Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
File:                     zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json)
Hash identifier:          bGp7xpc9HVjoCuwshVZ8VC7/oFNc4uwP89ToOCY8aks=
Subject key identifier:   8B:17:3C:97:79:AB:26:AC:23:D7:95:61:7F:88:05:A2:88:56:5D:B4
Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27
Certificate issuer:       /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
Manifest number:          01A7
Signing time:             Fri 31 Jan 2025 02:30:14 +0000
Manifest this update:     Fri 31 Jan 2025 02:30:13 +0000
Manifest next update:     Fri 07 Feb 2025 02:30:13 +0000
Files and hashes:         1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: zdMRTxTBRhr7auL3CdtIfoztHMQ+hYDOwa9X10TX5A0=)
                          2: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: X2hAsppM/jRjKRsLmyjCzm5Ax50DSNDAipyDKhugtZE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127
        Validity
            Not Before: Jan 31 02:30:13 2025 GMT
            Not After : Feb  7 02:30:13 2025 GMT
        Subject: CN=679c35b6-abc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:8f:64:96:65:3d:38:f9:1a:db:ee:96:c0:
                    3f:af:eb:6f:c5:80:8f:c2:37:92:6b:ec:3f:ca:22:
                    69:e7:07:b4:65:06:3c:7c:19:1b:65:c5:bd:fc:d8:
                    6b:a8:bb:46:27:15:09:5f:04:21:fe:97:ba:2a:56:
                    2a:2c:d0:77:2a:cd:ec:3e:f3:39:0e:3d:cc:7a:94:
                    5a:77:7a:08:52:6d:84:8c:28:86:02:88:28:41:fc:
                    6b:1f:2f:89:a5:92:8b:d2:a4:1d:61:dd:d9:28:91:
                    8f:40:59:89:82:7b:33:29:15:61:f8:15:83:6a:4c:
                    41:a1:28:c7:4f:00:8d:f7:6c:ca:f7:80:72:da:84:
                    c8:89:6c:e3:59:42:e7:48:64:63:bd:b8:3f:63:f2:
                    bd:54:b0:88:48:1d:b7:86:d1:fb:9b:02:57:24:1d:
                    77:8d:d1:94:06:39:57:e8:38:de:93:26:93:2f:37:
                    99:4a:db:08:3b:b9:6d:ad:1a:64:12:ca:60:35:c5:
                    21:de:2e:d6:a3:cd:fe:a8:00:bb:a8:d7:b4:c8:77:
                    ab:b2:75:33:18:7f:0c:63:26:43:79:7e:ed:15:ce:
                    c4:c3:f1:6d:33:e3:0e:d1:63:2d:df:09:5d:4d:34:
                    27:14:11:cc:f6:48:04:a3:a3:64:7f:dd:ee:48:e8:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:17:3C:97:79:AB:26:AC:23:D7:95:61:7F:88:05:A2:88:56:5D:B4
            X509v3 Authority Key Identifier:
                keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:e5:a4:0b:11:1f:b9:56:29:3d:98:f2:95:98:57:90:79:
         4f:46:9f:ae:cd:cf:e7:95:37:9f:74:25:dc:84:8f:8e:53:42:
         d5:3b:99:38:d2:be:5f:89:6c:fe:b9:10:00:6a:8c:5e:54:25:
         2f:9a:99:e0:0e:c1:6d:a1:24:7c:75:28:34:89:dd:9b:c8:13:
         f7:e1:5b:72:6e:6f:fd:0c:78:0a:1e:f6:2a:54:9a:68:ca:64:
         b4:b5:eb:f3:e3:81:dd:28:82:75:01:bb:88:0a:07:ed:59:9a:
         4d:52:9c:23:1a:b0:27:b8:e1:5c:33:cd:57:95:4d:50:d8:ce:
         c3:40:2a:a2:31:bc:7c:f3:f4:76:cb:be:b0:5a:a2:27:53:41:
         ca:61:12:55:5c:d5:eb:01:44:0f:aa:fb:21:4a:09:af:03:c0:
         a1:96:93:de:5a:85:d8:06:07:52:19:6d:af:d9:84:ae:f2:84:
         40:74:b0:d7:eb:5b:40:bb:33:52:1a:ba:3b:d3:89:79:47:b7:
         3b:e0:cb:c3:fb:77:6c:e0:98:3a:98:71:c5:5d:71:36:a7:6d:
         cd:e8:e0:82:a3:ae:11:d8:96:e6:3c:49:99:4a:13:ba:4f:fc:
         91:15:76:33:d4:f5:07:ec:48:30:a0:93:2a:d8:b7:c7:21:9d:
         e7:21:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:47 2025 by rpki-client