Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
File:                     18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json)
Hash identifier:          EyzwRPIbIZkQxKS3TSfy2AexgYCmAwSNLR56TWP9HLM=
Subject key identifier:   9F:66:03:39:41:AF:EF:BC:27:52:72:5D:B0:04:CC:CD:23:65:D9:55
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
Manifest number:          8E
Signing time:             Fri 31 Jan 2025 05:34:45 +0000
Manifest this update:     Fri 31 Jan 2025 05:34:44 +0000
Manifest next update:     Fri 07 Feb 2025 05:34:44 +0000
Files and hashes:         1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: /mMciblYrseTJmhvkTME69WgPWffLQppHtHMSlKmwtg=)
                          2: 35A11C66086C11EFB8BD7815C4F9AE02.roa (hash: jx27R9R8a3ve62AOIqb5E0ou30ap1JUun3eJwYMuDqE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: Jan 31 05:34:44 2025 GMT
            Not After : Feb  7 05:34:44 2025 GMT
        Subject: CN=679c60f5-43cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:72:cf:da:f4:9a:ec:fc:27:9a:97:74:0a:
                    ca:e0:65:f8:2a:14:eb:3d:53:7d:26:18:52:54:05:
                    43:2a:9a:b0:fa:8b:24:1a:ce:0d:ee:98:34:d2:1a:
                    4c:2c:fc:63:46:48:d7:bf:51:b0:ed:db:c0:36:f9:
                    93:1e:58:6d:77:18:a7:af:a6:91:3d:d5:38:fa:4b:
                    ef:57:df:c8:f5:01:13:3f:eb:e8:af:39:db:e2:21:
                    38:45:5c:0f:83:20:59:57:6b:67:78:0d:f7:6e:69:
                    0f:13:ea:3f:73:1e:e8:8b:27:4b:d6:e4:2e:e7:97:
                    de:7b:3e:90:55:a7:95:14:ca:db:ce:92:47:de:23:
                    dc:f3:2d:2b:17:11:8d:30:be:84:0a:1d:ef:09:62:
                    00:df:d8:1a:a8:56:82:26:ae:1c:e5:2c:19:e9:e2:
                    50:1c:97:44:a5:72:17:b5:e0:22:c6:c7:b1:8c:be:
                    b2:9f:d9:b8:9e:df:2b:94:16:1b:ce:a0:f3:2b:1c:
                    01:7e:66:0b:3f:cb:78:30:2e:49:51:0c:72:7f:bf:
                    85:99:75:f9:be:6d:e6:01:09:49:87:4e:b5:10:d1:
                    3d:ea:a5:d6:d6:ca:96:0a:9e:2d:e5:a2:5f:8a:fb:
                    3c:ce:84:78:85:20:24:f0:f5:55:ec:50:ca:cd:cd:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:66:03:39:41:AF:EF:BC:27:52:72:5D:B0:04:CC:CD:23:65:D9:55
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:18:97:e2:a4:f7:ff:0b:6c:5d:45:98:e4:77:07:4e:a9:24:
         4d:f7:2b:0d:8a:71:15:d2:ab:c2:e0:13:62:f0:4d:dd:5d:d0:
         6c:aa:7a:88:30:27:16:05:c3:64:51:34:50:cf:0f:be:87:93:
         82:bb:f7:94:79:97:0d:f1:f5:64:9b:1b:44:a1:82:7a:23:42:
         9a:f3:a5:1f:4a:67:2b:eb:5d:28:8c:5f:44:16:7a:03:34:dd:
         93:6e:29:4f:9b:55:6f:56:a0:83:cb:16:06:77:1d:65:32:72:
         d8:78:cb:f5:69:f2:87:9f:31:01:16:9c:61:c4:5f:12:15:24:
         1e:e5:5c:a0:29:e7:06:48:b0:93:f7:4b:7e:0c:c8:7b:ff:17:
         b5:aa:7d:0d:2f:e9:76:bd:33:28:ef:ae:20:54:e7:bd:e2:68:
         67:3c:f2:9d:56:96:c7:3e:66:2e:86:13:66:83:e8:d1:c7:f7:
         54:ac:ad:4c:dc:8e:34:76:4c:7f:83:ff:54:8f:0f:10:61:6c:
         4d:ec:55:8c:39:98:37:bc:c3:8d:52:ae:a7:7e:87:70:85:e5:
         58:cc:75:fa:66:26:96:d3:37:44:c4:65:9d:7d:6b:ae:ff:d4:
         90:87:42:3c:c6:c3:63:8e:4e:e0:b7:5e:31:4d:0e:38:da:e1:
         48:4d:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:06:33 2025 by rpki-client