Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
File:                     l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json)
Hash identifier:          /W28jFZ5ELhGJua7VYb7w0kiX4EJyoOpqzSWMSx13IU=
Subject key identifier:   BC:88:77:11:C3:0F:12:CA:BF:16:A1:9C:4C:FD:75:E8:13:3D:9A:DF
Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Certificate issuer:       /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Certificate serial:       09CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
Manifest number:          09C9
Signing time:             Thu 30 Jan 2025 20:03:21 +0000
Manifest this update:     Thu 30 Jan 2025 20:03:21 +0000
Manifest next update:     Thu 06 Feb 2025 20:03:21 +0000
Files and hashes:         1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: QL9tp2C4DfgeBjU0oH1suPQUIcQHOcjl4VVm9Ekymrg=)
                          2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: JqF51wPgFYJ7/1JQa4bjka146YP84yRB+gx/lfzcoqw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511 (0x9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
        Validity
            Not Before: Jan 30 20:03:21 2025 GMT
            Not After : Feb  6 20:03:21 2025 GMT
        Subject: CN=679bdb09-1ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:03:43:a4:94:08:9c:60:ad:d0:49:e8:8f:
                    65:9c:2e:7a:75:0c:7d:a0:76:b4:e5:9e:1f:13:1c:
                    69:bd:ec:1f:85:63:14:8b:ff:1e:cc:c6:78:8d:9e:
                    df:54:ad:88:45:bb:72:57:00:f1:b4:5d:df:45:d1:
                    98:c6:f4:4c:2b:92:98:6d:94:b3:fb:7b:01:16:c7:
                    45:c9:2c:f9:a9:a0:25:60:4d:4a:81:b4:33:92:95:
                    ae:fe:b9:9d:4a:11:49:3c:60:b3:33:9d:85:9b:5e:
                    d5:18:9b:77:4b:97:fd:69:31:23:4c:46:c8:5d:b1:
                    cc:44:ca:17:81:59:f5:44:46:1b:64:65:0b:ea:a4:
                    9f:8b:d4:22:d4:e2:30:b5:07:1b:2b:79:51:06:68:
                    03:4a:09:fa:9e:8d:a4:2b:f7:0f:40:79:66:00:54:
                    08:9a:75:bb:36:2f:5f:ab:26:b8:ce:45:11:ac:18:
                    aa:84:0d:e3:6e:48:ef:c4:c4:c7:60:6b:f3:17:c4:
                    3d:c0:e4:ea:ea:ea:11:d8:b4:6d:3f:ac:32:04:2d:
                    c6:16:2e:21:48:f3:bc:df:62:66:b2:97:40:77:6b:
                    30:39:71:7f:33:c0:6f:24:05:9e:6a:09:f0:d2:c4:
                    6f:92:5e:7c:88:f8:a8:b0:44:6b:37:c9:ec:90:a2:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:77:11:C3:0F:12:CA:BF:16:A1:9C:4C:FD:75:E8:13:3D:9A:DF
            X509v3 Authority Key Identifier:
                keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:89:75:73:e6:14:c9:37:5f:f6:74:03:12:65:4d:8e:f9:35:
         b4:7b:c3:a2:de:c0:ea:e4:19:df:15:a6:83:ed:f2:a8:c3:ba:
         4f:c1:b3:d9:78:e1:60:9f:22:ab:75:cc:31:56:cd:55:a4:3f:
         b3:6a:46:a7:5e:c4:e5:87:6a:39:e2:16:c0:e6:2a:da:1a:ed:
         ff:10:8c:36:d1:c1:f5:f9:13:64:b1:da:2b:cf:1f:6c:86:c7:
         8d:29:db:17:f2:2e:92:bb:d5:85:b6:bb:24:a6:7c:25:ca:ff:
         25:c1:fe:56:53:69:8f:97:3d:0b:71:de:31:d7:5f:91:6c:47:
         61:04:9c:8f:c8:84:7c:af:46:5d:b6:fc:b0:aa:5b:b7:22:02:
         94:4f:ec:82:76:9e:4c:34:30:23:e8:4d:6d:87:cd:7e:61:03:
         19:bd:c5:14:fd:a4:cd:bf:47:08:4a:71:ee:15:57:90:1d:97:
         ae:e6:40:72:d9:2c:ad:d3:23:b1:77:38:fc:4a:da:ae:92:f8:
         b1:ce:63:33:5c:24:16:d9:b8:ea:24:95:12:de:cc:24:27:2f:
         6a:40:46:75:1a:06:fc:ba:7a:d2:c1:3f:34:83:ae:a3:6b:f8:
         84:b9:93:9d:15:c2:e1:e0:b2:7b:4b:98:d9:2e:9f:a8:6b:da:
         a5:53:a6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:20 2025 by rpki-client