Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
File:                     BiJAzedW2VtXd-JnqnsGVPg09JM.mft (raw, json)
Hash identifier:          NlfDhmygFBXdbsnKonFUhiBdiDC4UAMcfBrIZLK3evs=
Subject key identifier:   CA:A3:43:55:F1:B3:66:2C:9D:17:E8:4E:05:2B:02:B8:C2:CF:CD:80
Authority key identifier: 06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93
Certificate issuer:       /CN=A919DCE3/serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
Certificate serial:       0604
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
Manifest number:          0600
Signing time:             Thu 30 Jan 2025 22:49:33 +0000
Manifest this update:     Thu 30 Jan 2025 22:49:32 +0000
Manifest next update:     Thu 06 Feb 2025 22:49:32 +0000
Files and hashes:         1: BiJAzedW2VtXd-JnqnsGVPg09JM.crl (hash: 40hYmZ0/kNQ2GLoXWnhR6fwKqCI6UWGLFTaWJ5VL0m0=)
                          2: E9610376903B11EBB91C8B5DC4F9AE02.roa (hash: x2N2Un6ehEE1eGqvj7WU8PHZwaULyzAkc/GywCEKePI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DCE3/serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
        Validity
            Not Before: Jan 30 22:49:32 2025 GMT
            Not After : Feb  6 22:49:32 2025 GMT
        Subject: CN=679c01fc-28d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:a0:04:ae:f2:80:50:16:d8:0a:e2:03:77:
                    8c:36:c8:82:9a:08:ab:30:e1:84:79:2f:30:ef:cf:
                    a3:96:75:b6:db:de:5f:02:0b:df:81:5c:94:8d:c9:
                    95:33:63:93:72:bf:cd:07:10:cf:c0:6d:f3:b4:d6:
                    74:de:40:58:d3:8c:81:6a:07:b5:6c:3c:ca:dd:8e:
                    a1:62:61:3b:e6:e6:2e:64:01:36:63:86:80:4f:cf:
                    25:4e:44:b0:70:2b:df:3e:f8:40:7d:b8:f8:77:5b:
                    76:bf:81:db:41:39:0f:76:ea:4b:62:f6:ed:4b:64:
                    ba:0d:a6:cb:cf:7f:a9:7c:ea:3a:eb:0f:4c:c8:2d:
                    77:aa:8d:88:35:54:f7:c4:5e:9a:c5:7a:3f:d9:8c:
                    ca:4d:b6:4c:19:e1:78:7f:f3:90:41:6b:24:01:b9:
                    b9:6c:7e:76:76:5a:3b:24:a2:ff:34:2b:bb:44:f0:
                    90:7a:6d:71:79:4c:d4:ff:59:a9:82:cf:db:be:db:
                    6d:49:c2:dc:0f:6a:58:39:36:32:18:62:c6:99:2f:
                    27:67:cd:33:87:8c:a9:23:32:20:87:80:27:83:09:
                    0c:9f:18:e8:a4:cb:d2:d5:8a:d5:13:e6:fd:c4:4e:
                    c7:3d:4f:b7:11:df:fc:3f:15:7e:ef:c1:8b:15:f8:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A3:43:55:F1:B3:66:2C:9D:17:E8:4E:05:2B:02:B8:C2:CF:CD:80
            X509v3 Authority Key Identifier:
                keyid:06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:04:36:c9:e4:f1:bf:00:cc:07:78:20:13:82:c5:bd:04:
         86:34:80:c2:4c:c4:4e:2a:89:80:51:cd:c7:a1:2c:79:a1:fb:
         ce:b1:4a:8a:d8:ea:35:19:98:60:f4:78:7b:8c:c8:a7:b6:65:
         5b:77:3d:29:a4:34:b4:4d:ff:0e:ab:0b:5c:d1:32:42:9b:05:
         ac:cb:6f:18:c2:f2:b6:fd:74:15:0d:a0:11:80:54:56:d3:9e:
         ba:79:bc:7e:eb:43:e4:b2:b2:e0:c4:92:2c:62:dc:b6:49:c2:
         65:d6:4a:c1:ea:39:73:79:89:37:66:1c:da:6d:e3:99:88:b3:
         3b:4f:ee:7a:4b:fd:88:61:c5:ef:9d:f7:29:bd:4c:dc:73:8c:
         36:af:eb:0c:5e:8d:c4:8c:b0:0a:c9:99:5d:13:e6:2a:a6:b2:
         94:20:10:4c:e2:c5:79:e8:27:70:25:15:fe:51:cc:fc:96:7c:
         94:70:86:37:02:6a:e0:c8:94:a1:73:12:a4:04:e9:42:64:09:
         74:cc:84:85:2d:65:ab:3b:90:ad:ee:1c:d8:21:c2:cf:56:df:
         66:8c:48:58:b1:dd:d4:99:f0:d4:6b:99:44:1f:99:69:65:ef:
         f8:1c:22:b9:86:e0:d7:44:95:17:ee:59:76:fe:b3:12:3a:a7:
         2b:b2:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:37 2025 by rpki-client