Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
File:                     rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json)
Hash identifier:          o1xu27vJrCvBDIBrnhFk8kAbsgClk5NGvVqq8NDJ0cM=
Subject key identifier:   46:F7:96:09:06:4C:7C:ED:2D:BF:D2:B0:C4:BA:13:67:5D:C6:EE:77
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Certificate issuer:       /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial:       1285
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
Manifest number:          1269
Signing time:             Fri 31 Jan 2025 17:06:47 +0000
Manifest this update:     Fri 31 Jan 2025 17:06:47 +0000
Manifest next update:     Fri 07 Feb 2025 17:06:47 +0000
Files and hashes:         1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: UE+qIXTSMbRIFH16qOWHnp6QuChM/W0iR4qvuONtmss=)
                          2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: KaW9aZSDLK+mKsP8fjkAgqpDDnd+a3UW3uKsVuShP/I=)
                          3: 403398AA233111EEAF768F66C4F9AE02.roa (hash: 0mDJIUk6aRUJMQh8NxIXz/sLiUXKdkHoURNuoOWSBUc=)
                          4: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: I4Cnkf7lzkqLnc4f4vTRyRNiopCEkAOSa+SBIvRJfZM=)
                          5: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: bBZfLoHpOK0OlB0OzQEVHa924CCG++Yge8OBC7CQuI4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4741 (0x1285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
        Validity
            Not Before: Jan 31 17:06:47 2025 GMT
            Not After : Feb  7 17:06:47 2025 GMT
        Subject: CN=679d0327-5f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:c4:af:51:d6:c6:1b:9f:e4:46:b7:2c:15:
                    b7:d8:e7:90:4b:17:b0:aa:7a:81:29:4b:fe:0c:56:
                    b7:dd:75:2f:b9:70:43:a0:41:cc:a4:cb:da:39:00:
                    52:03:2a:e3:1c:99:6f:7e:4b:70:0b:d0:ae:fc:b7:
                    2b:4c:f1:2c:e1:a8:f0:01:2b:3e:b7:e8:20:f6:4d:
                    f2:88:22:63:e4:6e:37:87:aa:3a:9b:ff:c6:52:f2:
                    4b:e3:5f:33:86:e9:25:54:16:90:65:12:53:7b:7b:
                    be:be:90:14:60:9b:c2:de:b1:2b:6e:f3:a8:96:16:
                    c4:92:36:ea:c3:8b:09:54:b9:39:34:a4:64:f6:50:
                    e1:33:ce:44:cf:85:f2:f1:eb:bc:21:1b:5a:2b:fe:
                    42:2c:f3:5d:8e:6b:f7:ec:e8:b9:90:e1:7c:a8:a1:
                    49:31:32:a9:72:e3:5c:b9:e2:7f:dd:14:25:d4:6a:
                    c9:3e:5e:6d:30:93:cb:f8:4a:d8:f9:aa:7c:8a:ee:
                    0a:1f:ac:a1:54:aa:58:af:c7:b0:f2:d2:9f:22:4b:
                    79:ce:0b:f2:c1:1d:9e:e8:a3:f2:ed:fc:25:f6:bc:
                    9a:f0:eb:a8:19:33:1e:4c:de:8d:6a:04:4b:55:61:
                    c1:28:e0:06:71:75:6b:a0:85:18:14:51:90:62:46:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F7:96:09:06:4C:7C:ED:2D:BF:D2:B0:C4:BA:13:67:5D:C6:EE:77
            X509v3 Authority Key Identifier:
                keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:79:5f:8d:c5:25:54:87:4d:fe:b8:c0:30:4e:84:1f:79:16:
         d1:8c:35:3a:98:f3:bd:77:84:c8:a0:7e:cf:11:0c:9c:80:70:
         9a:5b:87:1e:5f:5a:2a:7b:4e:3a:17:61:d0:66:6a:ee:67:09:
         37:ad:05:62:3d:0d:62:eb:1d:e9:8f:c3:96:4b:37:89:63:2e:
         ef:e7:a3:fc:17:10:64:95:bd:a8:4d:fc:e9:ac:be:d7:9f:2c:
         e2:f1:eb:6d:d1:71:1e:fc:91:13:99:ad:85:b5:48:41:d6:62:
         eb:21:65:3d:bd:ac:8c:7b:89:a5:0c:60:29:ac:b4:57:fc:ab:
         8c:84:90:fd:79:80:c3:f2:39:5b:c9:7d:a9:3d:11:15:7a:b6:
         4d:7a:cf:37:77:09:60:45:04:a2:c1:aa:ae:59:3c:0d:af:98:
         cc:6d:57:5a:c9:8d:fa:6b:a4:8a:cc:75:97:22:41:d1:26:f6:
         4c:2f:2a:06:6e:e2:ec:8c:82:27:c0:e4:71:6f:1a:b0:8d:bd:
         16:18:c7:55:e3:8d:3b:a5:33:cb:53:56:78:1b:f1:bb:33:59:
         9a:34:37:b0:15:3c:01:eb:09:27:8a:e4:96:27:6f:f5:63:7f:
         ff:1c:88:96:e7:dd:1f:34:11:30:67:00:1a:b2:a1:5f:82:9a:
         e3:3d:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:28 2025 by rpki-client