Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
File:                     PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json)
Hash identifier:          1Tg6//gdvBlUOabVlqoj0CWaXFllpEmPG1Flb47K17w=
Subject key identifier:   20:9C:83:92:0B:8C:92:E3:45:CD:20:F6:42:8B:3D:6D:D3:B8:DD:E8
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Certificate issuer:       /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
Manifest number:          5C
Signing time:             Fri 31 Jan 2025 06:06:35 +0000
Manifest this update:     Fri 31 Jan 2025 06:06:34 +0000
Manifest next update:     Fri 07 Feb 2025 06:06:34 +0000
Files and hashes:         1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: 3bLTKJWlKpbTdCtpNP3PbuufZWSnAJPK8ON8t9BR9Wo=)
                          2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: MkKraPCVKYSh4EUGWEmc6lPBWcmV9tHqmd6kNTqMDpY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
        Validity
            Not Before: Jan 31 06:06:34 2025 GMT
            Not After : Feb  7 06:06:34 2025 GMT
        Subject: CN=679c686b-258c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:e5:0a:2d:f2:fc:76:3a:34:b5:8c:14:50:
                    bf:93:2b:c6:b2:ca:28:59:91:2a:92:5b:8f:53:9b:
                    8c:85:22:6d:d4:67:c3:45:2c:e0:4b:f1:7d:97:1e:
                    58:a4:75:2d:a6:c7:48:bd:75:c9:47:80:71:47:cd:
                    88:c0:4a:d0:a9:27:cb:2e:0a:d1:84:cf:8e:1b:d5:
                    28:ef:7b:83:d2:82:11:b7:52:d6:dd:7f:37:7b:7b:
                    ec:57:0f:3e:77:8e:7c:75:34:ab:29:76:f4:48:fc:
                    9c:f2:a1:cc:4f:30:f7:77:84:4d:c4:54:d2:72:17:
                    b3:5b:8c:1e:c1:b3:68:06:10:c6:f5:5e:3f:b2:29:
                    69:68:24:5c:9f:c0:17:2c:8b:1f:fd:bd:b8:82:6f:
                    62:f7:30:89:c4:0e:e7:ed:fc:df:f7:68:58:40:16:
                    f1:92:d9:c9:26:0a:cd:8f:ce:7a:8a:b8:66:91:84:
                    9b:ef:fc:9a:f8:2c:4b:40:d0:9d:97:b1:c9:a0:aa:
                    c8:7f:b3:54:cc:fd:ac:85:4f:f7:98:6f:0d:95:22:
                    14:fa:0e:63:ae:f3:6c:d9:ff:e3:bf:27:d0:c2:c3:
                    f1:67:fc:d9:ef:0e:62:b1:a4:6e:00:39:11:d9:d2:
                    5a:c7:1e:48:ca:a2:64:1f:6b:d1:9a:7c:9c:c3:2e:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9C:83:92:0B:8C:92:E3:45:CD:20:F6:42:8B:3D:6D:D3:B8:DD:E8
            X509v3 Authority Key Identifier:
                keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:32:cc:ad:7b:97:6b:97:40:64:ff:3b:99:82:5f:ac:08:1f:
         ba:99:da:e3:28:e0:6b:6a:f5:2b:9a:15:c5:aa:21:97:f7:36:
         63:a2:96:f7:18:eb:f5:5d:e2:5f:69:3a:37:7e:70:dd:4d:12:
         d8:3a:0c:94:72:be:55:36:b9:a3:83:56:d4:f3:e8:b6:93:b9:
         5a:b8:ba:c0:26:79:f3:77:60:2a:ee:c7:8d:a9:81:48:97:ca:
         79:f5:26:7d:34:a6:29:76:a2:13:34:ce:05:ee:53:32:c6:db:
         92:17:d2:47:fe:a6:b8:36:b5:b5:bb:6b:15:24:9c:c6:29:c0:
         9d:d7:15:30:b8:1a:12:40:4d:f4:7a:34:e6:ad:ea:74:77:15:
         73:63:55:cb:ce:af:ad:54:09:ea:48:a7:33:15:2c:f9:29:ce:
         81:7c:57:a1:ed:1e:14:1b:ee:f4:e2:c0:a1:c8:bc:f1:66:18:
         aa:69:85:2b:b9:df:d8:27:c2:55:77:c6:42:39:e7:b6:d3:73:
         b7:5e:ae:11:30:12:fe:60:41:ab:14:79:0e:61:58:b7:17:ed:
         55:ba:01:96:08:ab:c8:b3:97:b1:a4:17:4e:9f:05:75:5d:6a:
         d5:dd:a4:82:7b:b3:5d:f0:5b:bf:a7:51:1e:b5:d1:da:a3:f1:
         c7:67:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:49:00 2025 by rpki-client