Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
File:                     yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json)
Hash identifier:          6DKJeo0IRQA9rQ87hhIh8/OF1HBxgi5OBZWmjctjfss=
Subject key identifier:   F1:36:B2:32:6A:99:92:9E:3B:24:D1:76:6F:79:85:11:39:71:6F:B5
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Certificate issuer:       /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial:       0E15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
Manifest number:          1F3D
Signing time:             Fri 28 Mar 2025 17:22:12 +0000
Manifest this update:     Fri 28 Mar 2025 17:22:11 +0000
Manifest next update:     Fri 04 Apr 2025 17:22:11 +0000
Files and hashes:         1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: WDJhIabnNSmvyS2w6u5w4aIjwPzH5t3885NT89y6E14=)
                          2: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: nAPMh/7iMp8qHi9OS6E5o7H7wB9OMq1g3EghUh99s44=)
                          3: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: fzOQaTP5H3VIkhoR/i/DSmr4ZxxwK1UkfdQUyTzkYN0=)
                          4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: QS2TrHl9taohr57yZSTKCTq9uLIbkOtoAL2fYPZKHWU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3605 (0xe15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C
        Validity
            Not Before: Mar 28 17:22:11 2025 GMT
            Not After : Apr  4 17:22:11 2025 GMT
        Subject: CN=67e6dac4-1b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:39:db:86:69:0f:83:ce:e2:d5:94:20:6d:
                    0c:6d:c0:23:7b:57:69:3b:e9:07:79:d7:06:25:2e:
                    97:03:8f:eb:a4:27:73:af:8b:f1:7b:e0:c1:34:13:
                    d5:ea:5f:35:5c:14:58:75:9d:b2:ac:95:6c:65:3c:
                    ee:bd:4d:36:c1:5e:19:c8:34:e7:12:92:b6:fe:13:
                    ef:78:81:1f:e8:ce:e5:08:c8:7f:b4:15:79:5a:cf:
                    b7:00:06:eb:f4:94:84:c9:f2:d9:71:c6:d8:42:05:
                    f0:1a:b5:54:b8:e4:be:70:09:d6:43:7c:70:36:50:
                    28:e1:86:4f:4c:c9:e2:3e:86:08:d2:d1:3f:bc:dc:
                    b4:d2:50:0a:14:65:05:f5:9a:4a:53:00:62:da:3b:
                    d2:d3:79:b5:9c:86:d2:fc:41:43:60:ec:bb:0c:8f:
                    68:6e:60:b5:f2:d5:92:35:13:f6:78:90:cf:cb:e1:
                    ec:ae:c4:34:01:45:08:45:6a:36:8f:eb:64:3c:de:
                    c2:f2:01:03:25:ce:7f:dc:b0:8f:bb:ef:9c:21:7d:
                    49:4a:ca:a9:be:ed:60:93:10:5c:83:13:84:0b:6c:
                    da:73:4e:fd:18:b1:7a:41:f6:99:b2:57:8b:56:57:
                    ce:a8:d3:21:ed:5a:f4:24:46:6c:4a:39:f6:fe:1a:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:36:B2:32:6A:99:92:9E:3B:24:D1:76:6F:79:85:11:39:71:6F:B5
            X509v3 Authority Key Identifier:
                keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:9a:64:13:9e:e6:f4:20:72:35:dd:ad:73:dd:73:fe:35:
         42:86:a9:4f:b3:17:97:d3:56:87:ac:e0:ab:69:ac:b5:57:4f:
         53:5b:34:3c:6c:8f:e3:fa:66:cf:b8:be:74:b3:21:67:7f:75:
         f1:73:08:82:5e:2a:17:cf:33:64:63:30:7c:4e:a6:1f:49:f1:
         4d:7f:b5:e7:7d:41:36:a7:69:9b:5f:bb:1f:61:bf:d3:85:77:
         cb:7c:e6:40:73:d4:68:39:01:06:f9:06:99:3a:d1:04:78:79:
         47:29:38:a8:9f:0f:70:39:b5:33:92:de:93:fb:82:1d:e6:64:
         db:6f:31:e0:1c:e7:64:56:08:59:66:42:a0:4c:af:60:87:61:
         d4:57:dc:2d:00:30:65:be:29:32:9e:72:94:79:f5:5c:6e:a7:
         32:f7:21:5f:98:74:12:2d:9c:e7:95:55:24:22:86:f7:3b:1b:
         88:e3:0e:d2:9d:46:c7:88:0f:91:c9:f0:98:6c:9d:e7:f2:02:
         27:9d:6c:6d:ff:02:e7:67:d4:81:37:58:a1:25:94:b9:17:69:
         ea:39:23:10:e5:ef:e2:f7:52:cc:2d:c8:85:e8:5b:bd:50:12:
         c9:9a:3a:1b:f1:50:5d:68:0c:56:a9:47:c0:98:4f:c0:40:f5:
         44:ac:f8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:55 2025 by rpki-client