Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
File:                     4AJb-TLnFuGh-K-QECEcQRCE_J0.mft (raw, json)
Hash identifier:          r2sMOb1cw1N8HS3xIOJppehHXAcbIFALN1k4b7RMGyY=
Subject key identifier:   EA:1C:8F:D2:6A:47:21:ED:C6:11:A4:BC:2B:7E:8B:08:7C:27:76:B1
Authority key identifier: E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D
Certificate issuer:       /CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
Certificate serial:       0552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
Manifest number:          054B
Signing time:             Thu 30 Jan 2025 23:29:37 +0000
Manifest this update:     Thu 30 Jan 2025 23:29:37 +0000
Manifest next update:     Thu 06 Feb 2025 23:29:37 +0000
Files and hashes:         1: 4AJb-TLnFuGh-K-QECEcQRCE_J0.crl (hash: jH/JeXy9NOpTljSawzaQFKxTRU6PWJkMAyz19hxoBUc=)
                          2: 0A1FAC405BB211EEAD06B243C4F9AE02.roa (hash: +Nf3CbeJiQCKoMqVOr8fCtBhRD9vFNzRUGK/YqqHHSM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362 (0x552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
        Validity
            Not Before: Jan 30 23:29:37 2025 GMT
            Not After : Feb  6 23:29:37 2025 GMT
        Subject: CN=679c0b61-747c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:48:14:94:dd:14:02:48:fb:35:30:df:5d:
                    04:ff:be:4e:f7:41:c0:11:76:96:52:4e:40:9d:8b:
                    ac:d1:95:98:7f:43:62:cd:30:47:19:b9:a5:61:f9:
                    eb:ff:e1:ac:1a:75:54:70:1b:66:f6:61:59:fa:54:
                    96:2b:7a:e2:ca:4e:bd:18:20:88:98:d6:dc:40:8c:
                    f6:59:17:88:ab:83:ed:10:c8:7a:f5:55:db:96:d5:
                    45:de:8b:bb:64:43:50:c5:c9:e0:df:1e:15:c3:34:
                    d7:6e:8b:71:9b:2e:9c:55:d2:4e:83:11:fa:8c:9e:
                    e5:e9:a3:c0:2b:71:1f:b9:be:61:85:c6:f3:21:c0:
                    32:ed:fa:f6:ae:f8:68:8d:ea:c4:74:5d:b7:45:6d:
                    e8:c9:4c:25:d3:0a:18:96:9b:42:9e:f9:d2:fa:00:
                    ae:1f:e1:34:76:1d:96:8f:48:a3:37:82:2c:38:e8:
                    63:6d:ac:6e:f9:a0:bb:6a:6c:c2:da:83:b7:66:01:
                    12:5d:f6:52:22:44:a6:f8:16:94:d1:a1:9f:e7:2c:
                    6e:27:19:c6:6c:a9:00:8b:68:66:21:e2:90:9d:96:
                    63:51:92:f5:e3:3d:f6:57:32:45:68:f9:d5:2d:9e:
                    8b:f9:29:82:a9:e1:33:01:9e:e8:8d:19:37:93:58:
                    3d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1C:8F:D2:6A:47:21:ED:C6:11:A4:BC:2B:7E:8B:08:7C:27:76:B1
            X509v3 Authority Key Identifier:
                keyid:E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0d:d1:19:74:66:27:62:62:c8:6b:78:0c:e6:c4:4f:cb:bf:
         73:58:62:25:6b:b6:c2:5f:14:a6:d7:dd:ac:ea:98:f7:79:26:
         7a:dc:00:26:bd:dd:bc:51:eb:71:33:df:d7:3b:58:4f:f1:04:
         3e:68:7b:7e:d2:18:da:df:69:c3:3f:fe:73:6e:fa:db:56:bc:
         b5:94:76:e4:fb:b4:2a:92:29:98:b8:ea:e2:91:73:36:97:e4:
         e0:f1:75:77:9a:2d:aa:c8:d2:ca:be:bb:ba:6c:a9:a7:d5:23:
         5d:da:94:28:23:4f:e9:2f:98:a0:cb:93:3d:63:4c:f2:91:6e:
         f8:f3:7d:95:e9:ba:5c:a1:fd:8e:6a:40:18:28:a7:f5:9d:b0:
         9c:fe:7e:41:8d:d8:1a:26:3b:a5:f3:16:c1:5f:6d:18:ca:38:
         d6:5d:d2:c4:38:a4:c3:3f:41:5e:42:92:84:74:5e:e4:1f:46:
         ae:76:a8:82:db:cf:7f:e6:7c:7d:f9:fe:af:03:1e:d6:ea:b0:
         a0:6a:fe:54:34:ae:46:e5:b7:b0:01:40:54:cc:54:d8:3b:f4:
         c1:04:c0:d5:22:a2:d6:cf:c4:97:21:ab:39:90:1d:c7:2c:e3:
         31:42:a1:0f:6a:d0:83:cb:f9:ee:4e:8d:51:65:dd:7f:4a:64:
         ac:4e:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:01 2025 by rpki-client