Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
File:                     lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json)
Hash identifier:          HGIbPD1JOHyGFnvyU5u3rgtD0uy5GJA5vF+kEG81QfU=
Subject key identifier:   B3:02:65:46:97:9C:22:84:9D:23:55:9C:CF:02:7B:F9:83:6E:91:FF
Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47
Certificate issuer:       /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
Certificate serial:       061B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
Manifest number:          0616
Signing time:             Thu 30 Jan 2025 22:44:56 +0000
Manifest this update:     Thu 30 Jan 2025 22:44:55 +0000
Manifest next update:     Thu 06 Feb 2025 22:44:55 +0000
Files and hashes:         1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: qu0agiZlRM83O09Jvl3dOVHIHkGxTIErLx6edUPDvd0=)
                          2: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: f6e3Cg2GIwOdxOCdUfNFOlHtMPQH2uBXwUt1kuNCyx0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
        Validity
            Not Before: Jan 30 22:44:55 2025 GMT
            Not After : Feb  6 22:44:55 2025 GMT
        Subject: CN=679c00e8-b1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:ba:8e:56:96:97:64:6c:64:b1:bf:b1:0d:
                    9f:0a:7e:86:6f:ec:94:19:0e:03:40:8e:92:fa:f4:
                    5c:e1:46:97:01:fc:8c:0d:25:2f:18:43:33:d1:de:
                    67:54:bb:10:13:21:ea:a0:29:47:cd:f1:79:fc:59:
                    56:5e:17:fd:1b:c9:61:b6:46:9d:cb:39:c0:10:24:
                    ac:fa:32:63:ea:a7:af:20:8f:4a:0b:3e:58:77:77:
                    41:5e:e4:a6:62:b6:a0:af:d5:60:35:f3:de:c6:63:
                    a4:d4:6b:08:5e:6e:f4:02:de:83:cf:9b:90:d3:a8:
                    05:7d:b4:59:b8:d6:b1:5c:bb:8c:0c:a5:f3:73:69:
                    b8:17:aa:86:c2:e5:0a:2e:32:73:75:21:33:c6:6a:
                    a0:03:80:fa:2c:ee:30:ce:76:f3:fa:fa:3a:25:1b:
                    09:3d:95:b8:62:c5:cf:88:6e:d1:03:e6:29:2c:77:
                    4b:e1:d1:be:42:3f:12:68:ed:6a:32:df:e3:8d:bc:
                    31:8f:54:d3:d7:0a:fc:8e:93:cc:b6:25:00:92:a5:
                    4c:ce:63:f5:31:00:14:79:73:a7:f2:8b:d2:c7:18:
                    da:f1:eb:a2:c6:53:be:68:e0:08:2b:b2:ba:fd:bb:
                    bb:9a:e8:70:72:3a:9c:cc:fa:45:f5:4f:e8:a7:42:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:65:46:97:9C:22:84:9D:23:55:9C:CF:02:7B:F9:83:6E:91:FF
            X509v3 Authority Key Identifier:
                keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bc:32:2d:7e:90:da:77:fb:3c:14:54:fb:da:95:f9:77:e2:
         04:c5:b8:df:a8:8d:15:88:69:ba:a5:a0:b5:95:35:e5:5d:c9:
         36:cc:e1:e3:a7:c9:14:c5:b0:6c:33:f6:6c:d8:2b:f2:37:15:
         07:21:57:00:4b:1f:b6:0b:0c:14:0e:4c:c7:47:bf:f3:77:34:
         2c:c1:0c:e1:2b:a4:cc:ee:e1:09:26:02:07:f3:24:89:8e:39:
         90:87:83:71:4c:ac:4b:58:32:64:c6:0c:24:a8:03:2a:89:03:
         c2:c3:f4:08:7b:15:75:cc:12:59:61:94:5d:53:c5:e6:18:e7:
         27:ae:c8:a9:04:f7:a1:4e:e0:ad:6a:72:cd:7c:7f:d9:15:5b:
         28:ef:64:eb:1f:c0:77:bf:14:04:70:da:ee:8d:64:64:03:ce:
         fc:08:a2:4b:20:73:5e:1c:49:f8:86:de:39:46:90:ab:37:70:
         91:b5:14:04:b9:63:f1:37:88:b9:ea:8a:86:99:3f:14:dd:a8:
         65:ab:23:65:e7:e5:6c:6c:43:75:56:d0:90:e2:59:d0:94:48:
         5e:f8:b8:78:44:f4:73:e0:4d:0b:fc:05:63:15:6c:c5:41:a5:
         ec:bc:58:7d:d5:ab:41:ce:16:8e:43:31:23:57:bb:36:d0:8b:
         55:81:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:28 2025 by rpki-client