:4f:ac:ff:
                    52:5c:9e:bf:58:53:c8:00:ff:58:5f:72:1b:65:5e:
                    b7:9a:a3:be:ea:be:b1:e6:07:aa:21:98:2f:4f:9c:
                    b9:46:77:91:0e:83:ea:5b:95:e2:b0:89:d3:ff:6d:
                    e4:59:5f:aa:ce:43:7a:8d:4f:36:b7:4e:22:a2:35:
                    68:f5:be:b6:a7:a8:64:3f:ab:00:a7:22:39:64:a1:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D7:C7:DB:38:71:81:B4:B2:83:29:57:5F:E3:45:29:F8:A5:13:55
            X509v3 Authority Key Identifier:
                keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f2:dd:8e:a7:68:75:7b:83:6c:bb:94:7f:9b:d7:bd:b6:04:
         41:3a:6f:b4:dc:8f:b9:6a:51:cf:09:35:3a:8b:79:67:bd:7a:
         bc:23:14:46:cf:88:8b:50:b5:24:0e:d1:69:10:8b:6f:a9:cb:
         3c:0e:6f:1a:6d:d1:0a:c5:13:eb:b2:cd:a5:fd:2b:f7:0f:f8:
         27:36:1b:9d:75:46:28:d8:eb:05:ff:ad:f3:00:35:ee:f5:52:
         4f:a2:e3:4c:0f:77:6d:a4:76:fe:f2:15:a1:a8:ba:7c:1c:15:
         e7:33:70:bc:ca:4a:05:c2:13:d5:f5:d7:2a:a6:7f:a2:73:5d:
         bf:ea:0b:d3:41:17:9d:ed:92:2a:7a:94:e8:09:f6:5c:ba:ea:
         15:63:67:d4:f1:18:f7:e7:b2:09:84:cb:f8:c9:6b:95:84:bf:
         5f:36:4a:73:8a:4b:ef:6c:af:cd:c0:a2:dd:27:e9:43:a4:8a:
         0d:16:d1:f5:f4:f3:e0:56:09:58:90:d6:9a:9b:ea:39:f1:8a:
         df:7c:7b:5c:a7:8a:f6:46:4b:ce:87:91:8f:8b:3b:fc:42:a6:
         23:77:5a:93:1a:f5:b6:10:4b:96:ae:e8:88:ec:0b:23:a5:2b:
         b5:ee:2f:f3:05:3e:d7:f6:a6:5b:d0:8b:90:23:23:fc:44:c8:
         16:20:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:59 2025 by rpki-client