Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
File:                     dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json)
Hash identifier:          FnBPxI70apPuBU5kUBefWQ0yzCW/5OghfIUTvrk88Uk=
Subject key identifier:   39:B2:EA:27:DE:77:19:B6:E9:BC:D5:EB:95:59:61:62:C9:17:A0:1D
Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
Certificate issuer:       /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
Certificate serial:       0AF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
Manifest number:          0AE9
Signing time:             Thu 30 Jan 2025 19:24:17 +0000
Manifest this update:     Thu 30 Jan 2025 19:24:16 +0000
Manifest next update:     Thu 06 Feb 2025 19:24:16 +0000
Files and hashes:         1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: JZNIOwnilpg7+EqJUmoF/DrnO7o35umXGaiKg63fOo0=)
                          2: 4B1D295E9EA211EB901A9532C4F9AE02.roa (hash: /xWesDsMi1pD+tn1de40Hq3CgHdzNliJuaUvah0mIOk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2807 (0xaf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
        Validity
            Not Before: Jan 30 19:24:16 2025 GMT
            Not After : Feb  6 19:24:16 2025 GMT
        Subject: CN=679bd1e0-4e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:74:0f:7e:46:09:81:ab:6b:28:bb:12:7c:
                    8c:5c:c2:a1:67:8b:e9:ed:44:0c:29:1b:92:76:8c:
                    83:94:85:ce:d5:42:74:86:ad:17:e8:31:11:e5:05:
                    c2:d1:07:a4:86:60:a4:9d:e2:9f:c8:7e:07:8a:5a:
                    98:8e:57:ef:f0:2b:6c:3b:d1:35:08:f8:08:41:fe:
                    55:2e:65:3b:76:22:6e:5e:d8:22:cf:28:17:00:09:
                    a5:c4:12:83:de:db:bc:34:9f:91:e1:f9:b6:97:cf:
                    d7:46:a6:02:3f:b2:bf:b4:06:3e:4d:de:a3:94:c5:
                    6e:7c:00:df:c5:d2:6c:3f:6a:8a:a2:cd:de:6d:a4:
                    7c:65:81:54:e9:18:f1:c3:2e:62:76:0d:93:5a:fb:
                    6b:4e:84:37:5c:86:38:f3:db:1c:50:fe:fe:92:9c:
                    e9:1e:34:25:a6:67:a1:74:e6:75:59:c5:49:8e:8a:
                    50:55:f2:6c:ec:42:91:29:30:5d:5d:34:b4:9c:8a:
                    1d:26:d9:1b:e5:ea:fe:4d:73:0d:34:69:6d:21:ea:
                    ff:ac:7c:88:31:66:12:23:95:55:14:2c:cc:85:47:
                    aa:e0:53:1f:84:3a:01:de:65:be:d9:15:36:a3:be:
                    2b:f2:df:60:0e:4b:6b:e7:36:dd:58:60:8b:d6:01:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B2:EA:27:DE:77:19:B6:E9:BC:D5:EB:95:59:61:62:C9:17:A0:1D
            X509v3 Authority Key Identifier:
                keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:93:65:ac:9b:f8:bb:4b:32:10:45:04:63:b8:29:e4:d1:b0:
         d0:14:0d:f6:bf:3f:ba:c1:73:4b:ec:93:45:5b:ff:f2:31:28:
         cf:44:ea:c7:5d:f3:34:9f:b2:74:f2:48:80:dc:c4:8a:28:c6:
         74:f0:ff:cd:d2:07:39:e0:0f:ea:66:5d:be:a6:2d:07:61:32:
         5c:a6:d7:e8:1b:77:f1:ef:e5:fd:e7:6e:4b:07:35:42:17:0a:
         0b:97:0a:26:18:e6:9c:b0:2e:c8:46:5f:a0:4f:b3:b5:b2:4e:
         7c:0a:02:4d:98:f0:a9:97:b9:e3:35:fb:60:c3:23:8b:50:2b:
         15:71:52:94:ab:fb:82:6a:8b:ae:b0:c0:20:5a:ea:50:01:99:
         a2:40:5c:e3:e1:75:71:72:ab:ce:7e:7f:23:d4:73:62:1f:86:
         88:67:e0:1d:37:58:32:ea:b4:74:ac:0e:a1:8c:cb:e8:21:3a:
         19:fa:f4:8e:da:9c:bb:ba:15:f2:91:6a:c9:18:ef:f8:44:c3:
         33:bd:11:8f:60:5d:e9:08:1f:2a:bc:5c:da:3f:c3:ab:47:51:
         1a:1b:a5:8e:77:fb:bb:6e:63:ce:af:f7:4f:8c:28:cf:a1:a6:
         d8:e1:c3:e8:fd:d0:dc:97:86:1c:60:d0:4b:64:cd:73:53:c0:
         6d:ed:0a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:05 2025 by rpki-client