Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
File:                     g_H_6dM06H_0zXVY3e81L-bfIGk.mft (raw, json)
Hash identifier:          sS1TSy9EdDHuxXG8+/sUskhfc+62BXE91l3xPUYxQss=
Subject key identifier:   76:92:E4:AF:90:5C:D2:6B:A3:A0:95:C0:4C:5E:C1:54:16:6D:13:18
Authority key identifier: 83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69
Certificate issuer:       /CN=A919DFFA/serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
Certificate serial:       0812
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
Manifest number:          07FE
Signing time:             Thu 30 Jan 2025 20:57:12 +0000
Manifest this update:     Thu 30 Jan 2025 20:57:11 +0000
Manifest next update:     Thu 06 Feb 2025 20:57:11 +0000
Files and hashes:         1: g_H_6dM06H_0zXVY3e81L-bfIGk.crl (hash: 6n0Lg6sl2fQdKJ9Hy68de05zfEVcQNqFnf1zRnCd7r0=)
                          2: BEDD84DE1E8A11EC9B002456C4F9AE02.roa (hash: Zcv4DlGyLShYzxt42eooIfxJSMsaIvu55ZLPj/EXPo8=)
                          3: 411FDC48E8F111EE99AF8287C4F9AE02.roa (hash: v8or0YHdUMAJufFpn01ovGjqNM/vpqajub/hiC3wsZY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DFFA/serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
        Validity
            Not Before: Jan 30 20:57:11 2025 GMT
            Not After : Feb  6 20:57:11 2025 GMT
        Subject: CN=679be7a8-07c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8c:35:d2:2c:cd:31:88:09:78:ac:47:c5:64:
                    4d:a2:84:86:f5:4e:92:07:18:66:d1:15:19:5f:e9:
                    53:79:e8:e0:c6:08:48:c0:6a:25:de:13:ef:b8:f5:
                    ff:03:f5:29:bc:13:d9:ca:57:6f:00:80:3f:75:28:
                    d3:e2:58:67:c5:69:6b:60:08:9e:57:69:bc:a8:87:
                    56:59:5d:d4:fa:cb:15:88:31:11:43:19:3d:75:59:
                    30:5b:12:49:91:16:bf:4c:a5:93:92:ce:de:49:65:
                    b1:62:8b:5d:84:41:a5:c1:0e:b2:eb:85:e1:7c:7a:
                    c9:42:35:60:c7:76:b5:03:4c:ad:50:c0:a1:c9:a4:
                    71:4c:e2:f2:b0:be:1d:7b:67:75:f6:f6:2f:5a:ac:
                    77:bb:fb:0a:12:75:76:27:ef:f0:63:3b:94:e6:9b:
                    15:95:1d:27:a0:e7:89:e8:ae:44:27:24:c6:2e:ce:
                    9e:c6:b3:56:87:eb:b1:21:42:2f:48:f8:63:19:fd:
                    10:2f:cc:eb:94:87:13:dd:d4:cc:a7:c5:17:04:4f:
                    9a:df:ba:10:96:93:ef:1d:2b:40:ad:7e:62:25:d1:
                    a2:0e:9e:ec:26:ff:a8:7a:d5:4f:5b:c3:82:70:8f:
                    6b:22:dd:5b:4e:84:70:c9:9a:38:c3:e5:c6:39:0d:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:92:E4:AF:90:5C:D2:6B:A3:A0:95:C0:4C:5E:C1:54:16:6D:13:18
            X509v3 Authority Key Identifier:
                keyid:83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c5:a4:f2:de:54:0c:09:b7:d8:56:71:12:3c:d9:67:0e:89:
         38:53:02:33:8c:c9:3a:1e:4e:eb:c9:46:7c:dd:34:e7:77:6f:
         10:68:43:b5:f2:19:7a:48:36:ff:71:e0:7f:0b:47:fb:99:2d:
         09:da:26:b2:f1:93:87:ce:76:ac:ea:76:15:28:39:24:42:a6:
         af:ba:c7:37:bc:71:4e:e4:74:db:55:dc:24:24:63:e6:b9:1d:
         75:b5:2e:d5:76:d8:b3:f5:8f:d9:b8:db:6d:51:34:23:80:9b:
         e9:b0:f2:26:c1:94:23:8c:1f:32:e9:5a:cd:0c:65:22:a4:1c:
         e7:15:a6:2d:fd:8c:40:3a:8e:63:82:cc:5e:f6:21:08:97:da:
         7b:91:8c:63:68:ee:e4:42:8c:4f:29:ba:4b:f9:58:a8:15:a0:
         68:df:87:bc:38:de:13:7c:2e:be:7f:5d:e2:7e:71:fe:d8:dc:
         60:ff:a4:82:8f:a8:7b:17:f3:c6:bf:bd:f0:a4:1e:26:57:d3:
         04:3f:ad:84:ef:07:7d:73:55:f2:db:ad:0b:ee:ef:3d:86:02:
         61:0a:63:5d:c6:97:a3:f1:3f:53:11:f2:82:1d:5d:45:5a:76:
         5c:89:90:bc:32:0c:7d:8c:da:cc:50:77:b4:33:fd:56:86:1a:
         04:b0:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:47 2025 by rpki-client