Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
File:                     pK73BplO997sjIomg0NykQSEsbA.mft (raw, json)
Hash identifier:          o1vSfeOAuhDwdMtQh1ZVMUzEQTAQigrLZoDQEva17Wg=
Subject key identifier:   33:12:92:76:59:7B:B1:62:97:98:2A:F7:4C:71:A5:4C:BD:70:10:BC
Authority key identifier: A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0
Certificate issuer:       /CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
Certificate serial:       066C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
Manifest number:          065F
Signing time:             Thu 30 Jan 2025 22:26:51 +0000
Manifest this update:     Thu 30 Jan 2025 22:26:51 +0000
Manifest next update:     Thu 06 Feb 2025 22:26:51 +0000
Files and hashes:         1: pK73BplO997sjIomg0NykQSEsbA.crl (hash: U+uojntXJhXwxITsdMfadXkO7utR8ZWsDFYubJCHKtY=)
                          2: 7568D85E731211EBAFF0B481C4F9AE02.roa (hash: SELYIISzgBI7zrtRFkV2ypEgCIX/db0xuNfofQR/Qs0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644 (0x66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
        Validity
            Not Before: Jan 30 22:26:51 2025 GMT
            Not After : Feb  6 22:26:51 2025 GMT
        Subject: CN=679bfcab-fa86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:2e:3a:90:b6:7e:5b:1b:a7:67:aa:99:5f:
                    80:ca:ba:1b:e1:10:cf:37:e6:37:d4:77:9f:03:78:
                    0f:64:d0:78:8c:5e:c8:4f:80:05:cc:9d:3a:e1:de:
                    d8:00:a3:96:f9:aa:0e:e1:cb:65:9c:f3:42:34:bd:
                    31:3e:43:a5:57:74:c9:0f:9f:8e:0c:eb:2c:c0:14:
                    6d:0a:f9:f7:f6:65:a7:22:8b:f1:78:37:63:24:bc:
                    36:fe:a9:57:e5:7f:2c:49:4e:ca:af:a1:81:a2:e5:
                    0b:02:cd:75:7b:39:6d:4e:00:6d:e0:6c:87:40:1b:
                    ca:1d:f4:fe:44:0f:4a:79:65:3d:01:47:d9:c4:f0:
                    70:6f:ec:57:ed:e1:0c:08:c6:e6:6f:87:35:76:61:
                    2f:21:33:05:5d:6f:0e:82:a0:88:1c:11:43:1a:a8:
                    22:36:34:d6:ea:21:bd:ee:17:6b:a5:9b:1a:33:46:
                    35:ad:8d:2e:e6:21:c6:2e:c1:53:78:4c:ca:d0:a8:
                    7c:58:64:6f:ad:2f:af:a5:6c:b5:ad:78:7c:ea:4a:
                    9d:9d:12:56:cc:34:6f:99:f8:f9:14:66:33:a9:30:
                    83:3d:d1:3c:4b:cb:60:01:34:60:20:c1:7b:d6:a6:
                    a3:0e:bf:d5:5b:87:db:ae:69:c8:a5:40:6d:e9:90:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:12:92:76:59:7B:B1:62:97:98:2A:F7:4C:71:A5:4C:BD:70:10:BC
            X509v3 Authority Key Identifier:
                keyid:A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:98:98:d6:fe:74:60:d2:6a:c9:40:15:8e:8d:28:00:36:21:
         ab:ae:86:c2:a6:1a:72:61:3c:6f:16:5a:9b:98:c2:a6:4a:e5:
         13:f4:57:81:fd:1d:5d:d2:4f:dd:a8:3a:fd:23:67:7b:03:c6:
         fc:0d:72:70:4a:dc:14:39:0a:03:5c:f6:74:9f:cf:d3:8b:cd:
         48:ea:a7:ab:32:1c:8a:99:82:10:a9:09:56:fb:e6:69:c0:08:
         31:fd:38:b5:fc:be:7a:81:7c:11:b6:6a:b3:37:75:5e:8f:1b:
         77:56:d9:25:6b:0c:44:df:c3:e8:58:34:14:35:e6:c8:a8:42:
         63:a3:76:f3:90:21:f1:a4:d7:9a:3d:74:77:68:d5:87:7e:66:
         6e:89:1e:11:72:b7:d5:b6:ec:2d:8b:47:74:78:aa:7e:4a:c3:
         2b:be:19:8e:0b:91:37:53:55:6b:bf:bf:9e:46:38:d7:c8:ab:
         87:43:b4:ed:9f:a6:a2:86:7d:27:e0:bc:04:4a:46:21:d2:87:
         56:19:35:68:32:5f:1a:d7:6a:29:32:98:a1:01:d5:ec:36:c0:
         05:27:3a:28:8d:aa:e3:c9:ea:5d:ae:fe:e4:f7:4f:91:f0:78:
         92:1f:fc:d3:3c:e0:ea:2a:85:6f:91:50:2e:69:23:d1:ae:f1:
         e0:d9:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:58:21 2025 by rpki-client