Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File:                     Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier:          RRXZ2LHwrgZox6ENP3Hn9HUDTUz0M0bNmThP/nR95O0=
Subject key identifier:   F1:23:1C:9C:0C:95:A2:A2:E5:AD:21:F1:C0:49:22:E0:09:35:7A:0D
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1C92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number:          3E99
Signing time:             Fri 31 Jan 2025 14:30:32 +0000
Manifest this update:     Fri 31 Jan 2025 14:30:31 +0000
Manifest next update:     Fri 07 Feb 2025 14:30:31 +0000
Files and hashes:         1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: gJLZW3xIHESNo6rgYV67w15bH8y7ZixHHsomn6rySkQ=)
                          2: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: V43Il4g6nzN/Oi9NZNkfIg3qfCZBm83zni76jTMor3c=)
                          3: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: ecbq5n9i8YsI1DnV/FNeUcy7K6RyCgb2n5KgFVtlRys=)
                          4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: sli6IC2z9YJ/HvCCp5rnJrdg1q/2CMI1k/lxId4QY58=)
                          5: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: 3mizSI3ttwr9fYLhX95SY8SiU7O6qd9AnRwusH6MEfo=)
                          6: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: Wdg4VF5GLoHlwlPyl6+HlE/ibrc1SiBo2CXSWmJGq0s=)
                          7: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: kTpEYCAmunxJIp4Id6sV5egINJOtqBpQw2yNKgEwrR4=)
                          8: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: 05JiHZhW4FX5F4m2ta1eoZQOXujb14zXuKofXn8V9ts=)
                          9: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lXnIjaE79MbFJFMKpPmyaG2gWaI8IDWerJKv1saa/n0=)
                          10: 66891B80943011EA8988B883C4F9AE02.roa (hash: e8EsUIru5I+kvcxrClJSF0og6ruHigKw4K5qZx/355g=)
                          11: 727C68508AB411EA89D83541C4F9AE02.roa (hash: 3/YHfMJFd4+/uHvYeznP2jrI3k3cNg88tQA8zxhGa9Q=)
                          12: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: KqNlQBgDzVn6oYtQRMX2oZuYkDyyOGts1nvV6+UnhlU=)
                          13: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: W9G6BLl6GrAu6NpuOira3w9ONwVWK7LaREYQeOaaW/o=)
                          14: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: jQLZJj3VvPR1niUIT7DA9sty7btEtK8rmHNsN8IaW9w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7314 (0x1c92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Jan 31 14:30:31 2025 GMT
            Not After : Feb  7 14:30:31 2025 GMT
        Subject: CN=679cde87-5068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:3a:4a:73:0b:e3:f6:26:83:51:4e:25:39:
                    5e:8f:87:4f:32:41:1b:10:e0:e4:28:78:a3:f7:f0:
                    06:d8:8a:10:aa:ac:4b:ac:19:92:b5:54:48:1c:0d:
                    df:45:ca:99:fd:e8:dc:a2:4b:ff:8e:6d:9a:d4:61:
                    c1:f2:7c:0a:d6:6e:a7:d0:95:93:6e:44:51:e7:ed:
                    1e:35:38:8a:ff:4e:fc:71:f8:0f:eb:22:03:e2:a7:
                    d7:ba:a7:f5:16:fd:1a:a1:b7:7a:cb:13:5b:7a:ec:
                    93:6f:db:5a:c6:35:26:af:61:7b:9d:2d:e1:da:54:
                    a5:76:d7:7d:7f:ac:56:0a:3d:e0:af:ef:f0:88:42:
                    4d:b7:0f:6f:a0:77:a8:7e:c1:75:e2:85:8e:7e:ff:
                    bc:ce:7f:10:e8:6e:4d:73:e7:2c:25:82:0f:53:8f:
                    36:a5:69:83:ce:0a:97:35:b4:a9:a4:d7:a8:c5:8a:
                    c6:cf:31:02:4b:b0:28:d6:03:7a:cc:fe:1f:60:ac:
                    5f:43:cd:aa:7b:20:6a:6a:ef:04:9e:87:96:fa:ea:
                    09:6f:31:e5:32:8b:fc:12:00:85:37:85:41:00:0c:
                    3f:12:d0:8c:96:f5:3b:84:5b:48:f5:79:5b:2e:20:
                    b5:9d:23:a8:c9:fd:a0:07:2f:fd:9a:ff:ac:47:79:
                    4d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:23:1C:9C:0C:95:A2:A2:E5:AD:21:F1:C0:49:22:E0:09:35:7A:0D
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3f:26:68:1c:f6:f1:f8:c2:be:7d:b4:a0:72:7a:20:85:ab:
         3c:e0:99:95:e0:ac:39:57:08:cf:bb:89:4f:97:5c:dd:fc:2b:
         6a:3a:96:9f:55:7b:37:67:cb:c7:bd:12:29:80:cd:06:8b:82:
         e9:7d:07:1a:ba:62:8c:46:8b:b0:76:03:2b:ee:7f:d3:ce:32:
         54:c5:b2:ec:34:13:63:0d:30:1c:6d:62:6d:07:0c:d8:95:76:
         26:76:0e:ac:33:ba:30:c1:02:f7:b2:50:c2:7e:8e:54:b4:f9:
         da:19:62:bb:f9:27:82:96:86:d7:01:f6:3a:05:2f:55:8c:e1:
         5c:d4:82:1c:5d:b3:3c:ed:68:4c:ed:bc:d3:62:8d:d7:d4:7f:
         2a:0d:a0:55:14:97:4a:b4:7b:fb:9d:eb:94:53:47:87:ea:48:
         c7:1d:6c:f1:ad:ae:d6:ec:23:13:b6:c7:4b:6d:11:f8:10:ba:
         21:fd:fa:c4:5e:80:54:d0:8a:ce:1d:ce:7e:de:29:92:34:9e:
         94:9d:04:58:c7:6d:b3:9c:24:b7:ef:55:b6:32:cb:c5:ca:56:
         ae:99:e9:ff:ea:e7:89:e9:6d:6e:b7:eb:38:cd:d3:2a:73:c5:
         9a:32:96:8a:ef:21:b7:9f:6b:21:89:b5:56:53:21:6a:0a:ad:
         bc:23:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:34 2025 by rpki-client