Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          XDbLTcnj4HiqR36QzUdGPhBGugrdjVcWIZHMakVKUp8=
Subject key identifier:   97:71:68:61:50:41:84:23:5D:A1:43:89:6C:C4:DA:71:D6:83:4D:98
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       08C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          08A1
Signing time:             Fri 28 Mar 2025 20:53:16 +0000
Manifest this update:     Fri 28 Mar 2025 20:53:16 +0000
Manifest next update:     Fri 04 Apr 2025 20:53:16 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: GfwuJW3pQffONiMAu68VpoIaTv747p1TcbAmTAWhPc0=)
                          2: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: TccZk/TGvx3r9QdnASoZVSxv2kMWJg57Q5cy6O+RFSA=)
                          3: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: ty5BYEXKZV5AWkkmYV4pnoWKf56lpR/zLBDndr/xc/8=)
                          4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: fcDSO/sb2ishtHrFu2bzf2l9xwmLRSMg0lfcyJWjJ+k=)
                          5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: lUm2TNPxrCXgL1T7LIO3Y79aFpYIYcK/d2SLX4eq438=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1
        Validity
            Not Before: Mar 28 20:53:16 2025 GMT
            Not After : Apr  4 20:53:16 2025 GMT
        Subject: CN=67e70c3c-f5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:4f:83:79:1d:ec:af:c8:07:70:fd:89:d8:
                    50:17:4d:b2:69:d2:9b:62:40:cb:c8:38:70:e9:9b:
                    c8:31:42:a7:54:ab:b7:94:c4:1f:15:a1:e4:09:8c:
                    84:18:65:fa:62:21:28:95:e9:c0:eb:6f:f4:6d:98:
                    2e:0c:24:42:ea:21:0e:e5:62:1a:f6:f8:ec:60:b7:
                    15:d1:b0:38:42:ae:81:a0:11:92:70:a9:c1:3c:33:
                    56:75:4c:10:9d:f0:42:5e:e8:d8:c8:e7:4e:2a:4a:
                    63:a4:23:e6:c8:54:bd:55:ae:1c:07:d3:6e:02:b1:
                    4c:c4:57:bd:a2:0f:06:d7:dd:33:e2:35:d8:e2:a5:
                    e5:57:4c:34:e3:bd:fe:ec:e3:0f:ad:d5:5f:00:df:
                    ed:e9:3a:0b:bf:c1:fb:d0:2e:84:1d:81:6f:d8:8f:
                    29:34:46:d9:a3:11:ca:62:55:79:c1:31:3a:f6:80:
                    81:de:28:1d:a2:4c:72:36:55:a1:1d:b7:27:04:8e:
                    e5:d6:07:32:9e:aa:b7:ee:cc:ad:d3:01:98:fe:bc:
                    58:d6:ae:18:d0:6c:c2:1e:7f:60:78:aa:ed:1d:16:
                    c7:c5:9f:15:6e:21:73:75:1d:cd:a1:f5:04:9f:6f:
                    c7:07:54:c6:b2:58:87:85:4a:b9:b4:03:a8:6d:c4:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:71:68:61:50:41:84:23:5D:A1:43:89:6C:C4:DA:71:D6:83:4D:98
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:d8:1e:29:55:3c:04:0c:25:69:6a:af:32:78:8f:14:90:
         1c:11:1f:fe:03:e0:98:6b:1a:ed:6d:29:67:04:5f:82:91:f1:
         1a:89:43:a7:20:29:01:57:0c:63:cd:93:5e:d4:d9:ec:f5:e6:
         63:ca:3d:8c:1a:c1:e5:bc:96:35:ae:64:9f:31:0f:c3:e1:e4:
         80:37:09:cf:9d:9a:9f:df:a3:be:90:67:44:f4:34:f8:17:19:
         a1:78:31:23:30:80:b7:53:fe:ba:c2:da:b2:8f:fa:b9:a5:13:
         49:fe:82:48:6a:7a:27:0a:00:e4:73:38:ee:08:4e:11:17:d1:
         a8:87:d0:6b:c4:51:3e:a9:d2:17:e6:ee:14:14:37:32:a2:a7:
         b5:11:f2:12:e6:c9:06:1f:d2:38:25:3b:8f:de:f6:8c:cd:be:
         fa:df:12:50:c4:1b:da:43:25:70:21:80:77:e8:ea:c6:11:be:
         1e:aa:31:c2:69:a9:32:e1:43:2c:47:e1:29:a1:c5:39:b2:13:
         b6:48:97:66:b8:a5:f5:bf:ae:5d:9d:c6:f9:65:4f:6c:9b:2f:
         db:97:6c:1e:b5:23:3d:33:22:5d:f4:f2:f2:d5:80:47:c4:b1:
         3d:9d:91:6f:ea:88:c1:a0:00:4c:c0:bc:98:a2:69:0e:3d:fe:
         dc:7d:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:19 2025 by rpki-client