Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File:                     T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier:          +z7qaiH/Gnd/Aus7PbM1OQycNA42fgKxdIa4trj0IYs=
Subject key identifier:   69:07:E5:F9:72:AC:E3:EE:37:71:63:EB:5A:9D:04:E5:ED:35:DB:92
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       0378
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number:          0369
Signing time:             Sat 29 Mar 2025 01:13:12 +0000
Manifest this update:     Sat 29 Mar 2025 01:13:11 +0000
Manifest next update:     Sat 05 Apr 2025 01:13:11 +0000
Files and hashes:         1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: cRHKeknde7viPz/GMEtQTzmo8J2YZGvYR491kkZvzRQ=)
                          2: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: xWMMfEWphw+jGw6vFyTgUW/C6T4JCFAjmX3tY8qjIQU=)
                          3: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: q9Ub/O/CxWNZ+a3hm7Iv+ArFH+XEypUPU6PVAyD6z+U=)
                          4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: JV8w5HTbgBjA5P018WfQWq636lJGXmUnJAVnuy5z5CQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B
        Validity
            Not Before: Mar 29 01:13:11 2025 GMT
            Not After : Apr  5 01:13:11 2025 GMT
        Subject: CN=67e74927-f3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:d5:04:7e:ff:72:59:5e:b9:b8:fc:fc:dd:
                    4d:f1:9b:a5:70:de:ce:24:65:75:c8:4b:a1:fd:1e:
                    00:4f:32:00:d9:df:c5:8b:f1:b5:f3:7c:13:ec:c0:
                    94:27:6d:2c:7f:6d:4f:7f:d9:57:8e:fa:9b:7c:6e:
                    9f:ac:f2:24:df:de:0f:76:d4:42:65:8d:4c:b6:10:
                    51:4b:2a:79:58:7f:c0:13:35:09:2c:71:87:a7:2b:
                    ce:4a:9b:9e:93:46:ed:36:38:ed:07:59:a7:1b:cd:
                    1b:0a:d7:df:da:25:8b:94:79:48:54:bb:a9:44:b8:
                    60:bd:49:a0:72:0f:18:14:f1:69:5f:b8:51:87:01:
                    c4:80:45:3e:36:84:49:2f:e6:94:ba:6b:d4:aa:b6:
                    b8:d1:a4:bb:11:de:66:82:87:12:e5:92:67:9d:34:
                    0c:58:04:b7:07:67:f3:2e:33:78:40:78:3e:c5:7f:
                    47:74:fb:75:cb:42:67:be:ab:36:3b:71:50:0a:61:
                    26:f9:08:5c:2e:89:93:32:f4:81:4c:26:9e:8b:66:
                    b6:2e:e6:5a:ff:93:77:f4:65:5a:e1:6f:6f:87:3f:
                    72:78:2e:45:58:5b:b7:9b:38:a5:37:3e:9e:32:d8:
                    87:99:91:ab:2c:16:a6:78:a4:7a:b4:9d:7a:c8:31:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:07:E5:F9:72:AC:E3:EE:37:71:63:EB:5A:9D:04:E5:ED:35:DB:92
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:56:5a:69:6a:46:08:81:87:56:b9:b2:21:be:0a:13:ac:db:
         88:03:a1:ea:c1:7e:81:21:d9:9b:96:57:02:af:7a:bb:7a:19:
         25:09:43:88:d3:69:12:db:96:75:04:ad:7e:64:38:09:f8:02:
         24:f4:83:d7:38:18:51:cc:ce:a6:39:d9:2a:14:b7:bc:b7:78:
         b9:b4:75:2f:3d:7c:5f:37:54:a4:31:0b:98:80:d1:8e:1d:30:
         0e:6c:88:b4:aa:2e:7d:f6:03:b0:5d:f4:aa:f3:69:74:5d:89:
         e0:23:92:03:c1:db:aa:42:3b:7a:55:1e:f0:01:22:7b:38:2b:
         d5:b3:b1:45:58:7b:3f:db:79:29:8c:71:77:9b:f2:70:8c:e4:
         2d:da:75:c7:d0:8c:1f:88:5d:f3:00:6a:6b:ab:68:5e:fd:77:
         15:42:ec:98:15:b5:9f:ca:13:76:9d:c3:c1:76:a2:1b:a4:8f:
         62:33:eb:91:6c:a7:87:14:7a:c8:55:90:6d:5e:9a:ce:e0:27:
         c1:a0:06:0e:22:70:2d:5f:7d:1b:63:f3:dc:f6:d4:d2:d7:1e:
         8c:4f:43:26:10:38:bd:98:3c:be:8c:02:36:80:8b:a5:35:04:
         04:ea:32:86:c5:ea:10:d8:88:98:8f:69:d0:b7:de:52:25:e9:
         3a:b8:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:05:07 2025 by rpki-client