Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          IpUxdlDK/eU67Co5Pfj4BCz6PS0YKg1BUGeFZ09F2DU=
Subject key identifier:   DA:DD:31:E0:63:B8:73:86:21:5B:28:5B:C5:69:A0:A0:78:9E:EA:2C
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       042F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0380
Signing time:             Fri 31 Jan 2025 01:34:00 +0000
Manifest this update:     Fri 31 Jan 2025 01:34:00 +0000
Manifest next update:     Fri 07 Feb 2025 01:34:00 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: fTQqNc/Ej2BTdqKwojbHEQhzNsL5qMzWyyDXhunrY7w=)
                          2: 235C33AA841511EEB8881E26C4F9AE02.roa (hash: +YRAKRYqk613xfLgB0zdZc+SXbgEgwFsbZ4MAXHqfD4=)
                          3: 91F6CB78CC8411EFB64BE274C4F9AE02.roa (hash: Lyqkbw8kpDEXFRP3wM9V8TcwvtVc37CFnp2p01EAY4g=)
                          4: FC458FFABD2F11EFACAEDF48C4F9AE02.roa (hash: JhXAK3rvu+eA5A55zrWLUy9P2VWJ9TdInDYIPpvwJmg=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: aHmcIpJIE1GcUyI4Yny/qSd6Or3byAxj4bJ8cE5T4kk=)
                          6: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: tdnv3yegEbxd1X05RwDaloSoRTHWIFMLf521OQY7jzA=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: aqom3HQAn6x60ccWSgWXEn4twflM44rVgDlrpW0nn+w=)
                          8: 16BF6942E73D11EE8DEA7557C4F9AE02.roa (hash: IJUkoyKq6F6dwcgwQnnfA3U1Ii0VDMRhYlZnBweQndE=)
                          9: 86EB79708F1011EE9F013A61C4F9AE02.roa (hash: sDLFf0VgNj5OaQd/cLxcgFs+ZmQp2L2QZD8I3VKQq+4=)
                          10: 5354E6D2DEC411EF8FDA1417C4F9AE02.roa (hash: UvWKns144QkbKtBlCs3U7c+HECBec3nEHRYK9S7sLx0=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: CYb1AUfDdwBmZIiw43Uzz4pNurCcroPrczZ8tZZSS/s=)
                          12: FC852C3E239011EFB136C710C4F9AE02.roa (hash: rfdSLa0My4R23E7UhQOzv75R7oc+8cQio+I5/2T2ScI=)
                          13: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: VWNAPC6UIfMVQch4vSc+1QxFpjuFdCFpkSLGoYnJWLQ=)
                          14: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: jy6vuCkSSKn5jRqSlZSZkzcBPcsjCkh7JsvXNhpfjoE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jan 31 01:34:00 2025 GMT
            Not After : Feb  7 01:34:00 2025 GMT
        Subject: CN=679c2888-76b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:e6:5e:36:07:5f:4f:f4:c8:36:4a:87:99:
                    a7:b5:e8:5c:d8:f6:47:ec:f1:37:62:c2:52:f6:93:
                    b0:00:89:da:43:b0:0a:f6:ba:48:34:4a:64:55:dd:
                    ed:d4:14:a9:bb:b6:84:d9:0b:ff:67:18:ec:87:0a:
                    05:62:d0:78:10:5d:4f:f3:b0:ea:e3:43:5e:18:0c:
                    34:d8:ea:80:e5:4c:aa:63:1c:be:59:43:70:de:3e:
                    f8:85:1e:9b:ad:1f:53:95:f1:8f:c5:37:00:41:a4:
                    b2:9d:9f:ed:3e:82:74:a6:eb:64:42:0b:0c:3d:52:
                    2a:6c:e9:fc:eb:99:bb:f6:8c:87:c6:9c:5a:47:ef:
                    c1:49:bc:0c:38:d5:0c:c5:6b:b9:8f:ca:10:d9:9f:
                    f4:ad:45:d6:cd:29:6b:ce:c8:19:66:b1:59:24:84:
                    73:f9:d2:06:83:50:33:8d:43:df:17:d2:bc:8a:d6:
                    b1:e8:55:1e:d2:42:d4:24:b4:eb:ec:13:33:dc:be:
                    cc:07:b0:2b:74:e2:8e:eb:cf:92:6b:1a:12:cd:33:
                    ad:42:c1:ff:56:d3:cd:07:a6:55:e9:e8:7c:e5:f4:
                    57:d9:41:a9:21:ed:64:08:89:45:b0:29:7e:d6:5a:
                    f1:c2:8e:07:a9:dd:39:e9:3f:a8:54:ce:11:c8:98:
                    bd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DD:31:E0:63:B8:73:86:21:5B:28:5B:C5:69:A0:A0:78:9E:EA:2C
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:dc:57:ba:96:f2:c2:9f:c2:72:2c:c2:36:ab:92:e2:9a:8b:
         e8:60:d7:91:61:6c:83:34:0c:e0:19:56:28:12:b6:17:a2:15:
         a3:23:9e:80:d9:88:4c:a5:99:0e:29:4e:20:a4:59:cc:1a:28:
         04:61:8b:45:81:42:93:49:3d:97:c6:f9:19:8c:c0:3a:8d:28:
         60:d6:32:ef:c7:4d:eb:f1:40:ad:49:2c:f9:09:99:9e:1b:9f:
         89:af:56:7f:85:c1:01:48:58:b0:55:77:86:47:bb:6a:ea:bf:
         39:f4:76:07:79:c2:15:6d:ef:34:ec:5f:28:3b:47:19:05:f8:
         cf:66:3f:3e:a4:e5:00:0f:bb:8b:ff:26:2d:36:b4:5a:16:59:
         6f:34:fa:30:d3:3a:f2:dc:f6:5e:72:06:d6:bf:5a:a1:bd:24:
         a1:82:77:3c:da:c6:86:6e:e5:31:f9:03:fc:77:8b:04:b2:0d:
         b4:bf:37:84:0f:ec:c2:5b:6b:a0:79:3d:ab:63:98:c5:ac:f6:
         fd:70:00:7c:f6:f9:f9:0f:08:e0:1b:1e:bd:2c:41:56:69:06:
         9b:6b:7f:b9:17:04:82:48:f7:02:8a:95:60:7a:64:17:d7:15:
         fb:11:cf:9f:bb:3b:d0:9c:0d:a0:e2:a0:e6:4b:15:22:0e:c4:
         df:cd:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:40 2025 by rpki-client