Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
File:                     f_vcP3eaj5llMF597lHmpsU1_7g.mft (raw, json)
Hash identifier:          wazoiqiwSvBmJXMHknIF2BUQH3LtOMQlLHOR8+sX58s=
Subject key identifier:   3E:6C:BB:1E:A9:0A:E9:8C:FF:3D:89:B8:47:76:D4:9B:30:50:57:B5
Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8
Certificate issuer:       /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
Certificate serial:       081D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
Manifest number:          0809
Signing time:             Thu 30 Jan 2025 20:55:21 +0000
Manifest this update:     Thu 30 Jan 2025 20:55:20 +0000
Manifest next update:     Thu 06 Feb 2025 20:55:20 +0000
Files and hashes:         1: f_vcP3eaj5llMF597lHmpsU1_7g.crl (hash: zR+aHsgkw0qtMzdFpXSLrZLe4wiHC55YGe0jhFkpd/Y=)
                          2: B3C00B80CD6111ED9BB1B571C4F9AE02.roa (hash: 1uFjTFe9Amsbq8/7U9vAw2GFeZcNsCf1O+GdbeaI35g=)
                          3: EF76C18C071C11EF9CF42877C4F9AE02.roa (hash: E3TzLkNtv/k+JSiXVZ+yE4299EE9gUcobjsGLwBVBpk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
        Validity
            Not Before: Jan 30 20:55:20 2025 GMT
            Not After : Feb  6 20:55:20 2025 GMT
        Subject: CN=679be739-1902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:45:bf:45:b5:96:5d:84:69:4e:75:91:6b:
                    de:4a:b3:9d:03:68:27:55:f0:d8:2a:a0:35:b0:86:
                    9e:b7:59:52:a6:6f:48:26:6b:b0:ec:83:b0:ed:2d:
                    55:b0:9f:27:15:e9:41:5f:8e:ed:7c:41:6e:2f:95:
                    18:38:79:87:9b:89:1a:45:9e:e2:37:5d:42:99:1b:
                    81:75:cc:6e:b6:87:1e:23:0d:6c:0d:7e:d8:ef:76:
                    b4:e1:ca:90:59:e0:e3:fb:d9:00:9c:26:a5:f2:f3:
                    3b:e0:6b:cb:4b:4d:c9:e2:47:48:ca:6e:6b:10:5a:
                    62:57:de:07:de:a5:49:a1:17:5f:e3:d7:4b:9b:b2:
                    cc:e4:1c:75:1c:08:f2:36:e5:e8:a4:ae:fb:d5:b7:
                    0d:3e:9f:61:65:01:99:17:22:4a:ea:69:64:c2:80:
                    67:69:94:6c:18:b6:a9:d0:f0:35:8f:52:ca:bf:de:
                    73:e5:84:9c:4e:d0:76:50:77:4f:97:06:4b:e0:b3:
                    39:75:9a:d6:ed:6e:ee:81:81:24:e8:c9:4d:63:77:
                    17:9e:91:20:42:34:52:a1:e8:c0:62:d8:c7:39:0b:
                    c4:c8:ee:7a:88:dd:1b:a2:99:d0:70:94:c1:33:52:
                    ae:d0:08:9d:5e:b6:54:09:bd:0e:a8:f6:9a:fd:90:
                    6c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6C:BB:1E:A9:0A:E9:8C:FF:3D:89:B8:47:76:D4:9B:30:50:57:B5
            X509v3 Authority Key Identifier:
                keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:bc:0f:7a:72:b8:52:a8:be:4d:25:27:34:ee:f4:80:b5:d9:
         f6:6f:77:19:b2:13:4c:c9:0d:a5:e2:a0:9d:6f:12:71:df:13:
         b3:23:a1:1f:1e:83:75:27:82:e5:7b:45:23:a1:39:91:a0:72:
         70:ff:df:5c:29:d2:f3:d1:7f:30:e0:0a:1e:10:cd:4a:d7:ef:
         7e:fd:55:c2:68:af:af:5c:e1:d9:a0:10:4b:95:a2:db:4a:ce:
         af:f8:df:25:2d:b4:1f:28:7f:63:cf:ce:b2:43:4f:f8:cf:88:
         b0:94:b1:ea:a5:2f:12:1f:6e:cb:f9:82:15:db:d0:bf:66:c0:
         8f:ba:4e:c9:40:00:c3:3c:ae:14:d8:84:83:92:e1:63:9e:4d:
         9a:28:df:92:92:2a:71:1f:a8:03:91:46:3a:87:e1:ee:fe:df:
         8b:bb:9d:e3:30:e4:67:47:16:b4:60:4c:14:9a:f1:12:0e:72:
         cf:ac:84:c5:4b:ff:5e:d8:d2:90:d5:f4:b9:cf:84:27:90:65:
         49:c4:b3:ce:45:38:eb:83:e3:26:03:a1:f8:ca:6a:1d:9e:be:
         99:db:e3:fc:48:7c:ca:c1:39:c2:ee:c7:2b:c9:51:35:af:17:
         78:1d:6c:ca:c2:59:7f:44:f1:91:8c:bf:8b:cb:b2:aa:e3:f4:
         d2:12:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:37:22 2025 by rpki-client