Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
File:                     Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json)
Hash identifier:          RyKMic1oYFC2TAajns6sXdrWaorMeyUb3SKnKSRa/fk=
Subject key identifier:   0F:62:60:3E:2A:D2:29:EA:1B:31:2D:05:EB:09:05:D3:46:D8:34:79
Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
Certificate issuer:       /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Certificate serial:       0D10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
Manifest number:          0D09
Signing time:             Fri 31 Jan 2025 18:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:53 +0000
Manifest next update:     Fri 07 Feb 2025 18:00:53 +0000
Files and hashes:         1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: 4Xks/omHpB1xgo7Bf+LiQa4pzPIyNzUl31csuUNnEdU=)
                          2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: 3NvJFO+he2ACqNiLgD+llzSbjPgJVQ7hiMX5hEMIbGg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3344 (0xd10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
        Validity
            Not Before: Jan 31 18:00:53 2025 GMT
            Not After : Feb  7 18:00:53 2025 GMT
        Subject: CN=679d0fd5-6b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b1:a5:d0:a4:09:ed:6e:88:dd:fc:e8:d6:8a:
                    b4:f0:6e:06:bb:02:c5:35:0a:c3:0f:10:7e:83:05:
                    0d:3c:ea:1e:05:fe:33:54:8a:ad:88:26:32:b3:13:
                    b2:95:d8:0b:0a:fc:bb:ec:c1:68:11:2e:3d:e4:4d:
                    31:f3:7d:15:9e:43:e8:80:2c:f7:a9:98:39:97:dc:
                    08:07:22:1a:d5:ca:93:fe:fc:a4:66:92:90:5b:98:
                    75:ce:d8:78:9b:64:8a:b7:e5:89:5a:80:c4:b0:cb:
                    09:9e:6c:38:4a:13:a6:e6:2b:9d:ce:b9:b3:63:a5:
                    19:1f:bb:98:12:c7:7c:e1:31:cd:88:ad:4f:d0:01:
                    7e:25:a7:3d:0e:ac:4e:be:07:2a:86:89:4d:80:72:
                    96:18:c7:d3:b3:c3:22:f3:53:af:f4:6f:6c:fa:1f:
                    95:e1:8c:62:08:b4:97:5c:91:91:91:54:68:3d:de:
                    61:5a:8a:5f:ab:2c:2c:04:21:de:27:c7:dc:f3:7e:
                    fc:72:a8:89:bd:ac:c6:c6:79:50:3a:b9:20:26:55:
                    15:1b:57:5a:cc:19:3c:ed:38:dc:39:3f:7b:ba:e8:
                    10:8b:c2:c7:b5:b8:81:95:e8:ac:25:49:83:66:a2:
                    6f:5a:fc:35:05:40:89:db:1c:c4:3d:16:08:f7:be:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:62:60:3E:2A:D2:29:EA:1B:31:2D:05:EB:09:05:D3:46:D8:34:79
            X509v3 Authority Key Identifier:
                keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:12:3c:42:32:0a:0e:61:42:43:80:a6:a9:53:de:31:57:0d:
         68:e9:29:e4:d4:2d:84:dc:51:34:83:37:9c:cc:27:8e:2b:be:
         12:36:04:7c:50:61:c7:b9:00:9e:57:83:f3:90:06:0a:d4:37:
         d2:d6:3f:bc:0a:fc:10:cc:59:00:17:16:4b:ec:ca:85:fb:36:
         0a:a8:25:a8:bc:62:2a:6b:5e:fc:69:6c:5e:89:34:6d:99:1d:
         c5:b8:50:28:d4:12:fd:fd:be:72:30:6c:34:c7:ea:77:9f:1c:
         45:4a:67:e7:13:2b:ba:4b:85:cf:16:3b:59:4d:99:a2:1b:ae:
         ae:f3:95:c2:89:84:68:50:ab:2f:30:57:fb:02:5e:d3:9b:78:
         3f:1d:3b:cd:a0:f9:00:45:76:1d:2e:e2:26:1c:50:bf:64:58:
         93:6d:51:46:f8:1b:dc:ef:55:af:91:63:6c:f3:d8:0e:14:e2:
         2f:72:38:d2:62:ca:17:90:7e:71:7a:32:cc:be:2e:13:93:98:
         7c:19:82:fd:96:c5:c2:c4:4c:d3:aa:48:94:13:6d:c3:bc:09:
         f1:d7:79:43:ed:34:20:05:ff:af:6f:15:01:5c:69:c8:7b:51:
         7e:85:4b:ab:bd:46:ad:02:ba:ca:8f:59:68:8c:17:d4:67:b5:
         0a:cc:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:45 2025 by rpki-client