Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
File:                     eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json)
Hash identifier:          Z+7eaL4YTbzTC5057Na2rrqdehRjj+ii7axOrkI5IQQ=
Subject key identifier:   45:D6:44:5B:9F:2E:0E:29:C3:33:40:E6:C5:33:82:E0:3B:29:14:60
Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4
Certificate issuer:       /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4
Certificate serial:       25C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
Manifest number:          2C86
Signing time:             Fri 31 Jan 2025 15:43:52 +0000
Manifest this update:     Fri 31 Jan 2025 15:43:52 +0000
Manifest next update:     Fri 07 Feb 2025 15:43:52 +0000
Files and hashes:         1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: rI+WaJd1kZKbGXinwYqBDjwak/nvmR9fOPqwPrhfeIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9672 (0x25c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4
        Validity
            Not Before: Jan 31 15:43:52 2025 GMT
            Not After : Feb  7 15:43:52 2025 GMT
        Subject: CN=679cefb8-b86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:21:b8:2a:51:a2:e6:40:3c:91:41:9d:8b:85:
                    f4:9e:24:2e:34:bb:e6:02:5d:0c:33:7b:aa:ed:ab:
                    7e:0b:2c:ad:ca:91:3e:fa:cd:df:e6:6c:50:56:bf:
                    4c:ef:5f:03:b7:c0:07:e2:4a:61:d9:c7:67:17:64:
                    8f:85:23:75:6d:04:47:29:d5:ff:b1:2f:e1:a7:3c:
                    8e:b5:6f:bc:60:92:43:e5:62:93:97:d5:5e:c5:9b:
                    de:71:77:f5:eb:13:42:bf:1e:19:42:37:85:f8:55:
                    5f:81:d0:d4:a6:35:3b:d9:46:17:86:3d:50:eb:1a:
                    13:cf:34:74:a9:20:65:84:74:0d:a8:2f:22:b8:cc:
                    4e:b1:cd:93:ab:4f:14:e7:65:32:40:db:e6:8e:8d:
                    be:40:e6:dd:c8:c2:40:f9:80:39:4f:13:86:0f:a2:
                    ce:da:b6:7c:5a:69:4c:c1:06:7f:ff:ef:01:9a:bd:
                    c3:7b:84:18:a9:2b:6e:6d:ab:b1:f7:d9:b3:6f:17:
                    83:9d:68:f9:1e:dd:9e:72:a7:51:a2:32:9c:ad:4e:
                    4a:c7:2e:5f:75:a5:18:e9:5e:7f:7c:29:79:0a:34:
                    b2:94:c5:f3:12:2e:6d:65:df:16:69:f7:dd:17:9a:
                    81:87:d5:a7:b0:31:8b:d3:9f:93:99:0e:65:3c:ef:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D6:44:5B:9F:2E:0E:29:C3:33:40:E6:C5:33:82:E0:3B:29:14:60
            X509v3 Authority Key Identifier:
                keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1f:6b:0f:89:19:d8:5d:97:f7:fd:c4:9c:8e:31:6c:bb:8b:
         83:25:5e:eb:a0:d5:27:d8:c1:2b:fd:5c:c1:9a:08:3b:19:81:
         b4:b6:cb:bc:27:e8:46:7b:3c:a0:d1:20:12:a9:24:ec:ad:75:
         16:fb:ac:fd:91:bd:d0:a7:e9:45:e6:67:2d:9f:6b:11:d9:11:
         67:e1:87:15:01:ed:83:0a:c3:94:1a:fa:fb:dc:bc:b4:97:80:
         e6:dc:58:b4:22:65:43:17:b7:21:d1:a0:ce:19:29:a0:26:99:
         dc:ce:82:67:ba:fe:f4:8f:48:22:20:ea:fa:05:79:78:73:c0:
         c3:47:43:a2:f3:bc:8e:56:23:b7:13:2e:98:3f:30:16:16:a2:
         ac:4d:da:bf:de:de:f6:ef:c3:05:2c:d7:58:9b:ff:7d:e0:b7:
         5a:94:07:6e:d8:70:35:52:35:03:c0:98:e7:fd:dd:48:0c:ad:
         dd:bd:74:96:96:86:ba:94:f1:92:3f:ba:e6:d4:7d:37:78:32:
         a3:0f:28:3e:4d:b2:2d:38:c7:94:38:00:54:80:7a:94:ee:ea:
         6e:2b:3d:c6:ed:be:17:7e:1e:a2:15:ee:2f:f5:74:6e:39:8a:
         ed:6c:97:34:30:2e:ac:c2:f7:4c:7c:97:6f:15:1f:48:57:6f:
         ff:50:14:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:08 2025 by rpki-client