Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
File:                     fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json)
Hash identifier:          Tmtx56rsN9oOMvWZvYyjoDGgCOJ1eu7GFiQMEFWvdm8=
Subject key identifier:   BB:A6:F8:6A:28:1C:40:43:13:E5:D6:DD:04:50:35:75:E6:D5:62:B2
Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24
Certificate issuer:       /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24
Certificate serial:       0870
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
Manifest number:          0864
Signing time:             Fri 28 Mar 2025 20:56:43 +0000
Manifest this update:     Fri 28 Mar 2025 20:56:43 +0000
Manifest next update:     Fri 04 Apr 2025 20:56:43 +0000
Files and hashes:         1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: F/TspUVOuJMLFHq7xAZ1AFFnOdagJUmW7v0ndXVUemo=)
                          2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: ltvBn5VJXtz7vFB4RWKdDxpG2I+f/J+ryir96EuYqEY=)
                          3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: Te4pe39x+PJOiuAURDPZwLT95T5tpG83Z202ebgxGsE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA1D
        Validity
            Not Before: Mar 28 20:56:43 2025 GMT
            Not After : Apr  4 20:56:43 2025 GMT
        Subject: CN=67e70d0b-f25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:66:80:cd:3a:d7:d0:f4:f8:19:45:fb:11:
                    8d:e3:d9:51:3a:47:84:b3:e3:49:2e:f7:b2:c9:d1:
                    b2:78:b5:67:68:85:6e:3d:5a:65:ea:d6:f3:62:71:
                    4d:6b:f9:89:08:66:14:4e:5c:14:29:0c:21:a8:36:
                    2a:bf:57:40:a7:81:4d:b5:85:13:5a:16:59:b1:8a:
                    09:71:6e:9f:51:6a:48:3c:7f:4f:12:86:2f:c2:04:
                    fa:f8:b2:f0:8b:1c:c6:57:20:86:6a:31:9d:bc:f4:
                    46:e8:ae:6b:47:b6:2a:47:d7:c0:ed:05:a0:19:3f:
                    31:99:95:4c:da:ef:1b:36:b6:71:68:91:d3:06:f5:
                    0a:a7:a7:cd:65:80:26:48:cc:fb:3e:ca:27:72:f1:
                    ba:09:f7:00:b3:b3:1e:b4:3f:a6:35:98:21:1a:9a:
                    21:65:7e:16:b3:ca:46:03:34:e3:0a:33:5e:fa:b7:
                    17:71:0c:f8:8a:30:54:2b:6a:0c:16:ab:2e:88:e0:
                    c1:c8:b2:d8:98:99:bb:b8:88:69:9b:45:da:aa:a2:
                    1d:b5:6c:76:75:8a:d8:71:2b:bf:08:4e:f5:b1:94:
                    47:45:13:e4:87:fa:91:1c:d3:34:f1:df:43:ee:6c:
                    0b:86:c7:2e:80:63:20:d7:08:94:4d:23:18:47:60:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A6:F8:6A:28:1C:40:43:13:E5:D6:DD:04:50:35:75:E6:D5:62:B2
            X509v3 Authority Key Identifier:
                keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:c4:c9:d0:e1:25:93:f2:78:c0:9a:04:91:97:03:d7:c9:
         9f:55:48:8b:9f:a3:8f:e2:1d:25:41:b7:e1:2b:2f:c0:20:76:
         3f:57:85:73:57:ed:1f:88:53:e9:53:8b:42:18:37:31:8d:da:
         9e:25:a3:5f:5a:c2:8c:c0:99:e8:df:ba:17:b5:2d:6e:79:47:
         09:ae:6f:46:09:4e:b2:74:62:a9:71:44:e4:8f:e4:e1:c9:e0:
         39:01:2d:d1:59:30:d5:11:7c:2e:78:a4:59:5a:7d:b7:91:2d:
         ac:20:b1:9b:7d:1b:e3:a0:b0:8e:98:b1:be:d0:76:c3:d1:64:
         97:32:80:43:7b:7b:61:f8:b8:c1:e4:99:36:2c:70:1f:ce:60:
         bf:67:a4:94:ce:52:40:80:6c:39:e6:33:ee:f3:0b:ab:25:d8:
         48:a7:e7:d1:4e:0e:d3:55:a4:c4:8a:1a:1c:17:b3:bb:7a:ed:
         8b:ce:e5:50:e6:0a:56:f3:81:cd:eb:c4:8a:16:2a:25:50:de:
         47:f1:da:d8:e5:3b:55:8c:ee:3f:06:92:ce:be:5c:83:af:58:
         6d:28:75:8e:5b:32:5f:ae:e5:6e:0c:ba:5b:c4:81:e8:07:80:
         e5:89:d5:f3:28:28:12:0e:91:43:1b:a5:8f:a3:73:37:6e:ee:
         1c:47:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:00:32 2025 by rpki-client