Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
File:                     IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json)
Hash identifier:          aUJOVIoRojYu/ytZPqgDn0H6PG1/0pdhdvw66xpGA8k=
Subject key identifier:   95:E2:EF:EA:E1:D5:CE:79:2D:D7:A7:2C:49:8A:E1:B4:F4:B2:01:FE
Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7
Certificate issuer:       /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
Manifest number:          01A9
Signing time:             Fri 31 Jan 2025 02:28:53 +0000
Manifest this update:     Fri 31 Jan 2025 02:28:53 +0000
Manifest next update:     Fri 07 Feb 2025 02:28:53 +0000
Files and hashes:         1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: eixK5ZEfkmz7HAHyGYHV6Lhxs0l16m1gAaL/PCLSzSQ=)
                          2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: lr+IV3E8IbLUZRr7dcIaxmNZ6ecPXYlRygnmNCQ86Iw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
        Validity
            Not Before: Jan 31 02:28:53 2025 GMT
            Not After : Feb  7 02:28:53 2025 GMT
        Subject: CN=679c3565-12cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:93:a2:ef:97:1c:87:ce:d5:a9:e8:d7:d9:
                    a0:41:50:de:d6:df:b9:86:1b:10:a2:93:21:02:b9:
                    9c:86:1b:d2:51:62:88:cb:40:01:cd:12:f7:53:ec:
                    87:80:d0:bd:96:eb:f6:d7:9f:cf:8d:a2:29:7d:67:
                    54:d2:c2:9c:a9:57:d9:36:2f:bd:9b:44:95:df:97:
                    dc:83:c8:34:18:e5:e6:98:23:51:f1:5c:7f:41:e1:
                    cc:7a:c1:52:ca:83:2d:f1:f7:15:f0:3e:29:08:0f:
                    3f:51:61:31:19:19:3c:28:7e:ab:f3:f7:b6:75:ee:
                    33:4a:ea:81:fb:84:b6:08:5d:cf:77:b6:9e:e8:54:
                    e5:40:55:7e:0b:b1:2d:b2:82:c8:2c:7b:d6:78:a6:
                    91:4b:88:09:e1:e1:71:e2:5c:d9:7b:1b:1c:75:75:
                    cd:c2:e4:6f:a1:7a:87:c5:35:75:99:69:64:c2:b4:
                    0d:a2:8d:f9:f1:a5:07:48:56:a0:85:85:1d:df:d0:
                    6e:99:6e:18:80:0b:bb:68:dd:9d:95:d4:31:b7:72:
                    b2:c8:86:b6:5b:6f:70:36:93:c1:32:9d:8c:32:2a:
                    a9:22:fc:bb:8d:7b:ce:93:22:51:0f:e2:e1:2c:bf:
                    9d:e7:86:47:6d:78:75:e3:5e:c0:14:4c:7a:b1:32:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E2:EF:EA:E1:D5:CE:79:2D:D7:A7:2C:49:8A:E1:B4:F4:B2:01:FE
            X509v3 Authority Key Identifier:
                keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:87:27:50:81:88:c8:24:c4:e2:e3:7a:1d:a3:9f:14:a8:
         9e:0d:34:a1:3f:a3:9a:f6:8c:fd:78:e1:3c:06:ac:d6:00:8f:
         cd:32:90:46:4a:96:23:7c:85:82:f4:cc:06:88:bf:cc:5e:dd:
         18:e0:df:ef:52:fc:35:26:cf:73:5c:d5:5a:74:a2:00:96:2d:
         d0:1f:a6:7e:c0:a7:d0:b0:d1:3e:ce:48:32:2b:d0:1a:a7:ab:
         05:32:2c:ed:93:b9:b2:ea:e1:76:b2:bc:cb:3e:bf:7e:70:52:
         83:f2:8a:9d:be:91:f0:0b:1a:6f:48:0f:c0:d9:5d:64:49:02:
         6a:5d:0d:94:4c:9f:0e:69:1f:a0:84:a9:1d:f2:bb:a3:a0:5f:
         4a:f0:af:ff:36:9c:95:50:9d:97:34:c7:42:cf:96:73:03:2f:
         93:ab:e4:2c:35:b4:fd:5a:3e:b4:20:7d:19:08:c4:f4:25:1a:
         67:b0:03:fe:04:81:17:f8:88:36:35:0d:b0:88:45:90:ec:ad:
         84:79:6e:90:79:eb:04:ee:1b:cb:99:f8:4c:75:5a:52:59:4a:
         27:81:5b:38:a2:a8:78:a8:03:59:6f:1e:6c:cd:ea:4c:46:e1:
         16:60:0a:33:35:63:62:21:ea:70:4e:80:d5:06:b8:1f:4d:89:
         65:7e:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:32 2025 by rpki-client