Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
File:                     1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft (raw, json)
Hash identifier:          fJOkYsdY8FKday3k2fcPQbzFSRWe66B1AgwoTNYLXgA=
Subject key identifier:   E3:93:03:BE:E4:5A:4F:39:CF:4A:8C:1C:10:F4:5C:A7:B9:C6:52:A2
Authority key identifier: 1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
Certificate issuer:       /CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
Certificate serial:       4748564D915C4FDBE8D428B67BD2698F0CFB0CC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
Manifest number:          12
Signing time:             Sat 24 Jun 2023 09:30:25 +0000
Manifest this update:     Sat 24 Jun 2023 09:25:25 +0000
Manifest next update:     Sun 25 Jun 2023 12:42:25 +0000
Files and hashes:         1: 323430313a343630303a3a2f33322d3332203d3e203634343936.roa (hash: YA7OveE0RNikCGfwOZej1VNBrlBWWxGG35Qh7W6ZLgw=)
                          2: 1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl (hash: O483KhLFB07Q8gCpRAe61YAtBMfxj9mb8QBLsX7EMCg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:48:56:4d:91:5c:4f:db:e8:d4:28:b6:7b:d2:69:8f:0c:fb:0c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870000, serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
        Validity
            Not Before: Jun 24 09:25:25 2023 GMT
            Not After : Jun 25 12:42:25 2023 GMT
        Subject: CN=E39303BEE45A4F39CF4A8C1C10F45CA7B9C652A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:6d:8b:48:48:54:ed:e1:14:5f:bb:d3:4f:
                    66:56:2c:d5:9b:82:d4:34:09:2a:70:8c:02:bd:1a:
                    ce:b0:41:cb:bd:ec:7d:3a:f3:ad:80:67:91:1f:3a:
                    6b:b8:88:ce:2f:75:86:85:ea:24:51:c1:47:25:8c:
                    cf:d0:9a:58:af:68:1c:38:33:72:41:f8:a7:58:1f:
                    ac:61:b9:70:0d:86:d4:03:97:08:7b:72:70:12:37:
                    aa:35:f6:c9:75:49:34:16:85:25:d7:ce:46:e5:16:
                    2f:27:ed:e0:8c:f8:a7:12:5f:ce:ff:44:00:c5:d4:
                    43:f4:0a:19:a3:41:6b:c6:5a:40:cc:09:96:32:22:
                    86:aa:3a:93:e5:37:9f:df:95:bc:8b:40:a5:2f:b9:
                    86:0c:0d:29:81:23:64:27:9a:10:e0:83:76:f8:a1:
                    1a:f6:76:30:e8:e3:69:f8:cb:41:2a:2a:28:90:b0:
                    a6:44:eb:36:d8:d4:60:10:7d:18:43:8d:62:2d:6e:
                    c7:04:4b:86:0f:a1:c6:f4:5a:c3:ba:ba:e1:e9:82:
                    32:5f:86:68:72:04:49:05:01:81:49:c5:f6:e3:a2:
                    30:95:9e:5e:e9:4c:6c:35:35:32:6a:cc:53:c2:4a:
                    3f:cf:1e:7c:13:d4:54:a3:e1:7e:db:36:9d:42:b9:
                    b7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:93:03:BE:E4:5A:4F:39:CF:4A:8C:1C:10:F4:5C:A7:B9:C6:52:A2
            X509v3 Authority Key Identifier:
                keyid:1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:a1:24:24:71:62:0d:a8:0a:6b:06:e4:25:fc:ae:e3:39:ae:
         b5:3f:bf:99:1d:c3:f1:0c:b5:05:1f:3e:6e:18:33:9c:d3:e1:
         78:4f:b3:33:32:10:13:e3:9c:bb:81:ff:31:60:f2:71:c2:8a:
         fa:f5:55:0d:7c:5e:a5:90:56:70:89:02:23:d5:24:bf:d9:53:
         22:b5:cc:d8:03:6a:c9:12:38:3e:5f:84:17:b8:8b:36:ce:4e:
         9b:64:5f:f3:61:47:f3:87:f4:ed:df:41:6d:03:f6:84:4a:c6:
         e7:de:c4:55:3e:99:d8:1b:47:e3:36:1e:60:fd:dc:61:96:f9:
         f0:bd:d8:4f:11:80:90:82:f9:31:2d:a7:9f:d2:8e:9f:be:16:
         bc:f8:34:e4:6d:97:8a:c6:2c:d0:5c:5c:e5:77:1c:4d:46:ae:
         43:a0:80:4b:f7:d6:48:dc:5f:06:f4:c1:ed:10:7f:6c:e0:13:
         77:92:bc:63:43:27:5d:52:8b:d8:39:eb:ae:5b:86:05:3c:3e:
         de:02:ef:75:9c:d3:93:d8:6f:c6:2a:a4:29:db:f4:e5:d9:75:
         53:d1:29:cf:1d:7c:59:da:d0:66:42:bf:be:d3:02:7a:04:aa:
         51:9e:a0:e9:73:97:f1:59:99:b3:8d:35:d8:a2:2b:56:35:59:
         98:1d:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:29:10 2025 by rpki-client