Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
File:                     ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json)
Hash identifier:          ommGmMjgYHCoq+NKfXYjNj7GuPqoRGAgZ91acjp44q0=
Subject key identifier:   B7:87:FB:0A:3F:57:78:83:8E:1B:54:80:F1:C3:61:20:B3:74:FB:C7
Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
Certificate issuer:       /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
Manifest number:          0F
Signing time:             Fri 31 Jan 2025 07:07:37 +0000
Manifest this update:     Fri 31 Jan 2025 07:07:37 +0000
Manifest next update:     Fri 07 Feb 2025 07:07:37 +0000
Files and hashes:         1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: iRih612m5grE9xvaRmxPPZUxfx2lU6pIjGTA2Acdyrk=)
                          2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: BAKZvJEz8yyj6HH1ezZDzfaPEc4hpm29xOe5qwW+d7U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
        Validity
            Not Before: Jan 31 07:07:37 2025 GMT
            Not After : Feb  7 07:07:37 2025 GMT
        Subject: CN=679c76b9-9ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:16:b0:64:f1:28:0d:62:24:fd:8d:6e:19:
                    b0:81:da:26:3d:9b:f6:cf:71:ef:d8:87:17:3f:8b:
                    22:1e:7c:f5:17:fc:a0:a2:5f:6e:8b:40:c9:bc:c6:
                    b6:dd:c2:e0:28:d1:82:22:9a:32:71:51:bc:2c:e9:
                    32:c4:bc:f2:00:d0:d0:45:87:68:a4:b4:0c:2c:76:
                    27:e4:58:ab:ba:07:d9:bf:39:c4:c6:bb:f2:95:3b:
                    38:6e:bc:fc:bb:88:38:3b:a8:4e:8f:cd:a7:41:d2:
                    71:98:a7:db:50:63:89:93:da:40:7a:73:1d:04:91:
                    d1:22:d8:27:56:b9:34:bc:ae:6b:86:86:7a:9c:ab:
                    2b:13:b4:a5:74:d2:6f:e0:5a:84:7a:2c:c3:48:17:
                    28:25:ef:7d:6b:19:67:7c:11:6d:31:50:63:25:f8:
                    9d:41:54:e2:fd:25:ee:d5:1a:9a:1b:d3:1f:fa:2e:
                    40:1c:ee:2c:a4:34:88:fe:7b:05:a2:a9:85:fc:03:
                    be:d8:ed:c3:b2:1c:78:8d:9e:94:05:60:f2:10:d5:
                    1c:73:63:82:2d:63:e7:4c:cd:ad:4e:05:f5:d2:6e:
                    a1:c4:cb:c9:4a:c8:a9:90:ee:9d:5d:5b:29:d8:77:
                    42:e7:77:fc:c4:e3:fd:26:72:38:d2:8c:cb:ce:9c:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:87:FB:0A:3F:57:78:83:8E:1B:54:80:F1:C3:61:20:B3:74:FB:C7
            X509v3 Authority Key Identifier:
                keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:4d:fd:42:c6:1e:8c:80:ae:81:5b:6c:7f:cc:bf:c7:0a:
         f4:1c:8b:15:e3:37:d6:3f:f8:d3:f5:ef:8d:9f:d1:a6:ea:fd:
         61:23:56:15:6a:34:04:30:f9:14:6d:89:49:56:10:6e:b2:2f:
         c3:ca:f9:b5:ca:0d:91:96:ac:10:29:44:d4:f2:19:30:f1:a2:
         1f:85:90:83:00:e1:c7:0f:58:34:f0:d6:5f:b1:50:f9:16:12:
         86:48:34:3b:c2:ac:28:0b:8c:e0:c0:20:9a:a4:f2:d4:16:a7:
         4d:c5:3b:02:0d:d8:d8:86:72:2e:85:79:5b:86:cd:1f:50:b2:
         c1:25:2e:9b:70:fc:bf:94:0b:35:43:56:68:5a:cb:90:96:dc:
         05:1a:76:e0:ba:59:61:05:2d:7a:96:bc:7e:8c:16:7c:b6:bd:
         f5:ca:eb:88:66:61:fc:81:d5:6f:2c:ed:c8:e4:27:6f:e8:45:
         a6:bb:fa:2e:b6:32:d8:c0:54:d3:01:58:ac:e8:24:1e:6a:90:
         de:7a:68:7a:ac:ea:64:4f:63:44:d6:1c:0d:bf:73:01:75:64:
         9a:d4:3c:37:24:9d:01:52:3b:a8:fe:c0:bb:c5:f5:b4:c7:7b:
         55:ac:a5:b0:42:7e:98:1c:01:e4:02:f7:0e:0c:83:bb:86:f3:
         fe:b1:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:42 2025 by rpki-client