Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
File:                     w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json)
Hash identifier:          egXMBPt6EI1f9qocQYIBR+yZd7P1UVqPIgvUoKgfZJo=
Subject key identifier:   E7:CB:E3:58:CF:7E:0A:8A:27:D9:00:BA:E2:90:49:EE:69:DB:59:C1
Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A
Certificate issuer:       /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
Manifest number:          CC
Signing time:             Fri 31 Jan 2025 04:54:49 +0000
Manifest this update:     Fri 31 Jan 2025 04:54:49 +0000
Manifest next update:     Fri 07 Feb 2025 04:54:49 +0000
Files and hashes:         1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: 3WzsJyt4TNaQivpGINNw5kX/E+SdEmy+V7wW0eeCxjA=)
                          2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
        Validity
            Not Before: Jan 31 04:54:49 2025 GMT
            Not After : Feb  7 04:54:49 2025 GMT
        Subject: CN=679c5799-15a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:83:36:1b:c0:da:14:a0:db:7a:71:ec:3d:
                    cf:4b:ff:56:23:10:0b:1e:30:28:19:79:7e:59:03:
                    c4:a2:5e:6f:42:f2:49:34:6a:d5:e8:85:df:ce:3d:
                    98:b3:18:c0:80:df:b0:c4:90:96:6d:c1:4d:29:dc:
                    30:42:6e:1c:5b:35:01:d5:da:41:f3:9f:8c:49:c0:
                    30:82:f0:52:de:96:d7:10:c3:5b:de:c1:0f:fe:8e:
                    ee:a4:ca:ff:40:43:fe:cf:19:b3:da:ba:a7:e4:53:
                    3b:10:cd:32:5a:e3:ff:d4:79:2d:50:39:65:57:92:
                    1d:d5:8a:7c:20:f7:c8:cb:23:73:d0:05:b8:17:2c:
                    56:ca:b7:89:04:5e:42:52:cc:24:0f:20:56:cb:c1:
                    94:56:aa:4d:c2:94:e4:09:83:12:99:da:96:b9:c1:
                    8a:65:72:0f:55:d8:32:2f:51:5e:ed:f2:0d:76:aa:
                    87:d9:bb:33:ff:94:4e:d0:e1:84:b7:d7:30:de:60:
                    d0:b6:c0:16:2a:7b:f9:e2:22:da:05:6e:48:1b:ef:
                    06:19:c7:49:2b:af:da:68:06:a3:92:17:09:b0:9e:
                    2a:2b:25:9d:6b:0c:97:c4:06:b2:c8:97:58:b4:a1:
                    39:58:d5:4f:ac:5e:93:b6:2d:1a:01:aa:bf:9a:91:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CB:E3:58:CF:7E:0A:8A:27:D9:00:BA:E2:90:49:EE:69:DB:59:C1
            X509v3 Authority Key Identifier:
                keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:89:7c:1d:c8:22:1f:a8:1a:5b:e8:23:50:04:fb:12:4e:56:
         54:ba:b9:e7:f4:be:dc:33:db:09:13:10:b6:5c:13:11:6c:35:
         1d:2e:f7:ad:58:56:1c:2c:e6:08:0f:32:be:14:29:df:b4:68:
         23:2f:f3:31:99:0e:86:d2:ce:20:6d:2d:63:5c:cd:5b:eb:65:
         bf:66:ac:25:a7:42:a7:58:58:25:e7:77:fe:80:45:63:90:52:
         60:35:6e:86:bc:c8:6f:7d:b5:f1:10:00:d3:96:ae:3f:cf:29:
         41:e1:3b:9f:bf:a3:5c:89:7f:e6:e0:ab:9a:68:f4:08:89:35:
         cf:25:f6:11:5a:6b:73:e8:83:94:e3:e5:57:53:54:76:9a:66:
         d0:d7:a2:c0:5a:df:65:bc:46:34:3b:fc:64:08:07:45:36:bd:
         84:d9:e3:25:72:76:9a:9f:20:1d:2d:c8:09:e2:76:1b:b0:cf:
         da:a6:01:d1:11:7c:df:01:32:2f:9d:80:e4:bf:e1:a1:66:93:
         c8:73:85:c6:26:1c:b0:30:c3:cc:cc:ce:5a:0c:53:ad:7d:07:
         af:a4:bb:93:34:32:e0:da:59:7d:30:06:8c:6a:e5:dc:1e:99:
         d9:c1:a6:3d:71:4b:c5:e8:e8:2d:64:b1:07:17:ae:5e:d4:a0:
         5a:df:11:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:27 2025 by rpki-client