Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
File:                     PkPgI8CFNZTq13soKJo_HxDDCR0.mft (raw, json)
Hash identifier:          ju2LUrT/i3aOM6OKI4LvoXrQ6zmUcW30nnRsBWBQBjA=
Subject key identifier:   A3:70:09:07:31:45:CB:0F:F1:C7:E9:AD:41:78:25:58:0C:BE:AD:04
Authority key identifier: 3E:43:E0:23:C0:85:35:94:EA:D7:7B:28:28:9A:3F:1F:10:C3:09:1D
Certificate issuer:       /CN=A9150B47/serialNumber=3E43E023C0853594EAD77B28289A3F1F10C3091D
Certificate serial:       3445
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
Manifest number:          3442
Signing time:             Fri 31 Jan 2025 15:12:08 +0000
Manifest this update:     Fri 31 Jan 2025 15:12:07 +0000
Manifest next update:     Fri 07 Feb 2025 15:12:07 +0000
Files and hashes:         1: PkPgI8CFNZTq13soKJo_HxDDCR0.crl (hash: OYsswa5se5K8MkBM5DSEtQmMR2M5bCSorqMj7SLLgWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13381 (0x3445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B47/serialNumber=3E43E023C0853594EAD77B28289A3F1F10C3091D
        Validity
            Not Before: Jan 31 15:12:07 2025 GMT
            Not After : Feb  7 15:12:07 2025 GMT
        Subject: CN=679ce848-1fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:c3:54:92:4f:b4:4e:74:9d:d1:29:9b:2b:
                    24:da:79:15:93:7b:75:af:a2:ab:f2:d9:27:f4:09:
                    4e:54:69:4f:35:3b:f5:a6:56:05:9b:9e:20:ff:f4:
                    10:c0:a0:0a:64:4e:52:05:33:e4:01:fb:0b:b5:d9:
                    36:9f:f2:43:1c:2d:b2:0b:1b:b6:fb:44:91:24:cb:
                    81:4e:82:7b:bf:31:74:cd:3d:90:1c:fe:84:31:61:
                    d6:03:75:eb:9b:94:77:3a:85:d2:1e:e9:a0:ee:06:
                    05:65:c4:47:97:06:da:8b:83:6b:ff:f0:2d:e5:80:
                    d8:70:75:68:82:bd:1e:68:6a:89:6c:bc:ce:52:db:
                    4f:c0:0d:88:78:88:6a:46:e2:0f:58:8b:5e:08:bd:
                    f9:4a:5e:eb:7a:68:9e:34:5f:a0:81:04:de:a4:ab:
                    b9:ff:07:1a:ab:9b:04:35:74:19:da:69:3a:02:39:
                    8c:6a:a8:62:e3:54:49:31:43:11:58:78:62:43:18:
                    f5:0c:ed:90:60:c6:cf:ae:fd:9f:1c:8e:4c:64:5d:
                    b2:0e:86:28:8c:28:fd:7f:ef:0e:ef:db:ac:95:73:
                    2d:80:e6:f6:a8:50:e1:20:13:0b:5d:05:0e:93:fb:
                    dd:9a:5a:62:78:2c:b0:59:85:c1:bd:b6:85:73:0b:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:70:09:07:31:45:CB:0F:F1:C7:E9:AD:41:78:25:58:0C:BE:AD:04
            X509v3 Authority Key Identifier:
                keyid:3E:43:E0:23:C0:85:35:94:EA:D7:7B:28:28:9A:3F:1F:10:C3:09:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9d:ad:80:2a:c3:4d:ef:32:f8:38:29:27:20:fe:ad:80:84:
         a7:8b:42:21:d2:e9:2c:fc:48:c3:de:32:3f:91:68:23:77:10:
         57:cf:2d:86:7a:73:54:9b:cc:9c:1a:df:f2:5a:8a:cb:26:10:
         d1:18:32:4b:80:38:ee:e0:66:94:e1:78:81:76:ea:05:44:b6:
         92:6d:35:76:e5:a9:a8:3e:f7:2e:7f:60:62:6b:6e:e3:2d:23:
         83:27:5d:1d:b8:6c:94:a3:d2:48:5c:ed:1c:e7:b8:3f:fd:f7:
         21:51:84:1f:d4:08:3c:49:22:b5:01:72:94:e6:45:b4:0d:cc:
         0c:b0:94:16:9f:e7:2e:f4:6c:00:9f:31:fd:e6:30:d5:65:e8:
         24:e6:21:44:cd:bc:21:5a:b8:eb:ef:47:cd:3b:6d:83:dd:04:
         ec:27:dc:eb:23:ff:24:6a:6d:22:be:78:17:fb:36:db:8b:17:
         fd:91:e7:89:8a:66:57:dc:ee:97:3c:65:c8:b1:3b:0a:d3:16:
         d5:35:23:b6:ba:63:1a:a4:a4:d9:38:88:46:5c:0d:7a:25:b4:
         3b:c9:81:f5:1e:87:41:99:de:c9:2e:ce:bc:73:39:92:2e:b2:
         f9:a3:f2:f0:4f:b4:11:66:29:8f:8c:1e:75:14:8f:13:2d:09:
         ed:7f:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:43 2025 by rpki-client