Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File:                     PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier:          FzXbLugqe+lrmAAHRp19Sh9qEngUmcBwsX1/XZbjq0I=
Subject key identifier:   CA:2D:F3:84:E0:A0:BA:5D:65:4F:CA:83:78:53:BD:CC:E5:74:E7:3B
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer:       /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number:          0176
Signing time:             Fri 31 Jan 2025 03:10:15 +0000
Manifest this update:     Fri 31 Jan 2025 03:10:14 +0000
Manifest next update:     Fri 07 Feb 2025 03:10:14 +0000
Files and hashes:         1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: l2Sd9df/jSu/Qyg7MqtK0PC0gcjnH0vjg2gtUkDDICM=)
                          2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: c1Daig7TyrV0vZ0j79IrCiKW1T1CwI19KHOBVkJ0bXg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
        Validity
            Not Before: Jan 31 03:10:14 2025 GMT
            Not After : Feb  7 03:10:14 2025 GMT
        Subject: CN=679c3f16-f074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:85:ad:cd:f4:58:65:13:64:8d:7f:a8:67:
                    99:d7:8b:8d:77:f8:c8:1b:87:ff:12:52:a1:db:90:
                    49:ca:e2:ac:26:8a:d4:03:18:20:ca:23:40:b5:c0:
                    35:c2:b9:f6:90:02:ea:d0:6f:51:7c:8c:bd:45:e5:
                    83:4f:ec:67:8c:df:a3:f3:fb:7a:32:ec:7f:43:01:
                    cb:11:27:94:0b:97:4e:49:ad:87:35:9b:79:74:10:
                    5c:0a:05:13:30:9d:f4:16:bd:83:87:3c:d1:2b:7c:
                    a1:35:61:67:b2:ca:65:a3:bb:96:9a:da:e2:7f:3a:
                    36:fb:02:6b:69:42:45:54:3f:51:64:dd:4b:bb:c7:
                    ff:81:fd:eb:e3:1a:0e:5a:6e:9d:fd:78:70:81:31:
                    c8:85:53:40:4d:26:7e:fc:4a:79:80:43:68:6d:ac:
                    13:c0:3c:18:87:bc:c6:1b:be:77:30:bc:6f:da:8d:
                    a4:71:02:5b:db:9b:2b:10:ec:c8:f5:d4:ae:cb:b5:
                    22:fe:fd:c5:d3:68:e2:29:ac:7f:6b:49:85:9c:ef:
                    c3:d4:d0:03:68:cd:d0:30:24:17:a7:ba:39:43:a6:
                    46:ec:29:21:2c:87:16:81:af:d4:ab:3c:32:2a:2e:
                    2a:38:86:8e:de:7b:75:fa:d7:27:0f:56:b0:64:f5:
                    ad:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2D:F3:84:E0:A0:BA:5D:65:4F:CA:83:78:53:BD:CC:E5:74:E7:3B
            X509v3 Authority Key Identifier:
                keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:60:0c:e7:14:10:c2:a3:00:76:bf:75:f6:41:b6:f5:a8:60:
         dd:41:51:ac:2d:c3:04:d4:f6:27:b2:b2:35:87:f6:3b:26:98:
         bb:04:60:89:ae:9b:fa:4e:71:32:74:4e:38:47:69:24:62:f4:
         a8:e5:17:8b:42:ed:54:69:38:5e:80:e1:33:a9:e7:5f:40:22:
         49:d3:ed:22:9f:24:b4:5b:89:1c:9c:4c:56:50:e4:34:2a:eb:
         16:73:b6:a3:8b:59:e6:89:bb:64:d6:46:a5:fa:ba:1a:1e:67:
         b5:20:b1:5d:43:fa:20:2a:86:cf:2a:92:78:c7:85:1f:43:87:
         70:90:4c:dc:4a:7d:3f:a3:01:95:76:8a:5e:27:dd:31:05:03:
         78:fd:9d:5b:f9:c0:cb:ef:8d:81:3e:a5:9f:c5:6f:d5:25:02:
         26:9f:5b:97:08:5b:0a:4b:80:21:e1:9a:dd:34:b3:fe:f2:69:
         33:16:db:b0:af:71:f0:95:cc:a7:16:4d:92:26:75:b3:03:ce:
         18:4c:61:d7:b6:b6:74:9e:a1:90:4b:0b:3e:96:46:3f:a3:0c:
         d8:41:0c:42:15:82:10:db:12:c2:8c:0c:80:74:ef:61:e4:1a:
         9c:3c:8b:1b:71:7e:b5:e0:b7:81:ae:dc:d3:c7:1b:d9:c3:6a:
         31:b5:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:59:30 2025 by rpki-client