Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File:                     PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier:          DdLPR0S050Q/ZDo1ejrY09sOD53e3RH8IEXt2JYPJOE=
Subject key identifier:   CD:97:EB:7E:F0:59:71:E2:BE:FE:E2:07:D6:45:E0:C1:2F:4A:2F:98
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer:       /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number:          C7
Signing time:             Fri 31 Jan 2025 04:53:56 +0000
Manifest this update:     Fri 31 Jan 2025 04:53:56 +0000
Manifest next update:     Fri 07 Feb 2025 04:53:56 +0000
Files and hashes:         1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: mKNqpmZhv3R58MEs5TD6QI8RBae5uVsX9PNKtWh3pPs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
        Validity
            Not Before: Jan 31 04:53:56 2025 GMT
            Not After : Feb  7 04:53:56 2025 GMT
        Subject: CN=679c5764-cd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:11:de:78:58:d0:6c:1e:3e:57:aa:35:97:
                    33:79:49:4c:5c:d7:56:de:02:b1:52:41:cb:e5:19:
                    7b:2b:84:04:11:90:b8:8f:c6:89:5a:fe:7e:30:0c:
                    2f:dc:f3:94:87:bd:9f:1c:25:3c:ee:2b:06:08:38:
                    2b:74:7f:d3:c5:39:b3:2c:e0:5d:6b:12:42:fd:4c:
                    48:77:e2:62:25:f0:67:85:cc:1f:2c:60:5b:14:63:
                    f1:f9:69:b6:37:ee:39:77:9b:4c:87:6d:5b:e2:cc:
                    61:70:cc:91:24:cb:e1:01:0f:13:c7:42:c7:e3:7f:
                    0a:dd:97:90:6c:c6:ac:c0:c3:02:a3:b8:3a:05:97:
                    72:27:f4:4e:fe:b7:f0:fe:ec:de:72:48:67:b5:c2:
                    76:7b:43:b5:9b:7a:f7:9b:1d:51:aa:c9:83:9b:5f:
                    9b:65:d5:be:e7:3c:17:2f:98:17:65:f5:34:3d:05:
                    84:3c:ac:e2:0d:6e:ea:45:e9:3a:b3:81:14:0c:76:
                    db:71:01:4d:79:90:4c:e2:32:fa:fe:0a:b9:57:53:
                    5b:a7:a8:53:b1:55:82:09:db:c7:3f:9c:11:d3:18:
                    56:e5:69:53:59:17:8f:b8:c2:31:ba:63:35:63:07:
                    a7:7f:13:85:dc:ce:b9:e7:53:20:8d:d0:82:04:a7:
                    9b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:EB:7E:F0:59:71:E2:BE:FE:E2:07:D6:45:E0:C1:2F:4A:2F:98
            X509v3 Authority Key Identifier:
                keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:6d:89:42:08:01:20:26:63:55:02:04:82:85:f6:da:20:
         9e:81:b2:e0:45:1d:51:e2:ab:40:97:f1:79:53:61:4f:d2:7b:
         31:29:ef:9f:7a:15:ad:bd:ce:81:f5:33:94:0f:a3:fb:54:6f:
         5a:08:c2:30:a9:64:e3:40:7e:5c:9d:59:5e:64:3f:5c:94:e5:
         43:82:13:82:26:04:ad:b3:ad:ad:1c:a9:1f:aa:5e:0c:21:79:
         90:98:e5:7e:8d:b8:2a:8d:da:c3:d6:18:7b:03:98:dd:16:55:
         90:cf:e8:0f:d1:f7:bb:be:72:8a:c5:37:95:be:ff:52:05:f7:
         99:b0:8d:72:80:14:3b:b3:99:59:1d:43:4e:a3:0b:3c:c7:7c:
         ed:95:e1:c8:9e:b4:49:43:7d:9d:a6:a5:7f:13:38:5f:02:4b:
         7f:7c:ef:3e:1a:26:46:4d:aa:c4:5f:28:6d:b8:d9:db:01:c7:
         9c:22:85:c0:66:ec:48:08:fb:00:dc:c8:23:c9:50:57:44:5f:
         f3:c8:11:cf:59:03:c0:07:2b:18:9c:ef:f8:df:6a:86:e4:19:
         1b:ae:85:0e:98:3a:19:54:55:67:00:7c:7d:1d:66:e8:7b:98:
         25:7a:0f:e2:d4:73:d0:76:0e:9e:37:d8:8b:e2:b5:f8:59:d5:
         43:27:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:24 2025 by rpki-client