Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
File:                     pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json)
Hash identifier:          Vaeci5LAKg5b16US+8xocRtf51kPGk3gF+Wl/Zed39s=
Subject key identifier:   FC:85:67:AA:4C:B1:2C:E8:C8:F8:F1:76:D6:FA:D6:82:CF:9C:25:5F
Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29
Certificate issuer:       /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
Certificate serial:       0393
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
Manifest number:          038E
Signing time:             Fri 31 Jan 2025 00:52:42 +0000
Manifest this update:     Fri 31 Jan 2025 00:52:42 +0000
Manifest next update:     Fri 07 Feb 2025 00:52:42 +0000
Files and hashes:         1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: 3HA5U1oZgFPonaoKDupbP3sNiFoMUy6T7g3cCodLO9w=)
                          2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: oge9TjupBUCAcqx0xe/m5q70dmPd4uWuHJhY0GMcBu0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
        Validity
            Not Before: Jan 31 00:52:42 2025 GMT
            Not After : Feb  7 00:52:42 2025 GMT
        Subject: CN=679c1eda-291b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:24:de:9d:cf:8a:1c:be:f9:2a:11:1c:3f:
                    45:9f:b4:08:4b:1b:11:0d:27:6a:39:18:aa:62:6a:
                    b2:c8:27:96:76:f7:c2:a0:37:20:86:f4:1c:95:21:
                    12:87:d1:c8:3e:b2:21:f6:d8:e3:55:b1:29:88:b5:
                    fb:e7:92:db:85:ca:78:eb:ec:73:46:b6:15:95:61:
                    36:05:84:27:f1:6c:cc:17:ae:f2:e1:f4:6f:62:5f:
                    e6:a4:bb:1c:a0:31:b6:ee:e8:a6:e8:ac:2f:51:15:
                    b4:55:85:b2:77:0a:1f:f9:f0:56:bf:bf:5c:0d:b4:
                    7d:48:d7:db:1f:a5:95:9c:f4:7d:d9:a5:42:cd:7b:
                    75:8b:a4:bb:38:ea:90:42:7d:fe:b1:45:61:02:76:
                    87:2f:a2:1a:9d:56:1d:ee:12:b4:31:66:23:ce:3d:
                    41:00:9f:ec:38:63:69:8e:e7:26:f7:75:b2:2b:5d:
                    93:a8:69:68:33:02:61:44:34:79:2e:67:e3:87:f2:
                    97:e0:be:40:35:6c:d3:e0:67:1c:2d:6b:08:b6:2d:
                    eb:94:21:8b:3f:04:02:a2:a6:bd:c0:84:c5:f2:f2:
                    02:a6:3a:de:d9:84:ee:2e:81:ea:40:5c:06:1a:f2:
                    47:d0:19:c5:62:8e:7e:62:e3:24:c4:64:ad:fe:37:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:67:AA:4C:B1:2C:E8:C8:F8:F1:76:D6:FA:D6:82:CF:9C:25:5F
            X509v3 Authority Key Identifier:
                keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:77:26:17:95:5d:52:b4:d8:6d:2e:51:13:b5:0d:7d:ff:
         60:9c:94:97:c9:4c:e6:15:9a:ff:5b:c3:67:1e:6a:9a:b4:23:
         c3:12:9d:b1:01:4f:03:46:fc:af:0f:3c:36:50:6d:8e:6f:4d:
         ad:c8:d0:fc:07:9a:f4:a8:88:27:f2:c0:75:df:36:a2:70:64:
         02:d2:bd:82:19:84:17:f6:32:43:e9:6a:23:43:ef:14:47:5b:
         8c:c0:50:01:7e:4f:e1:86:65:39:02:7f:71:28:b8:df:db:a2:
         c6:80:af:e2:c6:a3:1c:dd:29:84:8f:11:b1:ab:a2:f9:7c:a8:
         23:a4:e3:d3:f1:2a:c5:35:a6:df:cb:5c:2e:a9:39:e3:c3:89:
         03:c9:52:cb:f9:da:3c:6b:97:9f:5d:0b:78:cc:34:e5:c0:18:
         64:8c:09:32:6a:7d:e6:08:f8:f5:ac:5b:a0:93:10:73:f8:0e:
         37:e4:19:b5:1a:03:09:33:72:ec:67:70:51:06:81:19:85:fd:
         1e:3d:f5:e6:5a:b8:ba:fe:cf:9f:c7:ba:67:7b:31:95:72:33:
         53:48:2e:27:57:b6:40:a4:77:c9:18:1b:0c:6d:f1:f6:61:17:
         b0:cd:63:af:b5:3a:ba:52:15:18:d2:bb:00:c1:db:4e:51:18:
         9a:f5:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:12 2025 by rpki-client