Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
File:                     r2oY2zoHHvGMylvos1Qz31RPD7I.mft (raw, json)
Hash identifier:          FxL7CAzVJEg+MrfaV606ylQvqUODwxpunNXdQKZuA20=
Subject key identifier:   FC:84:37:EC:E4:52:DC:D8:1D:78:12:B5:45:3A:81:05:F3:04:88:EC
Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
Certificate issuer:       /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Certificate serial:       0B80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
Manifest number:          0B7A
Signing time:             Thu 30 Jan 2025 19:04:35 +0000
Manifest this update:     Thu 30 Jan 2025 19:04:35 +0000
Manifest next update:     Thu 06 Feb 2025 19:04:35 +0000
Files and hashes:         1: r2oY2zoHHvGMylvos1Qz31RPD7I.crl (hash: FSheFn8gZ07+/DXpjtiFsRBEhI+F5Ye/enwm0Vsd03Q=)
                          2: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (hash: tRDPOuysTM3j6RUChVc/lZ1Ir+BGvYj0vPYVhGcTQNo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2944 (0xb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
        Validity
            Not Before: Jan 30 19:04:35 2025 GMT
            Not After : Feb  6 19:04:35 2025 GMT
        Subject: CN=679bcd43-6e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:d7:b0:46:53:3a:a5:2c:17:92:64:a0:d5:
                    c4:19:1e:ad:5a:2d:21:07:3f:43:ec:35:58:85:94:
                    ec:e3:af:b3:60:92:93:0b:fc:13:2b:89:91:33:b3:
                    04:1b:c7:c5:cb:00:c1:42:8a:6d:cd:e5:be:3a:45:
                    68:fa:6a:a8:6e:db:7a:1a:6f:2a:a4:c4:fe:80:11:
                    b8:d8:c5:45:68:5f:91:82:6a:8d:6e:5f:18:06:33:
                    e7:4e:30:2b:0e:0f:ca:48:e7:f0:e8:95:c5:79:e5:
                    0b:6b:5d:70:14:d3:d9:1a:65:52:67:e0:e7:0d:72:
                    61:fe:61:7f:ad:7b:29:3b:56:04:00:75:6a:99:5d:
                    b5:e9:3a:f8:b1:49:cd:7f:88:8f:91:6f:c1:1c:8f:
                    58:c1:b6:ba:67:bc:36:e1:2f:1f:8e:89:5c:59:2b:
                    6a:91:3c:b2:18:9d:1a:82:cb:58:2f:d9:80:98:df:
                    70:9f:e1:4d:e7:e1:5b:2e:13:75:9d:66:9d:8f:92:
                    13:8e:2d:24:e6:c8:d3:f2:75:28:76:6c:e7:39:c8:
                    f5:19:45:d2:09:07:4c:ee:49:cb:a7:85:0e:12:49:
                    04:ce:f0:e7:38:24:e9:ea:b4:f9:38:e7:3f:ad:77:
                    9c:14:cd:c2:5b:e6:58:d1:e0:ea:08:57:9f:9d:dc:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:84:37:EC:E4:52:DC:D8:1D:78:12:B5:45:3A:81:05:F3:04:88:EC
            X509v3 Authority Key Identifier:
                keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e4:71:78:59:e6:ba:68:10:66:47:5d:85:ef:4e:24:0e:4c:
         63:5c:69:08:af:be:c9:fc:cf:80:7c:20:06:8d:db:d4:86:29:
         03:84:fc:78:df:93:56:26:8b:8f:6c:a6:29:a7:d7:0e:6d:2d:
         9a:b1:c0:8c:66:45:47:3e:45:94:aa:6d:38:0d:ba:02:5d:b5:
         4f:6d:ed:8c:f0:4d:35:75:5e:c4:04:82:54:ec:b5:17:8e:c5:
         9a:5b:e6:81:1e:a2:0b:fa:9e:d0:6a:8a:27:59:0e:73:93:88:
         43:cb:d5:0e:d0:79:4c:8a:35:ef:da:93:bd:cb:9d:db:c2:46:
         57:0e:d7:ce:a2:1e:16:79:ca:31:bb:4b:79:57:0e:fd:ae:e6:
         b7:a2:e6:dd:36:b9:b6:93:4d:b3:eb:15:74:0b:89:78:39:2e:
         d4:f3:ba:d5:46:f7:ca:ef:f7:23:48:1a:2a:60:8e:4c:a1:71:
         3f:c6:1e:ce:2d:84:15:b8:8f:36:ac:a2:cc:cf:48:99:13:24:
         50:2b:a6:0a:7e:c3:2a:f1:ca:97:ca:ef:33:cc:6c:b6:d0:8a:
         47:94:8b:a6:b9:b5:0c:69:96:45:41:69:36:c9:1e:dc:e8:56:
         31:2f:f4:9f:87:54:6b:9a:ef:eb:b6:08:0b:0c:07:c3:53:f1:
         0b:80:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:44 2025 by rpki-client