Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft
File:                     Yt792dXXaz4eaPmBKVcVDcD1PF0.mft (raw, json)
Hash identifier:          HuH36WORiQjBKNc9FONCXjqWhpQTaFiXfDNPSLm1QPo=
Subject key identifier:   BD:70:0F:84:C1:53:F9:7D:19:5D:DC:C3:8B:F9:22:84:28:81:94:86
Authority key identifier: 62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D
Certificate issuer:       /CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D
Certificate serial:       03B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft
Manifest number:          03B2
Signing time:             Fri 31 Jan 2025 00:44:38 +0000
Manifest this update:     Fri 31 Jan 2025 00:44:37 +0000
Manifest next update:     Fri 07 Feb 2025 00:44:37 +0000
Files and hashes:         1: Yt792dXXaz4eaPmBKVcVDcD1PF0.crl (hash: bOL/O9wKaPU8Kw/V/9eLVEPvPhenvZ7QAO6jCGA+/Ps=)
                          2: 766B426A7A9011ECA266DE36C4F9AE02.roa (hash: 42rM/YXw/GYdbNXckygMx1iVCDC/xjgnKGAPtnBzAdI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D
        Validity
            Not Before: Jan 31 00:44:37 2025 GMT
            Not After : Feb  7 00:44:37 2025 GMT
        Subject: CN=679c1cf5-747c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:0d:73:5f:66:7e:ec:f9:a9:61:4b:10:ce:
                    8f:23:77:60:4c:f1:5d:59:96:c4:0e:7e:04:bb:9b:
                    0b:47:2e:d7:e8:14:c2:d4:6d:2b:7d:80:7a:60:16:
                    7d:a3:a9:e6:54:9f:01:a4:18:62:31:83:57:00:36:
                    ad:35:98:6b:a2:ba:6f:16:7e:8d:9f:b0:cb:42:55:
                    d9:41:62:06:dd:29:9c:7f:4d:68:02:86:19:1f:49:
                    8e:15:b2:3b:92:ea:75:99:a8:a4:48:cb:be:be:5d:
                    34:10:50:eb:5b:13:75:71:58:ff:94:e0:0e:f6:a4:
                    33:06:17:4f:4d:95:98:be:d5:6f:8f:4c:88:dc:36:
                    43:01:d4:21:89:92:13:b4:2b:04:cd:51:af:bd:01:
                    69:4f:9f:7c:bc:3a:5f:c6:c3:27:a6:05:8b:98:eb:
                    3d:18:17:61:b6:68:7b:77:12:4b:75:9e:37:1a:62:
                    08:36:d1:18:db:da:4f:d0:30:48:45:08:e0:e2:54:
                    ea:8e:45:32:72:ac:1e:e2:0e:46:bc:17:14:c5:9d:
                    7f:c4:20:92:af:ea:68:62:45:61:be:b9:d2:3b:fc:
                    ba:f8:89:5c:f8:2c:2d:33:b6:fb:2a:1d:ea:7d:21:
                    13:f6:ed:d3:db:a0:ef:35:32:86:a1:b4:6e:1e:49:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:70:0F:84:C1:53:F9:7D:19:5D:DC:C3:8B:F9:22:84:28:81:94:86
            X509v3 Authority Key Identifier:
                keyid:62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:34:2f:a6:da:57:c4:d3:55:15:09:33:bd:9f:43:02:7b:bb:
         5b:f5:c0:12:33:4c:d2:42:2d:fc:20:35:43:6d:8e:45:a7:5e:
         07:e3:a7:44:99:1b:b4:aa:04:32:54:f9:a7:b0:6c:1d:64:78:
         84:b9:84:fb:eb:d7:d9:1b:17:80:ae:77:93:14:fa:78:92:6c:
         a2:41:7b:e7:15:b2:99:f6:0f:51:f6:2d:2e:f8:e5:e3:b4:5c:
         15:53:94:6c:70:ec:3c:53:da:9b:f8:93:71:a2:a4:3a:b2:7a:
         8c:4c:18:aa:c4:42:bf:fa:80:ac:8e:f8:e5:f7:f6:10:75:6c:
         9f:8d:87:27:93:08:91:d0:a4:85:78:96:fd:01:4d:6c:5f:4c:
         30:86:3e:09:fd:36:a6:8a:fb:ad:3e:fc:77:fd:e6:d9:2e:3f:
         56:da:1f:ba:74:c6:a4:c2:34:11:76:e3:1e:68:5f:d4:61:44:
         52:43:ad:72:8d:0e:02:f6:09:13:d2:04:cc:d0:3f:60:67:cb:
         a5:1a:fe:ec:60:12:73:21:f0:4b:29:16:4c:a6:67:6c:00:7b:
         5a:c1:91:ae:9b:c0:bd:0c:7e:43:9b:ca:2f:c2:91:fd:73:df:
         91:6a:11:7e:52:1b:43:d4:da:82:de:bd:c9:da:f9:fb:f2:ec:
         2c:5e:0e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:40 2025 by rpki-client