Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
File:                     phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json)
Hash identifier:          m+py78CbOcJc4ftpHSdU4EBZuw2kqROzJBzw0i7am9o=
Subject key identifier:   4C:07:23:8A:2B:B4:1F:09:17:21:69:74:5A:39:D5:DF:19:9E:65:C6
Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
Certificate issuer:       /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
Manifest number:          79
Signing time:             Fri 31 Jan 2025 05:48:36 +0000
Manifest this update:     Fri 31 Jan 2025 05:48:36 +0000
Manifest next update:     Fri 07 Feb 2025 05:48:36 +0000
Files and hashes:         1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: I1Kn/xs3SK4ObUQgloC2vTBSJgsTIuf3Oj+y0n5wnts=)
                          2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: fEV4Nv9YEsz1gwlF4scqWCuSbskSixTpqMCtGjgZ1FA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
        Validity
            Not Before: Jan 31 05:48:36 2025 GMT
            Not After : Feb  7 05:48:36 2025 GMT
        Subject: CN=679c6434-4fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ac:59:de:48:9b:6a:ab:d5:9a:c7:1f:51:20:
                    75:8b:a6:4a:5c:ac:09:ab:89:61:d3:02:85:eb:6f:
                    54:a4:0c:bb:2a:5d:ed:8f:40:73:a7:5f:ab:d1:7f:
                    8c:98:3a:3f:ef:d0:b4:98:f2:08:dd:d7:8a:04:70:
                    85:5c:71:b9:e4:66:0f:95:92:bd:ec:55:1d:19:3c:
                    72:cb:61:c2:4f:ce:61:3c:ba:62:61:f3:0c:1d:13:
                    3f:b3:cd:06:b2:28:85:9b:4a:03:78:b2:6d:07:69:
                    03:9e:e8:90:88:6f:37:a1:b5:42:a8:fa:8e:ac:10:
                    f8:2c:53:8a:78:dd:f6:4c:49:3f:d6:ad:ab:5d:79:
                    15:0c:12:02:06:66:98:2f:df:8e:53:16:e1:f5:30:
                    bc:29:51:4a:3e:26:4c:1a:ba:5f:f1:9f:a0:2c:e5:
                    97:97:84:7b:27:26:98:fe:04:0c:3a:a7:5f:45:5c:
                    1f:25:84:fe:6a:e5:0c:20:2f:ab:ef:57:f3:d5:d9:
                    f5:dc:8b:21:3f:de:ef:dc:fc:f5:90:ea:6f:46:76:
                    77:f1:49:4e:60:39:ef:5b:63:dd:ec:7c:9e:54:ce:
                    eb:1a:bd:43:af:76:92:b1:e9:17:1b:d9:65:1a:e5:
                    73:35:8e:8d:14:de:1e:6c:55:44:e6:d0:2d:0d:cd:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:07:23:8A:2B:B4:1F:09:17:21:69:74:5A:39:D5:DF:19:9E:65:C6
            X509v3 Authority Key Identifier:
                keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2a:f9:60:4a:da:4e:d1:04:4b:02:fc:24:17:50:02:78:3f:
         ca:28:a3:03:9d:5f:38:85:28:ef:34:21:14:bd:02:7b:be:17:
         27:9e:a6:d4:35:07:5d:7d:84:9b:68:3f:b1:3c:34:a5:7c:54:
         cf:82:8f:dc:5f:39:be:fc:30:07:64:13:32:ef:60:c8:c4:ea:
         aa:43:dd:95:64:aa:09:01:35:74:31:07:c4:75:ae:a5:19:b1:
         16:eb:d9:cf:31:06:34:1a:0b:9d:ac:fd:08:8c:85:65:f3:ab:
         13:36:9d:14:e4:c8:15:b0:4d:b8:74:5e:ca:da:3b:71:20:6a:
         1d:c1:25:ab:c0:73:d9:6b:ce:06:0b:b0:9a:e8:42:d7:22:a8:
         1e:6d:7c:51:97:1e:87:4a:09:0b:86:ae:9c:fa:87:59:b5:34:
         0f:df:bd:e2:d2:99:e1:32:c3:a4:46:d8:d9:dd:73:ab:7f:3d:
         49:14:48:d1:d5:e1:b0:35:5e:e2:48:a9:d7:5e:db:24:d0:31:
         76:29:8d:4a:39:ff:bf:6e:e9:f5:d2:4b:ce:4a:2d:23:c1:11:
         68:22:bd:92:f5:6b:6b:59:1a:a7:71:e3:af:21:b9:cd:9d:97:
         70:df:b4:b9:6d:b3:62:10:4a:71:d8:e8:75:fe:bb:23:05:04:
         2c:50:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:40:58 2025 by rpki-client