Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
File:                     nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json)
Hash identifier:          gtgJFAbyfLW8D/1wJav/a/5DpticetAMeSITFQwOl9k=
Subject key identifier:   24:CE:B9:04:F9:BA:69:D3:45:66:90:0E:5D:7D:DF:F1:8B:7C:F2:90
Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71
Certificate issuer:       /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
Certificate serial:       041D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
Manifest number:          0418
Signing time:             Fri 31 Jan 2025 00:27:35 +0000
Manifest this update:     Fri 31 Jan 2025 00:27:34 +0000
Manifest next update:     Fri 07 Feb 2025 00:27:34 +0000
Files and hashes:         1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: YA8hjt8fFQJTrwn9FaOQnF5f6WHjl36K9Ss1+oCGyCQ=)
                          2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: 9BjSNtNI0t5KFZOPEwLsrwtwuYFD1A/cyJU1JZKxEKU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
        Validity
            Not Before: Jan 31 00:27:34 2025 GMT
            Not After : Feb  7 00:27:34 2025 GMT
        Subject: CN=679c18f6-0065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a5:13:0a:62:69:2e:21:1e:1b:9b:f6:a6:5d:
                    2e:24:7c:25:ad:79:18:69:c8:c3:56:54:d1:b4:0d:
                    bb:7c:5e:fb:9d:5d:0d:2a:b4:0d:9f:93:8d:e3:66:
                    d1:4a:d8:5d:34:7f:ac:2e:8f:12:46:3f:79:23:dd:
                    69:16:ee:af:a4:76:9e:ea:94:c5:bd:c9:41:48:5d:
                    b7:c5:a2:ec:97:56:9e:9e:fc:42:fc:e1:f9:6f:d7:
                    5a:30:a5:a9:24:4c:84:e2:a7:1c:f1:a3:77:c3:7c:
                    2c:fe:d7:76:0f:a2:6f:77:3d:5b:ba:bb:fe:03:d2:
                    c0:cb:cb:df:0d:87:b2:8e:e8:91:8f:ad:1a:ee:96:
                    ea:51:4f:16:fd:bc:73:21:6c:8e:b5:d7:da:0c:de:
                    d5:2b:d2:0d:c7:e3:c2:39:50:c0:b5:bd:80:60:0a:
                    50:97:53:d0:4c:65:46:c4:c6:ac:78:39:e0:ea:12:
                    e7:a1:82:36:64:47:c9:cc:7f:1d:9c:de:96:85:67:
                    74:0c:bd:14:bc:25:18:5f:cc:42:c4:39:92:c4:69:
                    59:bf:e6:e4:37:88:55:fc:be:ae:d1:09:95:d0:df:
                    1c:83:1e:c5:56:41:7b:df:51:ed:1a:f2:37:51:bc:
                    9c:67:63:b4:7d:2d:18:95:c8:aa:5e:1d:43:8f:1c:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CE:B9:04:F9:BA:69:D3:45:66:90:0E:5D:7D:DF:F1:8B:7C:F2:90
            X509v3 Authority Key Identifier:
                keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9c:40:1c:1a:ad:bf:a4:73:91:de:ba:1c:b0:0c:79:92:19:
         1a:ca:9f:65:69:fb:1b:96:4e:6d:d5:ba:e5:ff:13:3a:fa:f4:
         e2:06:87:79:cf:d5:f8:74:33:8a:f4:66:7e:72:92:88:a5:30:
         eb:6e:3c:2a:54:b9:b9:f5:35:fc:cc:86:c2:4b:0c:48:ff:7b:
         39:55:40:e2:9e:cd:3d:0c:c3:8b:ff:c0:1c:52:b0:29:eb:60:
         80:53:e4:e9:6e:52:00:68:9e:31:0a:e8:5f:0d:94:6c:2b:8d:
         20:48:7b:34:b5:08:0b:f8:92:ac:38:e9:ea:00:94:64:a0:98:
         d0:e5:1c:b6:19:b0:00:7f:b1:40:89:32:ee:07:69:66:a0:e9:
         d1:67:8e:8d:b3:c1:14:cc:1f:e3:20:9a:72:d5:d2:8b:58:e2:
         b5:3e:b0:86:ce:b6:2f:88:25:07:e7:e2:2f:78:50:45:64:58:
         6b:7a:39:30:ec:2c:dd:b6:6b:e4:40:20:09:76:89:5d:94:91:
         7e:42:7e:4e:cf:bb:8f:3a:0d:a5:50:19:74:1c:47:9a:65:b1:
         63:08:4f:73:5e:cc:2a:09:ae:ca:59:9f:37:1f:c9:fa:ff:be:
         bb:db:ae:46:80:c6:d8:5f:f4:50:d7:28:bb:04:72:44:be:5a:
         3c:79:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:41:09 2025 by rpki-client