Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
File:                     b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json)
Hash identifier:          u5jwW5bqmfyF/xAs0e9ihWvnfjTr3PM4RB0RsiG1HcE=
Subject key identifier:   F5:DA:E8:67:3B:64:46:AA:DF:6A:CC:2C:30:8D:9C:57:BE:4C:8F:9C
Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Certificate issuer:       /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
Manifest number:          52
Signing time:             Fri 31 Jan 2025 06:17:57 +0000
Manifest this update:     Fri 31 Jan 2025 06:17:57 +0000
Manifest next update:     Fri 07 Feb 2025 06:17:57 +0000
Files and hashes:         1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: hf0Kf+eYAoAs51SbVg2Wfqs6cqe+4YdTP5Gk1swcQWA=)
                          2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: hKAcM7PRtQuRPjx0tWfk/T7bUGTXZ0S7TBNS8XkVkg0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
        Validity
            Not Before: Jan 31 06:17:57 2025 GMT
            Not After : Feb  7 06:17:57 2025 GMT
        Subject: CN=679c6b15-653e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7f:ed:be:0f:c2:e8:a6:41:c5:d7:ba:6a:57:
                    77:2f:20:6d:09:cb:6d:86:ef:f8:4a:c9:34:46:7a:
                    90:2b:02:03:19:74:f4:b4:c3:5b:04:a6:23:17:32:
                    53:28:16:ed:41:14:17:9d:d3:eb:45:f0:06:64:9c:
                    fc:7e:ef:07:88:1a:ab:c5:d1:c4:63:53:73:eb:0f:
                    d2:13:97:0c:9f:24:cb:f1:fe:ef:69:21:f8:ec:54:
                    83:2c:f0:5b:f9:40:c1:5f:c5:88:85:7c:8a:fb:b3:
                    1a:5b:9b:ae:f8:a8:40:5a:ff:a4:92:ff:5b:3e:8f:
                    7e:88:7c:4b:4d:b8:7b:06:d0:ac:b1:68:c3:7e:f1:
                    7a:b0:ae:2d:bd:21:9d:70:f8:6d:38:8d:f1:20:92:
                    8c:55:f2:14:86:b3:f5:d3:66:75:78:05:1a:5f:74:
                    7c:9f:c8:6c:5b:e9:b3:ef:26:48:e5:06:66:a8:d8:
                    b9:e8:a2:6b:1e:de:2a:fc:6f:d6:22:6d:f1:41:08:
                    de:5c:91:40:e1:5b:a2:ac:8e:6c:a8:22:74:ed:01:
                    cf:e8:d5:aa:86:8c:b2:87:f9:6a:83:25:db:f9:35:
                    75:1c:ca:f4:18:82:66:02:78:a8:83:6f:62:5e:03:
                    d7:8b:28:6e:50:7f:e7:86:ae:33:a2:75:c6:3c:e1:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DA:E8:67:3B:64:46:AA:DF:6A:CC:2C:30:8D:9C:57:BE:4C:8F:9C
            X509v3 Authority Key Identifier:
                keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:c9:3a:e2:74:fc:42:14:c5:8b:53:ae:71:95:56:5c:38:
         b6:f9:3f:a3:f8:71:a8:03:0b:7f:49:4e:2e:fb:cf:2c:c6:43:
         9c:24:f9:54:64:00:69:45:39:d4:61:f8:b0:a9:bf:d3:0f:5a:
         d9:41:14:69:88:c1:00:93:23:81:62:49:e2:ad:be:2e:3a:01:
         d8:14:de:f8:10:d7:2c:b2:cb:78:db:6a:d2:9b:d0:69:0f:ab:
         e6:ed:b2:2e:8e:28:9c:20:c1:93:4d:41:0d:f0:eb:27:c0:9a:
         a9:75:35:5f:6f:02:5e:50:b2:fa:94:68:50:81:b7:44:f8:06:
         89:97:f8:6b:37:1c:d7:d0:0c:1a:d5:d1:6f:a6:04:22:2a:62:
         6f:cd:88:c3:50:6b:9d:38:6d:bd:97:b4:e0:c1:b3:3d:5c:3d:
         36:7b:73:67:5f:32:ff:8b:b1:e2:7e:d3:79:83:9f:1c:13:71:
         d2:de:37:3e:79:83:c2:e5:67:72:cc:d5:02:81:23:d8:ae:e5:
         01:c4:c1:06:e4:38:17:a6:cd:a8:2e:33:a6:9a:2a:3c:60:85:
         8e:70:10:10:0e:23:c7:f2:9b:e6:c5:b6:e4:ec:29:9f:2d:97:
         0a:40:f4:73:64:0b:44:8a:73:da:65:ec:fe:33:1a:70:be:2b:
         34:80:ab:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:13:11 2025 by rpki-client