Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
File:                     PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json)
Hash identifier:          C+xgVHw76suPqDbYM2Fw477X22rUNYtSl+L3OFhKTqY=
Subject key identifier:   93:E1:74:21:03:3C:DA:89:F3:E8:C4:AC:F4:06:54:76:02:B1:2B:3E
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Certificate issuer:       /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial:       0762
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
Manifest number:          075C
Signing time:             Thu 30 Jan 2025 21:27:36 +0000
Manifest this update:     Thu 30 Jan 2025 21:27:35 +0000
Manifest next update:     Thu 06 Feb 2025 21:27:35 +0000
Files and hashes:         1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: AKJYRadeZoKU89kFHPvEzaQsYBFH1SOvV5Z6DUuh9No=)
                          2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: J9GQPP4a7clIhGgoBAM9KLX43lz+eBaMPakWPFWVHmk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
        Validity
            Not Before: Jan 30 21:27:35 2025 GMT
            Not After : Feb  6 21:27:35 2025 GMT
        Subject: CN=679beec7-0195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:73:e9:92:33:87:c8:5b:4f:6f:22:01:b7:
                    7b:b6:4b:0d:35:77:18:b1:05:f9:b7:64:b8:4d:49:
                    17:67:70:70:3e:46:f5:86:f8:f7:cc:62:e9:aa:3a:
                    62:e2:28:84:00:54:77:4f:23:ea:02:9a:0e:48:26:
                    6a:75:ad:35:36:80:6b:0f:d5:34:a6:3a:e5:9b:7d:
                    d1:f7:6d:45:34:2e:c1:0f:bc:3e:1b:d1:e8:99:b9:
                    f8:c1:b2:9b:ca:53:e6:88:32:9e:e2:4f:dc:8c:bc:
                    d2:b1:b1:79:7f:3a:c2:0c:16:9c:a0:92:8c:5e:26:
                    05:ba:78:fe:5f:02:89:1b:06:a9:91:6b:aa:db:56:
                    02:67:15:a2:30:72:f2:4d:7e:c3:1d:94:f2:08:80:
                    95:a0:4a:cc:76:fe:99:21:a4:5d:fa:32:cc:6c:58:
                    d7:92:c3:7a:45:f8:de:1d:7a:f0:5d:54:81:56:e7:
                    22:e7:32:91:e2:c5:f5:e8:45:10:9e:61:bc:db:8a:
                    47:8e:8e:1e:2b:50:8d:3c:a9:c0:09:f4:a8:5a:9d:
                    5e:aa:6d:e6:bb:b0:fa:1f:cc:ac:d1:70:82:5a:c5:
                    11:8e:3f:1c:b2:54:8e:05:90:f9:57:a4:57:5f:a5:
                    0b:3e:98:ed:6c:47:61:51:32:b9:59:54:7e:bc:87:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E1:74:21:03:3C:DA:89:F3:E8:C4:AC:F4:06:54:76:02:B1:2B:3E
            X509v3 Authority Key Identifier:
                keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:c6:9e:c2:44:82:21:d3:f3:14:89:99:6f:8f:87:bb:79:
         ae:76:1c:e2:2f:bc:2f:b8:af:e6:54:9f:c6:62:24:64:58:bb:
         25:e7:5b:71:d7:39:ad:f1:74:9b:ac:f0:ff:aa:ab:d6:a3:b5:
         c1:66:12:7e:9b:64:45:94:7e:73:5e:f6:c2:eb:b9:fc:dc:15:
         52:ef:02:57:bf:94:19:84:13:38:c5:1f:7e:29:38:0e:fd:03:
         fa:68:90:8f:be:22:43:dd:35:14:db:5a:dc:74:65:dc:2f:2a:
         1e:bf:d9:c4:f4:c5:23:b6:18:dc:79:91:58:cf:ca:23:86:75:
         f7:74:a5:b6:27:e6:3e:89:fd:bc:95:22:3e:ff:8a:30:3f:ac:
         a7:b0:00:b3:ac:4b:b2:ef:25:c8:3c:b2:9c:91:0e:1f:1b:5d:
         a8:cf:32:38:94:85:9c:d7:24:26:e8:50:f2:50:6a:ab:a1:47:
         71:48:14:47:15:f5:98:06:8a:52:6f:f5:22:74:88:db:ab:f9:
         80:14:4c:b7:75:bb:1c:93:40:52:75:c8:48:ce:fc:d6:65:53:
         b0:9b:19:03:29:09:75:29:85:54:14:bb:ae:14:44:61:29:7d:
         0a:e7:c9:e4:6d:b7:f9:29:f4:f0:a5:cc:d8:3d:89:e6:15:3a:
         7a:2a:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:48 2025 by rpki-client