Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File:                     pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier:          IzOnqLMDNVWEgNK0MFpW4lunGx+MO4ITSrdH+wvCdPk=
Subject key identifier:   E5:A1:C2:3C:24:DE:5B:9A:86:F9:09:42:E0:06:07:1E:6F:B0:BF:82
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number:          AF
Signing time:             Fri 31 Jan 2025 05:12:34 +0000
Manifest this update:     Fri 31 Jan 2025 05:12:33 +0000
Manifest next update:     Fri 07 Feb 2025 05:12:33 +0000
Files and hashes:         1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: nzrLB3iYmJBgCrOSsgEzvwCpLstKBvGHie0w55KpJ34=)
                          2: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=)
                          3: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
        Validity
            Not Before: Jan 31 05:12:33 2025 GMT
            Not After : Feb  7 05:12:33 2025 GMT
        Subject: CN=679c5bc2-500f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:2d:12:55:c7:58:7a:7c:d5:a2:02:cc:46:
                    bc:9c:54:89:70:17:11:bf:41:be:7d:bf:08:9d:16:
                    fe:f6:5e:73:86:fd:64:9a:21:8e:73:a4:8f:b6:78:
                    9c:9e:47:3d:ad:fb:0b:ea:c4:bc:44:df:a6:f3:c5:
                    a8:0b:ef:5f:73:8c:44:09:8f:d7:f2:14:86:ca:90:
                    b0:6d:db:07:60:95:3c:53:fb:d1:52:41:58:53:b7:
                    b5:cc:f0:e9:f2:0d:2b:b0:6e:b4:82:3b:0e:a9:5d:
                    fd:c4:72:51:a5:6e:39:2f:b8:f0:74:c0:67:45:fc:
                    e2:2c:f6:3a:3f:51:56:3f:fc:49:3f:f3:0f:fa:76:
                    67:f1:58:ee:ae:41:22:6c:39:97:0a:12:fc:47:92:
                    cc:4f:f1:7c:10:c7:e1:10:8e:2c:b9:ae:1f:f4:e0:
                    b3:1b:17:8a:20:a0:66:dc:41:fc:d6:4b:a1:27:bb:
                    1c:c4:5c:6b:f9:6a:86:7a:71:99:fd:c4:df:8c:be:
                    24:fa:04:a3:3b:e8:75:fc:8c:45:46:d5:10:02:45:
                    e4:4f:c4:2e:0f:f3:e9:3f:2b:2d:45:49:b7:37:f6:
                    53:54:e1:dd:8a:90:cd:f9:08:58:c2:e9:80:0e:01:
                    77:d6:63:7a:28:1b:b5:ee:29:7e:d6:87:63:5f:a8:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A1:C2:3C:24:DE:5B:9A:86:F9:09:42:E0:06:07:1E:6F:B0:BF:82
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3d:61:30:45:4c:19:e7:62:a0:dd:77:cc:19:0a:96:f7:3b:
         1d:63:a1:9e:86:c5:9c:c5:bd:e3:eb:b3:ea:79:15:25:49:7c:
         e1:67:d5:45:eb:20:50:84:e7:03:27:cb:5f:47:bd:54:7e:ef:
         06:ed:32:02:8e:16:b9:43:42:77:ac:5d:ef:fb:a2:5c:52:54:
         4e:76:5a:3f:3e:3b:3d:4f:34:77:22:73:21:0c:61:31:6f:d9:
         45:1b:29:c6:37:1e:e4:98:d3:32:bc:b3:d7:33:5c:dc:18:5d:
         18:61:b2:38:7f:9a:72:07:32:58:ab:75:d4:06:bb:53:eb:66:
         4f:52:93:1e:7e:55:b8:72:92:82:1a:6c:bf:47:51:c2:68:89:
         54:05:ee:74:c9:98:a5:ec:02:db:3d:f7:be:42:a9:ca:fd:54:
         3f:f1:ca:29:39:c6:31:0b:9b:d0:cb:c0:d4:25:8f:45:3f:3d:
         a9:26:9b:6f:b9:fb:f7:18:ac:02:d3:25:84:4c:01:04:8f:64:
         53:bf:6f:52:4a:87:4e:c0:15:ef:7a:1f:da:39:fc:e3:58:42:
         22:78:1a:a4:7a:6d:37:9d:d4:f6:51:e7:b3:65:bf:bd:9f:0a:
         df:f6:93:90:d0:3e:d0:63:2b:b1:ff:99:3e:9d:bf:8b:4d:43:
         8c:97:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:09 2025 by rpki-client