Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
File:                     -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json)
Hash identifier:          5oP6X1HwNWCTsUssVP84JsUOQRkQbMIteql/ZzEEC78=
Subject key identifier:   96:05:35:D4:29:EB:CE:FE:9B:EB:4E:3D:CC:53:84:9B:C7:20:91:B2
Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
Certificate issuer:       /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Certificate serial:       0637
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
Manifest number:          062F
Signing time:             Thu 30 Jan 2025 22:34:29 +0000
Manifest this update:     Thu 30 Jan 2025 22:34:28 +0000
Manifest next update:     Thu 06 Feb 2025 22:34:28 +0000
Files and hashes:         1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: Fbe3Z0TJhd/JrEIvYI3agYakL/NwbDAaN28kul5lASw=)
                          2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: iko0TAKPXlXdkQUZL7210qZyr/BZRegUTs2UUc4OgEk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
        Validity
            Not Before: Jan 30 22:34:28 2025 GMT
            Not After : Feb  6 22:34:28 2025 GMT
        Subject: CN=679bfe75-02c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:65:0d:36:78:62:5d:42:ca:0b:1b:0c:14:
                    03:2a:73:90:9b:61:77:86:18:ae:f5:58:c0:1f:15:
                    42:12:74:f4:28:e6:ed:e5:72:cb:7b:2b:44:72:82:
                    26:59:50:05:0d:d5:ac:01:74:b6:cc:30:57:26:ca:
                    b3:53:83:f2:95:e2:f5:e1:2d:04:d8:d0:8f:b0:c7:
                    91:a5:e7:1f:cf:dd:12:2a:48:1f:4f:37:b0:52:86:
                    d2:e8:f7:57:9e:60:07:26:33:49:00:96:ff:d0:ed:
                    9a:d7:f8:0c:b9:48:e8:17:5b:15:70:35:de:fb:96:
                    9e:66:d9:07:1f:75:82:23:37:73:e3:18:49:2d:2c:
                    44:1c:9f:b2:76:ca:f3:9c:98:cf:93:fc:1a:eb:fd:
                    09:00:6f:c9:15:e5:d7:74:09:90:23:1d:47:95:04:
                    11:2a:b0:72:68:3b:6e:e7:b5:b6:a1:4f:14:70:a0:
                    6c:47:f7:61:c7:25:de:7a:b7:e1:46:57:29:8d:51:
                    02:a4:ba:d0:fa:ac:a3:c3:c6:b1:2c:08:ee:e2:43:
                    db:8d:68:f1:24:cb:46:e6:f1:0a:72:c0:7d:18:3b:
                    75:7a:1c:d9:d6:d9:de:b4:b1:d0:c8:0c:4e:a8:47:
                    a7:af:20:d3:f2:cd:ad:8a:68:25:18:c7:a0:4d:1d:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:05:35:D4:29:EB:CE:FE:9B:EB:4E:3D:CC:53:84:9B:C7:20:91:B2
            X509v3 Authority Key Identifier:
                keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:6d:4a:ff:25:cf:bf:91:61:86:e5:86:0e:e4:85:b9:76:
         a0:65:6f:58:19:b2:24:9a:cc:01:ae:9c:ff:f2:51:5c:ab:52:
         4d:63:7f:ad:bf:6b:49:9c:c4:5e:c2:0d:12:d6:7d:64:15:37:
         69:53:16:50:bd:64:3f:9b:4b:75:4c:16:50:e4:7f:97:a5:5e:
         0d:d0:4e:03:71:41:50:47:ad:14:c6:e3:c5:85:21:4e:64:8e:
         53:34:f2:4d:78:f4:40:a8:3a:36:bd:cb:e7:00:32:38:dc:22:
         8d:0c:82:e6:56:33:29:f2:6d:d7:bf:77:68:f4:ee:66:71:cb:
         47:57:a8:31:d2:0f:d4:9e:f9:d7:26:6d:05:fd:37:b5:15:55:
         9c:27:cb:ac:cd:f4:4a:d6:79:90:19:fa:48:3f:36:9c:d2:e6:
         2b:75:05:35:c5:58:f8:9e:d7:7f:69:e0:1b:c7:dd:f0:99:10:
         02:d8:e1:b9:12:79:fa:e3:92:49:03:b2:16:c9:83:c1:35:fe:
         0d:21:93:b6:16:5e:81:de:b4:79:68:d3:18:e1:f3:c2:87:e3:
         da:37:1c:10:27:f2:2b:82:12:5e:d0:42:39:31:58:2a:44:1f:
         aa:87:eb:17:ce:52:fc:5a:d9:73:bf:3f:8f:49:d5:d5:1b:73:
         75:0b:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:55:59 2025 by rpki-client