Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File:                     NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier:          nSxfFzas6FCoGngp1aV9vJM9916/lT2HxQppBafFuV4=
Subject key identifier:   39:78:B6:D5:37:D0:9F:B0:A0:03:C4:83:D2:90:68:5A:44:68:E8:36
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer:       /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial:       13E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number:          13D9
Signing time:             Fri 31 Jan 2025 16:56:59 +0000
Manifest this update:     Fri 31 Jan 2025 16:56:59 +0000
Manifest next update:     Fri 07 Feb 2025 16:56:59 +0000
Files and hashes:         1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: SncGw4/ki7UG8v2NG/hPMJqpPw70CzpxPjLg1/Aj+oU=)
                          2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: HvY8aLOLbIu6vAeI5+MTO3AgRFsW1gggDw/k0s0xJwI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5088 (0x13e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
        Validity
            Not Before: Jan 31 16:56:59 2025 GMT
            Not After : Feb  7 16:56:59 2025 GMT
        Subject: CN=679d00db-d8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:73:ff:b1:e4:5d:f3:e5:64:bf:0c:07:a0:
                    ae:5f:13:32:4d:ff:9d:ec:e5:bf:a6:6d:47:6d:d3:
                    18:c5:e8:94:a0:39:31:06:67:c5:8d:61:35:a6:86:
                    8d:24:d4:18:d0:22:b0:0b:0c:4d:3e:1c:84:dc:f6:
                    e7:be:12:8e:c2:b8:4c:46:c2:84:67:06:45:b0:b0:
                    cd:90:30:71:12:0d:86:81:23:20:49:5f:fe:81:48:
                    1b:eb:9a:18:7f:fc:6e:63:82:55:53:c9:92:38:34:
                    3e:00:11:b7:54:0e:25:44:34:9c:7b:7f:77:12:0f:
                    60:75:74:e0:46:b1:1a:c2:1d:fe:37:6f:bd:47:55:
                    48:8c:c5:2d:c9:5a:b7:7a:cd:ad:b7:0f:19:1a:5e:
                    14:19:63:11:4e:59:19:fa:bf:59:2d:db:f8:3b:af:
                    74:12:9c:6f:81:6f:94:e1:9a:4f:aa:3b:92:4c:0e:
                    0e:16:05:71:07:7b:52:c4:f2:50:51:54:f1:f0:2c:
                    5d:76:fc:b6:fe:53:00:63:34:88:78:a5:b8:0b:65:
                    3a:67:53:81:dc:68:90:45:97:f5:d0:9d:37:fc:14:
                    10:5d:db:fb:89:93:3f:3f:b2:0b:27:f3:ec:db:38:
                    fe:3d:91:6f:e0:81:c9:a3:b4:de:d6:d2:ba:c1:a0:
                    c9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:78:B6:D5:37:D0:9F:B0:A0:03:C4:83:D2:90:68:5A:44:68:E8:36
            X509v3 Authority Key Identifier:
                keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b2:e8:f5:bd:14:41:20:f7:bc:99:a7:13:18:2e:62:df:24:
         20:05:9f:e6:42:f7:05:8f:f3:f0:26:75:a8:1b:69:89:a5:10:
         9a:75:1a:14:d0:3b:b2:d5:79:40:1d:2a:2c:23:59:7f:db:c9:
         77:0b:8a:fd:c8:a0:e3:1c:eb:b6:87:15:69:7d:3a:87:9b:3e:
         42:73:a5:fd:6a:26:85:85:f0:b2:5b:75:c9:96:12:7b:19:08:
         fd:ff:27:b6:a1:1f:b3:9e:86:5f:c3:02:2c:ca:68:11:61:96:
         af:59:8b:bb:23:5a:69:08:22:ba:68:1c:33:de:9d:f6:2b:7b:
         48:ef:8e:2c:a1:bd:25:5f:89:ae:da:86:5a:b3:cf:57:2d:62:
         88:da:c1:ed:59:0f:b3:b0:c8:48:f8:93:99:26:56:6d:14:42:
         02:ba:dc:67:13:34:c1:77:f7:51:f4:22:90:84:2c:e4:3d:57:
         e0:7b:84:cb:2f:d7:d8:ea:02:90:30:e3:05:c1:23:e9:6f:cf:
         1c:c1:c4:0d:70:b7:83:c8:b4:8d:1f:02:e5:b9:d5:50:65:5f:
         1c:a9:35:01:e1:dc:79:fd:76:38:32:35:4f:70:18:ec:d7:f5:
         ec:47:3e:1e:7c:60:d0:5f:70:e4:54:71:9b:72:53:7c:b2:a9:
         b1:0f:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:18:43 2025 by rpki-client