Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
File:                     uYUInIuVHhACl2u9XU0d0kGB8Z8.mft (raw, json)
Hash identifier:          jgn2dQYXbaCAcz5SGg6+mnQ0E/g0esjgADF6BQL2aNc=
Subject key identifier:   8A:E5:3C:BE:21:49:9A:FA:84:38:0F:CF:D6:D8:ED:ED:2F:49:1A:86
Authority key identifier: B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F
Certificate issuer:       /CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
Certificate serial:       058A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
Manifest number:          0585
Signing time:             Thu 30 Jan 2025 23:17:06 +0000
Manifest this update:     Thu 30 Jan 2025 23:17:05 +0000
Manifest next update:     Thu 06 Feb 2025 23:17:05 +0000
Files and hashes:         1: uYUInIuVHhACl2u9XU0d0kGB8Z8.crl (hash: So4H+jibahJCsYWOb7KRgNZRLJKsQtZMdTW8pdZgKdA=)
                          2: 432BBA90C1F611EBAD8D7477C4F9AE02.roa (hash: hkJ88WsZE+BHMinN6yfbuiaAGQUAch41Smzi5V2G9DM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
        Validity
            Not Before: Jan 30 23:17:05 2025 GMT
            Not After : Feb  6 23:17:05 2025 GMT
        Subject: CN=679c0872-ec1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:a0:5e:bd:2a:b9:7d:62:89:94:07:87:34:
                    a0:21:a4:67:2d:f6:3a:b1:62:30:b2:13:44:15:e1:
                    37:08:5d:31:8a:6a:41:2b:4d:52:3c:5a:68:82:34:
                    4d:d4:04:64:5c:b7:ef:47:1e:d7:8f:43:90:c4:52:
                    1e:ab:2c:14:9e:11:75:15:16:da:7c:5a:02:e3:9f:
                    ec:67:ea:e3:da:af:10:dc:18:66:01:7a:5a:1f:61:
                    97:bf:d2:6c:63:5f:a2:52:01:be:0a:7d:3e:9d:1d:
                    ea:10:5b:91:94:bd:bd:fa:9d:cf:cd:03:1f:27:1f:
                    b1:0d:33:ed:82:be:2b:2a:b3:72:5d:b1:63:62:63:
                    a1:eb:3b:0c:26:3c:b7:58:83:b0:e6:8c:e8:86:00:
                    c8:fd:79:8f:5f:4a:10:46:b6:df:cf:ef:95:d5:80:
                    2f:86:99:32:3e:68:5e:91:c0:a9:09:69:06:b4:f4:
                    ab:2c:a0:07:f9:88:b7:a5:5d:6e:25:ae:9c:23:d1:
                    52:d8:b7:22:6b:e2:e2:ef:55:b0:4a:c5:cd:11:75:
                    cf:4d:53:67:c3:3e:8f:20:c8:74:8c:da:b7:24:74:
                    46:58:9e:a6:5e:71:60:47:ab:43:59:96:b3:95:ca:
                    3d:98:be:72:f7:6f:f6:b7:c9:3a:22:5b:e5:0e:42:
                    2d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E5:3C:BE:21:49:9A:FA:84:38:0F:CF:D6:D8:ED:ED:2F:49:1A:86
            X509v3 Authority Key Identifier:
                keyid:B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ae:e5:d1:ec:cf:e9:f1:eb:ec:ef:45:e8:cb:9f:b5:40:12:
         67:eb:73:fd:fe:b2:df:ef:40:52:0d:d2:35:2c:1a:1e:11:23:
         69:a4:02:9d:64:96:fb:cd:8c:11:e4:87:65:d0:22:8b:55:14:
         5c:34:ee:29:57:f0:db:81:66:e9:0e:cf:b7:5d:1b:7c:8f:45:
         51:c6:51:a7:c2:e3:d3:a0:dc:cd:1e:3d:54:01:aa:7f:c1:31:
         2a:95:d4:95:11:69:67:09:26:f2:c7:6c:e4:9a:da:05:5a:0f:
         6e:d5:97:59:29:d2:b6:a0:df:f0:f2:ec:9d:18:ab:84:83:53:
         e2:33:68:80:c4:0b:85:4e:39:cd:57:05:c0:6d:fc:32:9b:40:
         7b:ec:8c:2a:41:c1:92:46:f1:5c:72:e9:aa:6c:8a:bf:1d:8c:
         d1:0a:44:e3:76:15:70:27:35:42:53:89:9e:e0:45:0c:38:f2:
         6f:68:11:11:b4:15:25:8f:5c:31:13:e3:fa:23:31:93:a1:99:
         0a:01:d8:0f:db:1c:09:3a:64:88:d6:bf:0c:d3:a8:ea:e0:2b:
         ac:e0:de:07:a5:c4:bd:ec:06:ef:c9:ee:3e:c8:ae:8b:85:38:
         93:18:fd:3e:c7:db:5a:9d:13:7f:b9:7f:19:6c:ed:2b:68:53:
         d4:68:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:18:45 2025 by rpki-client