Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
File:                     guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json)
Hash identifier:          LQ/HM1wvu2QYhSPw0SZ1EzaqWY3muCA/TqwZFZnObMc=
Subject key identifier:   F1:64:67:24:F3:0A:70:87:E9:A2:B9:72:B9:B5:F4:63:CA:3D:4B:BB
Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Certificate issuer:       /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
Manifest number:          6A
Signing time:             Fri 31 Jan 2025 05:58:44 +0000
Manifest this update:     Fri 31 Jan 2025 05:58:44 +0000
Manifest next update:     Fri 07 Feb 2025 05:58:44 +0000
Files and hashes:         1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: E3jCKBe/aJKkxp6RtfXOlj4uU/ijHqKlq4LB5yq5MkQ=)
                          2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: tty+LCDvang4Y0BeMpj6lCM+SIBVUZxAkloasgq2izo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
        Validity
            Not Before: Jan 31 05:58:44 2025 GMT
            Not After : Feb  7 05:58:44 2025 GMT
        Subject: CN=679c6694-39b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:ca:8c:da:1d:68:83:f4:42:d4:fa:c0:49:
                    00:bd:14:db:ff:71:78:67:62:d0:c7:f0:6a:c3:08:
                    8a:c8:67:35:cc:13:62:7e:5d:07:8a:42:4c:42:63:
                    ee:47:58:70:66:16:96:fc:14:f5:1a:9c:74:64:94:
                    97:c6:c5:b6:a4:c7:4b:01:5c:f2:77:41:fc:7a:84:
                    cf:ed:91:6c:ec:e1:55:7d:ac:db:67:49:d1:1b:d0:
                    63:6d:a2:06:33:de:88:1c:53:0c:60:60:a1:9e:b1:
                    2e:d7:9d:f0:3a:a9:30:d6:e2:1b:b2:a9:80:4c:02:
                    27:ab:f2:a6:6f:97:02:84:d5:59:b3:3b:71:da:d0:
                    f7:a0:01:cb:bd:93:89:32:93:5a:54:5c:36:a1:fa:
                    c8:9c:fe:09:98:e8:25:ab:01:3f:7e:ff:e2:43:da:
                    97:ae:20:a4:cc:99:1a:35:cd:f7:e4:28:7d:84:b9:
                    43:0a:bc:ea:d3:b9:21:e6:40:17:8d:8b:53:3a:58:
                    dc:48:21:76:75:d1:29:0d:e5:69:9c:a7:3c:bb:7c:
                    f9:c6:c3:e1:e6:13:5e:fd:46:dc:3c:a7:f5:58:e6:
                    e7:f4:e2:1e:1b:46:39:56:f4:0b:a6:d2:96:92:1c:
                    2b:c0:17:e8:38:dd:8c:11:b3:8d:88:2e:9f:22:4a:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:64:67:24:F3:0A:70:87:E9:A2:B9:72:B9:B5:F4:63:CA:3D:4B:BB
            X509v3 Authority Key Identifier:
                keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:14:32:68:1e:99:73:02:01:60:bb:06:1c:d3:8a:91:62:e8:
         43:7e:ea:1e:f9:85:6c:d4:99:ab:76:25:8a:8a:b0:f3:bb:7d:
         0f:c9:ba:c0:26:95:22:7d:d2:80:19:38:e6:e9:d5:9b:4e:e7:
         e7:4f:c5:a8:0d:4e:42:89:84:9d:cd:3f:40:64:ba:b7:5a:fd:
         a2:53:ea:d6:be:91:a2:68:ed:cd:bb:8e:81:c4:85:0c:2a:0d:
         24:78:89:67:9c:3d:9c:97:3a:6f:d1:82:6b:3e:4c:b5:a0:ec:
         03:ec:a9:75:be:41:d7:a8:3b:54:f3:6d:de:9c:cc:d3:42:b2:
         32:d9:aa:22:f9:90:f7:ac:dc:d6:1e:22:a8:47:b0:53:5c:e3:
         ac:93:4f:ca:f3:bc:49:fb:66:96:fb:56:ce:0c:7c:94:38:e9:
         9c:ce:6f:62:ec:42:78:18:78:63:0e:d0:7a:74:ba:9a:03:8c:
         f1:c6:3b:c9:6a:2b:5b:d9:5a:27:ef:32:5c:0a:91:88:67:5b:
         ab:f1:ff:bc:f0:d2:1f:97:2a:a4:af:f9:c0:f7:90:b1:13:e3:
         21:c0:92:56:de:a0:50:88:10:bc:0b:74:30:77:e1:47:9d:3c:
         8e:9a:68:d5:8c:db:68:bb:b8:d2:5c:dd:93:15:b2:e6:c3:53:
         87:2f:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:23 2025 by rpki-client