Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
File:                     psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json)
Hash identifier:          s6rmQIhVm5yO0xAPA4JqUdSmTfzICKznCCxtrKKw0/A=
Subject key identifier:   53:01:E7:56:D5:99:97:F4:2E:82:7D:42:57:21:5A:74:42:15:E5:88
Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
Certificate issuer:       /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Certificate serial:       09A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
Manifest number:          099A
Signing time:             Thu 30 Jan 2025 20:09:56 +0000
Manifest this update:     Thu 30 Jan 2025 20:09:56 +0000
Manifest next update:     Thu 06 Feb 2025 20:09:56 +0000
Files and hashes:         1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: HB5TpIrMIJzc4quZUOixIXw7a1MyBZAzW9qJlbXj0eQ=)
                          2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: wpAzbtu5F53kU4ooHDJQYR2Sx5W2H0NgT0BgO9+1V88=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2469 (0x9a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
        Validity
            Not Before: Jan 30 20:09:56 2025 GMT
            Not After : Feb  6 20:09:56 2025 GMT
        Subject: CN=679bdc94-d1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:20:62:8d:d5:bd:ba:21:a4:fb:4d:d7:03:
                    35:5b:9a:d7:8c:64:de:99:24:76:f6:68:eb:c5:bc:
                    6f:1c:d9:d0:80:a3:8c:3e:60:7f:27:28:ff:e3:d9:
                    5f:fe:04:c3:0a:75:48:8a:51:83:54:cf:47:6c:af:
                    ff:73:cb:60:15:af:6c:d9:27:df:b0:85:14:6d:9b:
                    92:e6:02:04:42:ff:82:60:8e:f7:f4:dd:c4:9a:06:
                    b4:49:e6:ed:85:3f:49:7a:38:2c:cc:75:05:55:88:
                    a0:9a:36:df:18:e6:cb:9d:be:10:57:8a:de:0f:b3:
                    8f:30:09:2b:f2:94:1c:36:fc:68:39:be:e1:15:ad:
                    f7:6e:36:e8:1d:48:d2:56:a6:7c:df:8e:00:06:be:
                    7a:6a:b1:8b:78:e9:e8:af:e2:ca:17:cb:4f:06:03:
                    d5:0e:46:a0:d7:d4:03:2c:bd:83:bb:34:d9:29:e2:
                    0e:e2:8e:df:d9:f7:90:72:aa:22:fe:05:4b:de:66:
                    fc:83:21:45:1d:33:74:da:09:94:af:b7:56:88:31:
                    67:31:8e:b1:0c:1a:6c:d1:c3:db:88:76:24:14:e0:
                    47:18:31:b4:44:e1:0f:6b:0b:a7:4b:17:0d:26:da:
                    e0:7f:bb:c1:dd:4c:f0:7c:57:f7:e9:58:00:9a:ee:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:01:E7:56:D5:99:97:F4:2E:82:7D:42:57:21:5A:74:42:15:E5:88
            X509v3 Authority Key Identifier:
                keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:19:cd:86:58:d0:91:54:cc:ed:fa:d2:20:5d:f9:9b:67:0e:
         1a:d4:a6:46:ff:9b:ec:d9:14:c1:8b:ad:32:d2:64:69:a4:cd:
         6e:45:a9:b6:0e:86:3c:fc:9a:b8:fa:c9:0f:7b:4c:5c:4f:7a:
         6f:44:08:2a:5a:81:a8:02:59:f7:40:a0:db:a7:62:d6:e5:6d:
         8a:69:22:19:04:c4:6a:f8:01:35:54:09:d1:fb:2a:1c:81:19:
         f8:9f:bd:70:1e:1e:8f:7e:e0:e5:07:75:43:6d:d8:ed:64:e1:
         1e:2a:ed:a5:30:3b:6f:1c:d4:b9:c7:a1:da:81:b0:e8:df:e2:
         c3:4f:36:f3:de:34:e7:da:a7:ec:55:05:d4:e4:da:bc:30:a3:
         71:4b:db:e4:a3:0f:f5:75:73:a6:e0:b0:75:a0:21:e5:27:d4:
         30:a8:d6:fe:c0:5e:2a:94:07:4d:42:c5:cd:02:5c:01:38:01:
         21:03:1d:cc:6c:47:4f:8e:06:a4:71:72:6e:4f:a9:2d:fe:81:
         21:5a:eb:a6:54:af:10:ef:dd:98:35:27:5a:ea:f2:aa:61:83:
         e5:3d:1f:90:83:eb:91:91:52:c1:5a:bc:7b:f7:3d:bf:fc:61:
         4b:e2:71:4a:ee:e5:4a:ac:80:09:14:8f:43:4f:bd:48:d8:74:
         dd:30:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:06 2025 by rpki-client