Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
File:                     rUZnzujj-e3_kuf7uzf_xmwAc6I.mft (raw, json)
Hash identifier:          1frZCmzUFAM6Qydi7SwFXrkcBECvkjB8SOK4deCgF9M=
Subject key identifier:   A9:E8:40:D9:0F:D6:B5:89:B9:6E:03:65:02:BE:04:18:CA:A2:65:A2
Authority key identifier: AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2
Certificate issuer:       /CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
Manifest number:          0146
Signing time:             Fri 31 Jan 2025 03:31:09 +0000
Manifest this update:     Fri 31 Jan 2025 03:31:09 +0000
Manifest next update:     Fri 07 Feb 2025 03:31:09 +0000
Files and hashes:         1: rUZnzujj-e3_kuf7uzf_xmwAc6I.crl (hash: SYAPhevlz1bLcsCefJT/wki2ARRel+f6MB+pnyFkPeA=)
                          2: D016C916EF5A11EDA6863E67C4F9AE02.roa (hash: 9Lo3d3eS9DODsA0QbUdso+ksBYI/XtOkg6gbRTT4iCU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
        Validity
            Not Before: Jan 31 03:31:09 2025 GMT
            Not After : Feb  7 03:31:09 2025 GMT
        Subject: CN=679c43fd-295a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:8b:51:11:6f:60:dd:03:fc:af:35:46:8d:
                    4c:6d:e4:9f:e4:0b:07:a3:6d:1d:2f:51:26:a2:54:
                    85:4a:de:73:dc:4c:58:14:50:9a:e4:63:28:55:60:
                    d7:0f:b5:d9:2a:34:e9:66:15:7d:aa:e7:5d:11:79:
                    a4:0b:32:24:b5:ea:0e:d0:ff:f7:86:f2:6a:7a:56:
                    a2:b6:e5:ea:f0:f2:68:39:6c:7e:bd:18:cd:4d:2f:
                    08:fe:30:70:24:e6:ec:1c:53:dd:fa:5d:3a:dc:1f:
                    7a:22:6c:6a:a7:a9:29:47:c9:83:27:ea:56:be:02:
                    1c:c3:ad:25:82:3d:33:8a:07:62:7c:75:76:f0:3e:
                    da:cd:ee:05:5a:a9:15:ae:27:4d:5e:05:e7:8f:55:
                    1a:be:ef:86:f6:99:19:11:e3:4f:50:54:e7:16:c6:
                    11:41:02:5e:95:0b:1a:b5:79:1c:35:9a:7e:05:35:
                    1a:f7:ab:0a:ec:b0:3b:05:3c:d2:ef:35:7f:39:2f:
                    88:da:bb:94:89:b9:98:d4:e2:c4:36:bf:f1:00:c9:
                    87:4e:0d:19:d2:eb:96:c0:cb:c6:9e:65:b1:8e:86:
                    f7:f4:bb:f5:3b:8e:20:89:eb:48:30:cc:39:08:ab:
                    2e:ff:fa:cd:73:5f:8c:b1:d0:57:34:c2:fe:38:9f:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E8:40:D9:0F:D6:B5:89:B9:6E:03:65:02:BE:04:18:CA:A2:65:A2
            X509v3 Authority Key Identifier:
                keyid:AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:b9:b5:a0:d1:61:53:d4:fa:ba:38:a9:b4:cf:70:84:05:
         3a:4d:1e:7e:6f:f8:a5:f9:49:32:80:d4:6e:51:bc:fb:b5:d0:
         d3:63:1b:4f:54:04:21:18:a8:4d:10:de:7e:dc:4f:29:e3:cd:
         b8:1d:75:aa:a6:dd:14:74:0d:bf:18:92:ba:f0:74:b5:00:ec:
         c8:c6:6b:89:1b:43:8b:f3:f1:d1:c2:c7:e4:d3:03:92:67:d1:
         0e:ba:31:bf:c0:3a:86:c3:f0:3d:32:3c:81:eb:4f:62:5a:d1:
         16:69:8c:4f:07:31:51:59:a0:07:8e:4d:11:43:56:43:12:18:
         38:4a:01:7f:bc:b6:ed:37:a7:b9:db:29:b7:14:94:9a:89:51:
         a5:76:3b:d6:36:4b:58:e3:e9:10:33:ce:a3:83:66:4a:68:ea:
         52:ff:0f:27:56:7d:58:90:d1:c9:b7:8e:3c:3e:40:c1:b2:8d:
         d7:cb:53:25:59:de:7b:49:0d:63:ba:11:f6:c3:5c:60:29:5b:
         d7:7a:71:c7:35:45:c9:1b:47:3c:d2:74:a4:62:53:71:0c:c5:
         d1:e8:89:25:de:b9:28:e0:20:89:42:35:2c:c7:8f:6f:45:ce:
         9f:66:d4:0e:be:16:44:5a:a2:b6:c9:4b:06:fc:54:7d:76:d9:
         01:29:a2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:21 2025 by rpki-client