Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File:                     7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier:          7fHbzksIcCLegt5BLrTWFWPSiGddcdc9PhfkvSrZKa4=
Subject key identifier:   10:A0:D3:9A:D7:C8:E5:C2:F9:5E:BC:88:C2:87:05:8D:3E:CC:0D:AE
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       07A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number:          079B
Signing time:             Thu 30 Jan 2025 21:14:07 +0000
Manifest this update:     Thu 30 Jan 2025 21:14:07 +0000
Manifest next update:     Thu 06 Feb 2025 21:14:07 +0000
Files and hashes:         1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: 7UKAhsxt/oKj3TuE9WuvtOk39S5QU5Fc9sgeAhm38qg=)
                          2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=)
                          3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Tzogk+KlaMGiRbq9BoG9FBqCIAU/Ao8ia39qrUgrDpE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Jan 30 21:14:07 2025 GMT
            Not After : Feb  6 21:14:07 2025 GMT
        Subject: CN=679beb9f-a244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:71:38:a2:98:a1:9b:0e:5f:2d:f0:97:41:
                    d5:19:e9:74:59:1f:d4:c4:38:47:30:ef:d2:85:72:
                    41:93:bf:d3:40:92:9a:bb:84:9b:36:6b:3e:26:10:
                    63:9a:94:63:be:0b:65:22:de:02:6a:96:da:75:5a:
                    9e:03:2b:6f:58:4b:10:63:ac:99:c0:1a:54:15:17:
                    69:17:87:78:ce:98:ae:b2:e9:28:7e:6d:4e:20:54:
                    69:83:f8:f2:93:a9:1f:92:48:f2:b1:7b:1e:54:3c:
                    90:c4:0a:49:a1:52:43:ca:79:b3:68:1c:dd:f0:7d:
                    98:a6:25:dc:76:fd:d6:38:ba:72:61:f8:02:2a:91:
                    74:9a:ba:cd:b7:58:55:44:f9:69:b3:e9:3e:88:04:
                    12:3d:01:89:5c:6b:ca:6a:47:52:2c:7f:1a:55:6b:
                    1e:ac:48:69:d9:35:2b:72:be:d4:63:3c:d2:0f:f9:
                    a3:c2:38:11:92:17:4c:ba:f8:34:54:cb:f5:e0:c0:
                    37:2e:38:5d:e6:66:15:ad:59:9d:00:b9:ec:ec:35:
                    27:bd:29:da:3d:aa:09:4b:ca:57:1f:ac:b0:5a:0a:
                    39:07:c7:96:aa:90:94:1a:8a:56:70:4a:1f:c3:23:
                    b4:d6:aa:be:e2:7c:2d:dd:51:c7:ac:de:7d:de:6f:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A0:D3:9A:D7:C8:E5:C2:F9:5E:BC:88:C2:87:05:8D:3E:CC:0D:AE
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9c:07:5f:11:cc:85:55:42:cb:d3:a3:55:4a:bd:bd:19:60:
         e5:dc:bd:5a:d2:bd:ae:4f:80:d8:2a:c7:39:13:96:4c:da:a3:
         f9:5b:77:e8:78:d5:d1:c3:39:59:00:d5:e9:94:61:58:9f:d7:
         06:aa:2d:fc:22:54:3e:03:b1:9a:c0:46:9a:5e:e7:65:46:5b:
         61:62:1e:81:9e:07:e6:43:de:2b:2e:19:6e:89:be:9f:e6:6b:
         fd:1c:8e:00:f7:3b:f3:14:2a:a9:7d:ac:45:73:26:35:43:2e:
         f0:4a:00:24:56:8b:b9:cc:80:1d:d4:53:d0:83:6d:de:d5:4e:
         5d:c3:e2:cf:de:41:53:07:ab:f0:76:fe:85:4e:97:ba:ac:e5:
         f1:f2:c6:df:35:b7:d7:1a:f3:68:f2:83:39:7a:b3:dd:2f:82:
         2f:ed:44:19:db:d9:79:ee:1d:a3:6d:82:da:09:de:95:63:4a:
         59:24:59:e3:7a:55:50:02:69:59:82:9c:28:4f:04:b0:3d:55:
         b6:27:d4:47:ad:ea:1b:7f:f3:f9:d7:2b:b5:ed:e9:37:67:8c:
         a9:8e:75:a8:86:b6:89:85:dd:13:42:19:e5:cd:c4:69:f9:d6:
         a8:b6:f3:d2:9a:ca:0c:05:30:31:1e:07:05:0b:65:17:19:54:
         4d:75:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:53 2025 by rpki-client