Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File:                     C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier:          /DPBzGY4dPXE5wmS1WmpVkhgqrMZwUDlDHsFQX9IOuw=
Subject key identifier:   3E:83:B0:A1:A7:E2:42:FB:F8:40:F2:EA:B8:A6:FB:3A:69:7A:CB:CB
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer:       /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial:       11AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number:          1197
Signing time:             Fri 28 Mar 2025 17:19:50 +0000
Manifest this update:     Fri 28 Mar 2025 17:19:49 +0000
Manifest next update:     Fri 04 Apr 2025 17:19:49 +0000
Files and hashes:         1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: OGlzOSOHOo68r3VM0UqfkN68FR7/rQ13qZ0Ko1wBzkk=)
                          2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: sBWfqMdrbgHXkc/ZfAmcs+ee3JGLkHqnwdG8y4HuuaQ=)
                          3: DA0E6EFEE86411ECA54EC03BC4F9AE02.roa (hash: H4DVjhrQX80NkE2QeTyaoNeUxrpJLEpfDpSQExmSZjk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4522 (0x11aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F646
        Validity
            Not Before: Mar 28 17:19:49 2025 GMT
            Not After : Apr  4 17:19:49 2025 GMT
        Subject: CN=67e6da36-d4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:5a:c3:ac:d2:cf:6d:80:2c:44:c6:bd:54:
                    e3:33:af:ac:4c:cb:67:c7:55:c9:2f:64:56:50:05:
                    b8:b7:9e:33:8a:cc:0d:b8:f4:1a:4e:27:78:fe:f9:
                    e6:bc:2b:b0:a0:0f:f1:81:db:69:e3:45:f4:03:da:
                    1b:1d:36:b5:12:0a:00:9e:32:3e:1d:6f:40:13:2d:
                    ac:60:13:1a:d5:be:bc:2f:41:de:fa:c9:e7:a6:cb:
                    9e:a1:37:62:85:db:48:57:88:0d:6f:a7:f1:a8:bd:
                    64:81:3e:77:de:62:5b:5e:1c:e8:98:9e:fe:1b:a7:
                    44:89:b6:c5:9f:ae:13:46:4b:9d:0f:1c:c2:3d:c2:
                    09:89:a4:c6:b6:a1:dd:3d:81:47:70:4f:61:d6:54:
                    d9:50:50:71:35:1c:31:9d:ec:17:f9:c6:25:05:0d:
                    e8:5f:09:aa:3e:86:cf:13:0a:04:ef:08:9f:74:59:
                    ed:89:18:00:78:8c:47:3a:2e:73:c4:c0:6e:b3:ce:
                    56:5c:d0:e0:94:d1:df:75:c3:9c:e6:0d:58:cc:19:
                    ca:49:b8:bc:e4:5d:eb:e1:a4:31:d0:af:5e:2f:6c:
                    b0:cb:84:15:12:df:f1:60:80:0a:2b:b8:ea:5c:60:
                    24:39:0a:43:84:fa:e5:e8:ba:5d:3a:71:2c:6a:f5:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:83:B0:A1:A7:E2:42:FB:F8:40:F2:EA:B8:A6:FB:3A:69:7A:CB:CB
            X509v3 Authority Key Identifier:
                keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:57:24:ff:cc:8b:fb:fa:4f:42:17:7f:c3:cd:68:ad:1b:ec:
         64:18:06:ae:0f:9e:97:70:0b:02:5f:17:86:39:50:8c:ca:c4:
         27:67:e5:38:d9:11:b8:d2:82:77:84:14:d5:41:c9:4f:28:d3:
         61:ce:a7:77:e0:e8:a3:9d:7a:1a:70:95:4f:e7:75:28:7c:10:
         46:8c:20:ec:86:bf:0c:8f:c3:47:58:0c:ec:81:d8:b4:5b:82:
         ab:8d:50:c1:05:38:2e:0d:44:1c:c9:d9:46:af:b8:86:19:5f:
         87:60:56:45:6f:cc:36:ac:fc:1c:fe:a6:c7:5f:9e:30:db:d2:
         4c:a7:c3:e6:30:a7:ef:36:86:2c:b5:88:e2:4e:9c:a5:01:e1:
         3a:4b:da:4a:9b:1c:de:ce:d8:a1:05:0c:9d:91:34:5f:b2:8c:
         7f:da:de:e2:43:dd:0c:c5:d0:c4:2b:db:c3:e2:ad:40:04:af:
         f8:6d:b2:d3:d1:68:70:5d:56:6f:d2:63:0d:61:5c:ee:ae:b1:
         2a:8f:8b:83:f4:ed:55:d3:01:eb:84:49:21:c1:e4:33:f6:a7:
         d2:33:a5:3c:88:36:32:59:32:6a:9e:ef:a9:80:91:14:fc:31:
         20:af:5d:fe:d7:ca:f9:b3:54:19:d6:86:41:ec:bd:f6:84:df:
         83:c9:88:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:48 2025 by rpki-client