Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
File:                     f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json)
Hash identifier:          dSs7eI/nz/GVRj5ieU//JmKeRkB2YM8nE0xxMdl2mS0=
Subject key identifier:   6F:C0:67:9E:62:45:93:CA:BE:F1:46:08:E3:D9:99:B2:DC:C4:23:B1
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Certificate issuer:       /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
Manifest number:          EF
Signing time:             Fri 31 Jan 2025 04:26:22 +0000
Manifest this update:     Fri 31 Jan 2025 04:26:21 +0000
Manifest next update:     Fri 07 Feb 2025 04:26:21 +0000
Files and hashes:         1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: UlrdSn4/tVcD6aGFYC0QUTn3VL5CMnHvr49svPCss6E=)
                          2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: hb2FHylcedOLhWNEILcVg0+JejqVxPKA1QnSPd3ZdS0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Validity
            Not Before: Jan 31 04:26:21 2025 GMT
            Not After : Feb  7 04:26:21 2025 GMT
        Subject: CN=679c50ee-c2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:93:1c:bc:d4:59:c0:08:9b:a5:53:9b:aa:
                    a4:e5:e5:b4:34:14:61:82:1a:f2:63:e2:39:c2:fe:
                    6e:a2:f7:9f:09:86:92:c1:d0:fe:ff:32:8f:7a:98:
                    95:5b:94:ec:06:b3:3c:e3:c7:4f:f1:1d:81:64:9e:
                    2e:d2:93:ee:5c:8f:05:37:54:4c:bc:dd:9b:e5:88:
                    1e:91:c4:25:14:d5:e7:dd:2d:05:f3:69:c9:1d:2a:
                    17:fa:9b:f3:c4:73:1b:d6:4c:4c:4a:e6:13:16:23:
                    41:06:ea:f5:4a:7f:00:d4:83:b8:bc:ff:49:89:12:
                    2e:a5:a1:53:22:41:2c:75:a0:6b:a3:e3:ba:33:98:
                    be:34:e6:e5:ad:35:dc:11:85:77:6e:fc:43:57:22:
                    f8:6c:5a:4d:c0:5a:bc:ce:3e:95:90:f6:00:e7:8f:
                    f4:2b:76:d8:9a:5d:42:e9:3a:52:22:e6:66:0e:58:
                    83:bb:4f:04:e7:49:35:3c:70:c6:67:a3:bb:7f:01:
                    e9:ac:4a:f7:c6:df:a6:7c:d1:9d:26:8d:4d:21:69:
                    0f:c0:57:85:92:96:55:3f:f0:a3:a1:10:69:46:72:
                    ce:65:09:2e:2f:b0:16:a9:5a:85:65:01:e3:ef:5d:
                    a9:f4:74:52:7f:2b:10:a3:c9:e1:71:82:3f:41:c7:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C0:67:9E:62:45:93:CA:BE:F1:46:08:E3:D9:99:B2:DC:C4:23:B1
            X509v3 Authority Key Identifier:
                keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c6:99:26:69:6d:92:c1:fa:33:7b:e8:7b:b0:09:fd:08:77:
         bd:44:07:22:41:e5:5a:44:72:4c:d8:2a:5b:cd:56:e0:b7:e7:
         99:51:a1:9c:fb:45:88:53:48:4e:3b:83:87:0a:20:eb:05:c0:
         6e:c9:7c:1d:22:5b:42:35:ec:c8:8c:d9:5c:41:eb:85:9d:12:
         eb:65:56:22:ad:5b:fd:7c:79:96:a6:3f:ce:d1:ed:9d:49:d9:
         fa:bb:81:fb:21:ea:a7:0b:29:77:eb:cc:b8:c2:3c:24:ba:d4:
         1d:1d:37:57:dd:ac:7a:be:25:bd:02:2d:61:05:a0:ba:96:dd:
         2e:77:80:5f:ba:4d:e4:af:8f:e9:45:9f:cb:c0:6c:c0:31:73:
         7b:7c:74:02:ce:c0:48:f2:af:d1:bd:5c:46:38:e2:7a:21:c1:
         f5:4f:a3:9e:99:3c:cd:fa:52:b1:00:85:43:c5:b5:52:5d:12:
         41:51:96:6b:41:ac:1b:90:7f:95:86:da:25:03:be:00:ef:0a:
         25:e6:a5:84:aa:6b:ff:05:f3:35:bc:55:a8:e3:21:c2:7f:cd:
         22:09:ac:5f:4a:68:5d:15:1c:8d:1c:58:43:c0:34:df:97:1c:
         bf:f9:77:34:74:5b:35:35:fa:ea:90:9b:37:a4:a7:d8:e4:aa:
         cb:d5:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:17 2025 by rpki-client