Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
File:                     8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json)
Hash identifier:          YF7aUdxDx44Us0sf5xa2h3N88+mgzmWfh7hBSlhna7o=
Subject key identifier:   62:77:3F:D0:4C:49:7A:50:B8:72:51:67:3A:D9:20:FF:C7:D6:05:46
Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Certificate issuer:       /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Certificate serial:       0CCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
Manifest number:          0CB9
Signing time:             Fri 31 Jan 2025 18:06:33 +0000
Manifest this update:     Fri 31 Jan 2025 18:06:33 +0000
Manifest next update:     Fri 07 Feb 2025 18:06:33 +0000
Files and hashes:         1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: z1plkwybfopi5X2CzPEoHtyK/KDmEWYSnFIqumLXnc8=)
                          2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: /DiL7fsaC6fY9lff2JZZK7Yh+rRZRWI9dVgzlNELU4U=)
                          3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: DjLvleFkqk2UcBaYlPkFuqLKT/dYJjEENGItR2OkX0A=)
                          4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: bSOKtCqELVOl/SRyiuzpOoESsu/f4pkne0nYfp2NKDk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3278 (0xcce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
        Validity
            Not Before: Jan 31 18:06:33 2025 GMT
            Not After : Feb  7 18:06:33 2025 GMT
        Subject: CN=679d1129-4d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:e0:4f:ee:01:d3:5b:89:66:f8:94:9c:3a:
                    99:ea:5e:76:a0:0a:7c:94:07:d4:99:db:fa:18:03:
                    c7:05:5a:d3:cb:64:e3:69:b7:e8:30:06:24:a5:b8:
                    78:b4:49:da:fc:e1:26:0c:c2:41:64:b0:a3:bd:a0:
                    46:6f:74:61:8d:66:87:ad:9a:17:ce:c3:aa:bc:30:
                    3c:6e:4d:42:95:b1:3f:92:f7:5a:c6:5e:77:c2:bd:
                    93:68:68:37:b4:ed:ee:82:4a:dc:4b:38:21:dc:75:
                    20:10:d8:08:46:bb:25:f7:24:3f:3a:5b:10:dd:eb:
                    89:e3:52:7c:a5:8f:16:74:e1:98:0c:d0:ab:a2:10:
                    48:a2:20:bb:38:6e:91:50:96:05:65:d8:74:cc:18:
                    72:85:06:60:a2:9f:0f:eb:28:3c:72:49:f4:62:84:
                    ca:27:58:78:60:d4:a9:8c:53:05:97:f5:4a:47:56:
                    df:84:d8:03:da:5f:e3:bd:55:72:b3:69:f5:74:04:
                    66:2a:67:aa:33:2c:5b:19:b0:c8:21:59:23:01:15:
                    c5:bc:e5:e8:9f:35:9d:01:6a:bd:1b:90:6a:3f:15:
                    6d:90:86:a6:ba:e6:27:50:de:63:b9:00:1c:37:51:
                    5e:1e:ca:7c:6f:46:9a:e2:53:7d:24:0c:dc:af:08:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:77:3F:D0:4C:49:7A:50:B8:72:51:67:3A:D9:20:FF:C7:D6:05:46
            X509v3 Authority Key Identifier:
                keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:a2:71:c6:a8:d3:c5:e4:c0:74:63:fe:31:32:13:04:d3:
         a5:31:41:41:a3:50:9c:6a:08:72:f5:c8:fb:04:4b:fb:f6:62:
         d6:dd:54:79:72:ea:d9:e4:2c:56:16:ec:f3:ed:69:c4:ff:0b:
         3a:7d:93:86:ac:14:e0:ef:3f:d8:2e:45:8e:c1:de:31:76:f6:
         37:f6:8d:2f:b5:b3:0d:55:3c:7a:f9:93:71:8e:14:d0:44:46:
         a8:b8:fd:83:99:71:18:1f:ed:f1:66:3a:72:cd:8f:24:92:1e:
         c4:ba:82:0f:a9:1c:ff:31:13:17:d5:12:e2:fa:fd:5a:76:72:
         70:e5:36:8e:40:82:d6:3e:df:47:84:a1:ac:08:69:ca:39:e7:
         6f:32:a9:c5:10:3b:50:fa:1d:2e:28:08:8e:c7:df:ea:89:1e:
         45:aa:4e:e5:fb:58:e4:1a:44:d5:9a:cb:19:6a:17:e0:6a:f4:
         d4:1e:7d:05:a7:be:2c:54:8b:2f:23:2c:ff:b7:80:9e:36:fa:
         55:74:4a:6d:ab:3f:56:65:d2:f3:77:3f:b6:03:0a:c2:2e:0c:
         cd:9c:94:5b:39:9f:83:79:41:1e:d2:15:48:ac:91:e7:14:6e:
         7c:68:0c:09:d0:5c:66:c8:69:44:53:58:81:41:9d:42:84:18:
         5a:42:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:30 2025 by rpki-client