Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
File:                     ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json)
Hash identifier:          r8TmjCs4zV/ue6NoLTowXUJcXz9x9GXy7Z2rEI4BZLU=
Subject key identifier:   10:D1:4C:A2:A3:3F:83:30:73:3E:51:81:9D:62:6F:DD:34:91:C9:46
Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77
Certificate issuer:       /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
Manifest number:          0E
Signing time:             Fri 31 Jan 2025 07:08:42 +0000
Manifest this update:     Fri 31 Jan 2025 07:08:42 +0000
Manifest next update:     Fri 07 Feb 2025 07:08:41 +0000
Files and hashes:         1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: NoSb18rqVr9bjVgzCrcUp7sDTBSURfO5Qen81n61BF4=)
                          2: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: /3vnvplidMRV9xBfvWUaE3o6ToOuVyiBtlbFl/8L1Xg=)
                          3: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: /17gKTBKMMs07+KSKB5vkpnNAFNY/B0f0Up4BfWbLBA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
        Validity
            Not Before: Jan 31 07:08:42 2025 GMT
            Not After : Feb  7 07:08:41 2025 GMT
        Subject: CN=679c76fa-7e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:dc:8f:5f:2f:71:e1:6b:e9:15:59:ce:11:
                    6b:0c:6f:66:53:40:31:39:00:19:8d:18:43:3e:5d:
                    a3:5c:35:78:a5:21:c1:41:22:d3:48:9f:1b:c4:f3:
                    d9:8a:22:84:9f:9d:d2:5e:ba:00:91:e5:0f:15:7a:
                    54:17:5f:d6:ae:c1:c9:f2:3b:d5:fc:a3:0a:2b:f2:
                    b4:0c:85:5c:7e:e1:53:e1:59:7a:33:56:f4:68:be:
                    62:7f:4b:0b:46:3f:2e:59:ab:0b:8a:cb:93:fd:f7:
                    f7:3d:c3:12:85:a7:63:87:83:45:00:33:f7:56:6e:
                    d3:aa:4f:4f:8f:26:1c:02:50:f9:c5:e9:d8:45:d6:
                    1f:74:b5:b7:4f:90:19:0f:55:3f:22:38:a5:b8:37:
                    c1:30:5b:77:93:6e:21:a9:78:ce:c5:c1:6e:54:f4:
                    e5:ff:a7:53:37:21:7c:95:16:1d:5f:81:b1:e8:46:
                    ea:fc:fd:99:2c:c9:4f:ba:8d:ae:90:ee:e7:a5:dd:
                    8b:a2:5d:b2:9d:9d:3e:b0:4d:17:c7:b1:65:a4:51:
                    e2:86:5c:70:01:f4:8b:97:02:fa:d9:76:4d:4b:b1:
                    ea:2d:1d:d0:82:c3:ed:9d:d0:43:12:51:04:9f:41:
                    98:ed:e3:14:0a:09:69:50:fa:b1:63:32:7d:ae:2c:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D1:4C:A2:A3:3F:83:30:73:3E:51:81:9D:62:6F:DD:34:91:C9:46
            X509v3 Authority Key Identifier:
                keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:04:dd:a5:f9:a7:03:a6:4d:5c:1b:ff:34:0c:52:15:b1:a5:
         cf:fe:a2:c4:95:cb:cf:b2:b1:2b:73:91:ce:0d:1c:b0:c4:4a:
         08:0f:94:8f:a0:33:38:a3:9b:ba:c6:ee:7a:3b:18:71:8b:24:
         f6:90:15:b3:40:a7:17:d2:1e:2f:57:5d:1f:c6:e4:85:7a:64:
         99:58:d4:9e:f1:2d:2c:6a:e0:f4:79:67:76:cd:3a:c6:75:b3:
         8f:f1:4d:11:28:0a:73:1d:60:90:8f:d7:4c:6e:12:ac:81:35:
         98:cb:d1:a6:0e:8d:cc:16:44:e5:06:7e:fe:16:88:92:07:43:
         1c:24:98:81:48:b6:e4:50:76:e5:c0:24:00:cf:5a:d0:42:57:
         ef:e2:d9:10:f5:66:86:3c:4e:b5:7c:4b:f3:fd:69:27:db:8d:
         27:b1:62:23:3e:54:41:da:f5:2e:ff:d4:ec:1e:f1:3d:7d:1a:
         25:f0:c7:09:eb:d2:73:51:db:03:13:5a:4b:1a:9e:41:b1:52:
         de:3f:3a:5d:db:4b:22:89:46:63:98:13:d8:f4:b1:fe:24:0e:
         da:a6:0d:92:85:6e:3c:e1:1b:8b:f1:c6:5b:20:19:5a:bd:52:
         7c:07:64:45:73:7f:7c:8e:9b:2f:0f:5f:e3:c1:fe:13:25:bd:
         25:54:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:48:59 2025 by rpki-client