Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
File:                     PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json)
Hash identifier:          XmSOwXn7Il2NYUwihCH1l0cxMWzZnB9VWEFSQiAI77E=
Subject key identifier:   13:7F:8F:4A:9C:F7:88:B3:0D:6B:EA:AB:14:F3:93:08:6B:A0:A1:28
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Certificate issuer:       /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial:       08F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
Manifest number:          08CE
Signing time:             Thu 30 Jan 2025 20:35:51 +0000
Manifest this update:     Thu 30 Jan 2025 20:35:50 +0000
Manifest next update:     Thu 06 Feb 2025 20:35:50 +0000
Files and hashes:         1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: DpOBkvMSLHax1uB75Ns+ByACubnSU2l0mgW15KKKNnI=)
                          2: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: WXRoqSuJ7ylbw7K72AAOsaJLTW5zfW38lPIwxiTLRCE=)
                          3: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: DQp5W/vsl6Br/ogSstkorS/8VooztvuTJ4JXbRwCOMw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
        Validity
            Not Before: Jan 30 20:35:50 2025 GMT
            Not After : Feb  6 20:35:50 2025 GMT
        Subject: CN=679be2a7-622b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:8e:25:a8:3f:b0:db:c4:54:6f:4f:82:66:
                    07:9c:dc:84:28:52:26:35:c1:17:4e:04:eb:52:ad:
                    03:72:15:11:2a:71:e1:15:d0:44:f4:87:4e:67:fd:
                    78:30:7a:30:cd:f7:12:7e:e7:6d:96:f3:ec:01:34:
                    20:35:1c:ce:46:45:2f:5d:29:be:09:87:b5:3e:d7:
                    21:80:23:5b:65:da:15:60:8e:42:b1:cf:af:27:83:
                    20:22:87:4f:dc:d0:a6:5c:09:d5:07:75:f7:35:3c:
                    26:4f:b2:c8:06:a8:61:18:34:35:7d:af:5f:25:1a:
                    cd:2e:6f:cd:aa:4f:e9:bd:ef:f6:9d:a8:68:23:2d:
                    6f:7b:24:03:03:be:bd:50:ab:4e:fa:ce:40:4c:54:
                    62:b4:3f:76:3f:31:36:bf:b7:60:ab:6f:da:12:ee:
                    7d:6d:f1:f7:79:91:72:f7:36:6c:c7:1a:0c:47:a6:
                    a5:03:cd:75:ab:73:14:29:d2:b4:dd:7f:d4:16:b7:
                    32:ff:a4:3a:00:0f:f5:86:fa:34:94:28:a3:d1:6e:
                    f3:aa:51:87:a0:ad:30:38:24:e4:c7:15:aa:2c:0b:
                    58:c5:a6:4a:a2:3c:f1:57:6c:b4:c4:fe:68:22:78:
                    a1:39:98:a9:1c:ee:36:57:89:7d:10:51:96:20:42:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7F:8F:4A:9C:F7:88:B3:0D:6B:EA:AB:14:F3:93:08:6B:A0:A1:28
            X509v3 Authority Key Identifier:
                keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d2:7f:e9:32:93:6c:6e:8d:44:59:ce:6d:c3:cf:40:0a:31:
         db:34:ed:ef:c0:56:2d:96:f2:90:01:55:1c:dd:d9:51:b8:e5:
         7e:84:75:61:5a:82:49:f0:63:44:23:21:bb:d6:3e:e2:82:29:
         78:72:d5:a2:37:21:b0:47:ee:ae:cc:44:f3:68:b6:c0:8f:37:
         fe:c2:4f:89:64:89:53:57:0a:f0:b0:34:a8:fa:83:a1:47:8e:
         78:d3:8d:f9:12:1a:66:01:1b:6b:21:7c:4d:35:a9:3a:80:e7:
         ed:ec:ca:0b:0c:41:69:56:e0:15:bc:9f:40:74:a6:3a:f4:8f:
         db:da:3d:84:ce:37:80:ac:d5:29:ec:ed:96:13:8e:38:2c:1d:
         64:92:1f:79:bb:dc:9f:7e:1a:b9:46:2f:a6:13:f6:0b:a4:24:
         62:e9:94:2f:bb:fd:f8:61:31:66:a2:49:45:f6:3f:cc:70:e8:
         93:67:97:02:dc:5d:68:65:53:09:aa:35:3d:6a:c6:ac:3a:e7:
         f3:e7:0f:13:a8:27:17:f1:56:28:f2:19:ae:66:f1:8a:75:85:
         e9:d0:d5:92:dd:86:3f:ae:b8:4c:4c:d6:14:24:f1:86:15:91:
         1e:23:b2:94:d3:a6:bb:30:80:2d:d1:a4:69:f8:be:1d:03:5f:
         d2:49:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:34:10 2025 by rpki-client