Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
File:                     gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json)
Hash identifier:          hiNg/nuRu/esDF+c6FO8xU3AO34QHQCa4T9Nqv8hpz0=
Subject key identifier:   5F:F7:48:93:5C:2B:B7:85:D8:D5:82:52:8E:5A:10:B6:15:79:FD:7F
Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
Certificate issuer:       /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
Manifest number:          0256
Signing time:             Sat 29 Mar 2025 02:02:37 +0000
Manifest this update:     Sat 29 Mar 2025 02:02:37 +0000
Manifest next update:     Sat 05 Apr 2025 02:02:37 +0000
Files and hashes:         1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: EI47hVhsuUn21d00Siy4TZq9aA+YQlZ1p7xnkXPe7O8=)
                          2: EE62A36A0D9F11EDB7631D1BC4F9AE02.roa (hash: H7gFBfSKuVP6R/OmKqYC78WBb2LAqvaWDA0cY1eM3ag=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143A67
        Validity
            Not Before: Mar 29 02:02:37 2025 GMT
            Not After : Apr  5 02:02:37 2025 GMT
        Subject: CN=67e754bd-94d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:5d:18:c7:a4:df:c7:b0:24:3e:91:21:45:
                    10:fe:96:e0:c5:e2:66:af:ba:45:d8:88:c2:80:b9:
                    56:ce:cd:55:b0:0f:81:4e:02:5f:3f:cb:43:7b:26:
                    8b:ac:2b:a6:c1:05:cc:7f:7b:c2:58:fe:2e:21:4b:
                    2a:38:bd:ce:31:10:09:ec:32:4c:81:2a:0b:94:60:
                    e7:f4:11:26:83:2c:dd:23:5a:cb:e1:10:bb:28:c9:
                    03:54:3c:5d:07:47:7f:7b:5a:e5:e2:b0:db:c8:4e:
                    1d:f5:98:ef:16:06:89:27:85:37:64:f6:9a:31:35:
                    21:eb:2e:ac:3a:c5:29:ef:41:38:26:18:89:97:db:
                    92:60:50:6f:9d:3e:45:94:96:80:27:b1:0b:15:ce:
                    3b:b1:0d:e0:dd:d6:84:3b:04:8c:05:82:a5:c1:a7:
                    b8:11:d1:9c:b7:2e:16:db:bd:a9:a2:23:59:b0:e3:
                    2d:07:e6:e1:99:00:db:fc:e3:97:a9:82:c2:01:21:
                    a7:27:66:50:ff:e9:50:4e:b9:a9:34:9e:3a:5a:b9:
                    fa:48:53:cc:71:fd:c6:d7:ce:eb:33:e7:e6:33:4e:
                    f6:78:0c:77:a3:0b:86:13:91:aa:a6:0f:76:6c:b4:
                    5a:56:fa:20:37:83:63:8b:d8:81:56:5d:66:1c:a3:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F7:48:93:5C:2B:B7:85:D8:D5:82:52:8E:5A:10:B6:15:79:FD:7F
            X509v3 Authority Key Identifier:
                keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:eb:a3:32:89:c6:bc:76:c5:56:fa:ab:5a:6d:44:08:a7:a0:
         c6:87:d1:c9:65:7b:66:8a:7d:46:29:02:a8:dd:9e:b6:59:ce:
         67:46:ab:43:66:1f:c9:15:ec:d2:54:de:10:fe:26:73:47:af:
         7a:ac:52:5e:99:91:0c:f9:71:9a:9a:02:2d:7e:8e:88:61:f7:
         97:c4:58:52:3d:e4:bb:e4:cb:f6:46:be:0a:03:47:75:ad:4f:
         23:b0:b6:85:4b:3e:33:e6:cf:81:15:fb:47:e6:0c:f3:1e:d6:
         d5:76:58:18:a2:15:85:b9:7e:c3:46:0d:0d:c9:b1:cb:af:27:
         e0:4b:08:e9:1d:9e:71:85:e1:8d:69:fc:b6:ec:a5:99:2c:57:
         ba:0f:51:2c:f2:fc:7e:96:ff:2b:87:00:3d:32:b5:9e:8e:63:
         3e:d6:71:bc:42:2c:b5:32:9e:32:48:f4:d6:f5:23:78:80:e7:
         89:49:ce:50:95:60:65:65:81:d0:a3:49:ca:2e:77:b7:cb:9a:
         ab:3c:e7:d1:70:8f:55:e6:cf:06:eb:cf:ef:af:7b:14:89:8b:
         4d:78:20:2d:35:b6:47:8e:0e:53:d9:53:aa:54:27:a0:f1:24:
         61:9d:67:96:b4:41:69:b0:f0:bb:7b:82:30:ec:82:4b:fa:76:
         f7:28:c2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:18 2025 by rpki-client