Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
File:                     nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json)
Hash identifier:          G+3te36ggEFs5COY4yJbPI/nkvr4r/wWY0SdT+gjMXA=
Subject key identifier:   75:C0:B6:AE:13:8B:D5:59:F0:B1:1D:5B:CE:C2:A4:C6:C0:B6:23:86
Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
Certificate issuer:       /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
Manifest number:          73
Signing time:             Fri 31 Jan 2025 05:50:03 +0000
Manifest this update:     Fri 31 Jan 2025 05:50:03 +0000
Manifest next update:     Fri 07 Feb 2025 05:50:03 +0000
Files and hashes:         1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: 8c9ym+w0AoEDafm/pK2XUSxPprH8rdAuc98tOe1m4Ko=)
                          2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: qL2lFwzQsNJvHM1X7F1IcBH5Nn+NnL8ACspFUTuHDlA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
        Validity
            Not Before: Jan 31 05:50:03 2025 GMT
            Not After : Feb  7 05:50:03 2025 GMT
        Subject: CN=679c648b-ca82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:3c:3f:b6:d7:31:d6:fb:48:cb:04:ce:f9:
                    7a:e2:62:c3:b1:3d:b6:49:07:f3:29:21:d9:7f:f9:
                    0b:11:93:dd:88:48:ed:ce:8f:58:38:2d:3a:93:b2:
                    79:1f:53:1c:55:b3:11:86:f6:91:fb:06:17:1c:ea:
                    69:f2:e5:92:66:c3:e2:9d:22:54:ad:a3:06:66:01:
                    d6:7e:ef:7a:e8:de:62:1f:2a:3b:f9:4c:fd:5e:31:
                    ff:3c:78:93:d9:7f:c8:a9:10:17:88:da:83:29:1e:
                    8c:c6:a3:4f:a9:e3:0c:bc:ad:4e:5e:2e:e9:bc:58:
                    ac:04:a5:9f:82:97:1b:bd:07:00:a4:f2:fd:53:e8:
                    d5:3f:9a:7c:e9:75:19:8f:bb:90:9d:13:2b:dc:07:
                    f1:d2:38:99:85:43:b7:15:23:2b:81:4b:a4:9c:38:
                    4f:5d:37:da:8e:35:56:0b:a2:7c:12:1e:e7:56:63:
                    e0:93:62:2c:b1:72:c1:b8:6b:75:30:c7:fd:97:b2:
                    16:a5:c9:31:33:20:4d:a8:28:cf:ea:d1:6c:30:b4:
                    87:d3:3b:f9:86:c0:86:3a:13:b7:a8:98:a8:08:39:
                    dd:aa:e2:e2:04:d0:57:4b:75:2c:e7:28:57:af:5c:
                    5d:75:e8:f4:c3:2e:a0:ca:d3:03:b6:90:e6:8b:82:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:B6:AE:13:8B:D5:59:F0:B1:1D:5B:CE:C2:A4:C6:C0:B6:23:86
            X509v3 Authority Key Identifier:
                keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:82:bc:81:61:c4:81:a8:9f:35:2f:88:f6:9b:ef:00:1d:1a:
         f1:16:6c:fc:fe:7d:e5:f6:f9:ed:e7:7b:94:0c:bd:22:b9:15:
         e0:75:06:52:70:04:2f:13:c5:18:b9:fe:ea:80:1c:47:ac:2f:
         1b:a1:11:52:c4:d2:5c:a6:eb:de:1d:f6:65:79:af:c0:9b:0d:
         c1:e6:a7:c2:ed:9d:95:a4:49:84:b3:5d:13:40:3e:bc:c8:a3:
         d8:c7:de:4e:7f:8a:0c:c8:87:a0:a3:52:fd:0f:57:2c:d7:a7:
         99:34:12:5b:ef:7f:53:e4:f1:65:51:aa:26:ef:d1:f7:e9:21:
         6c:c2:00:c9:57:16:68:11:8a:d4:66:12:d0:f9:4c:99:52:87:
         ec:f1:5c:82:6e:10:53:a3:2d:22:5a:94:35:ea:f2:72:41:95:
         fe:c4:04:01:dc:6b:62:f2:db:f4:34:93:dd:ab:2c:7f:c6:58:
         0c:59:e6:79:5b:2d:41:33:73:c8:d4:8b:2a:99:15:68:c8:32:
         fb:bb:64:be:78:55:93:a5:63:1b:ce:f5:65:7c:50:f0:5d:35:
         1a:a4:b6:cb:0c:9b:4c:b8:c9:2f:e4:4b:aa:58:e2:01:c0:54:
         9e:09:96:d7:6f:2a:03:a3:65:0a:b3:1d:61:01:1c:eb:ad:0d:
         35:3e:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:49 2025 by rpki-client