Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
File:                     pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft (raw, json)
Hash identifier:          /IZpSKYf12dkuTbWkTRc2yLn+YkO4ekhye14TPA7k4o=
Subject key identifier:   D2:2E:4A:AE:66:6C:82:38:F0:E5:82:2A:61:5A:3A:35:BC:26:8F:E8
Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B
Certificate issuer:       /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
Manifest number:          01A2
Signing time:             Fri 31 Jan 2025 02:30:49 +0000
Manifest this update:     Fri 31 Jan 2025 02:30:49 +0000
Manifest next update:     Fri 07 Feb 2025 02:30:49 +0000
Files and hashes:         1: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl (hash: lxUgaNlGxbMTO979hgs01ZviLQOfFjnmx11paVfQtTQ=)
                          2: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (hash: ToaemIh9fPDcUkU4p3/lQzqtbYeK8WosReKWFwgAYY8=)
                          3: 843712B65E4711EDA05F092CC4F9AE02.roa (hash: fEBKFBy173sPjDX2RWBsnGsgGGHYxBJfdinF6AmOKOQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
        Validity
            Not Before: Jan 31 02:30:49 2025 GMT
            Not After : Feb  7 02:30:49 2025 GMT
        Subject: CN=679c35d9-2a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:e3:fc:a4:90:3a:45:02:64:b2:2b:b9:f0:
                    94:99:14:69:6a:52:bb:c7:73:8b:ce:24:8a:c7:7f:
                    d5:e9:ea:b7:31:e4:d6:33:f4:04:7c:ad:99:a0:0d:
                    39:ee:10:71:cc:60:41:5d:a5:01:f0:cd:e0:53:13:
                    89:7e:fb:d6:8d:47:05:1b:b9:ac:97:16:3f:e9:d1:
                    0d:76:1f:48:fd:57:4e:60:e4:d1:74:83:df:cc:8e:
                    2b:bb:cc:85:49:e6:69:3d:22:c0:c4:ed:83:e5:67:
                    84:e5:8a:a0:82:57:b5:a9:41:15:85:59:c3:13:84:
                    27:c5:4d:a7:8f:3a:d3:e3:30:1a:13:a9:e1:b8:2f:
                    31:aa:fe:2c:b1:a6:d6:9d:bd:f9:1a:a1:73:94:ee:
                    d7:a5:7f:ee:bc:c2:1b:f2:0d:f4:e3:7a:9d:9c:94:
                    8a:66:bb:71:dd:39:81:c3:2a:da:04:4c:b0:65:0a:
                    17:00:09:07:9f:60:1a:ce:8a:5c:ad:fd:4c:f1:c6:
                    23:64:36:f7:bb:4e:5e:f0:06:4d:e2:ba:76:6c:bd:
                    cb:e1:55:72:f8:2f:e2:dd:32:0a:af:f7:62:d3:fb:
                    b6:aa:66:32:28:ee:ef:84:0c:67:52:b8:96:ae:e8:
                    d3:0d:7e:b7:8a:bb:b8:4f:d4:46:72:a1:c6:37:13:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2E:4A:AE:66:6C:82:38:F0:E5:82:2A:61:5A:3A:35:BC:26:8F:E8
            X509v3 Authority Key Identifier:
                keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:85:67:1e:e7:95:6c:1f:d6:57:c1:18:61:d1:c2:f8:e5:
         4b:15:0d:f5:a7:67:c6:36:6c:51:bc:66:a6:22:a7:ce:57:cc:
         a1:96:b8:fe:12:0e:98:d2:9b:69:60:65:56:ac:77:56:ae:cc:
         1b:8c:99:d7:14:b2:40:19:66:53:3e:32:ed:ff:36:eb:87:f8:
         eb:10:30:11:ce:72:a6:82:29:e4:de:3e:5f:62:5d:b3:24:97:
         2c:a4:8a:f5:8c:a6:9b:eb:2d:35:a6:aa:a3:3b:69:83:b7:08:
         16:0a:89:df:a2:4e:63:b1:a1:f2:a2:52:2e:35:e2:3e:5d:07:
         ce:11:ee:10:36:8a:9a:ba:18:ed:4e:f0:f8:14:8e:44:b7:78:
         08:b7:82:0a:d9:69:39:5a:0b:15:7b:50:16:d5:e2:da:3a:18:
         ee:24:66:cc:73:4c:b7:4e:ad:b6:aa:e1:86:54:16:53:63:e9:
         26:6c:91:41:f3:1e:ae:96:01:27:dc:07:1c:6a:7a:99:52:ad:
         29:86:15:c5:17:27:a9:77:33:07:a1:6e:0a:7c:63:4d:07:47:
         d8:16:ba:92:10:0f:70:cb:f9:a4:05:66:e2:b1:b5:30:e2:6f:
         ee:44:91:7d:86:ef:26:04:a9:58:55:47:92:70:a2:f1:5a:19:
         5d:d4:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:33 2025 by rpki-client