Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
File:                     _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json)
Hash identifier:          nqaYJJJouxGlovhF6Ut9wWzJhGjEFTXpU8UywqwzUJU=
Subject key identifier:   72:CE:47:B1:DD:D9:D9:1B:7C:62:2D:8C:6B:F2:3B:E9:25:FD:6D:F7
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Certificate issuer:       /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
Manifest number:          E3
Signing time:             Fri 31 Jan 2025 04:39:49 +0000
Manifest this update:     Fri 31 Jan 2025 04:39:49 +0000
Manifest next update:     Fri 07 Feb 2025 04:39:49 +0000
Files and hashes:         1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: kUYA3DQBT2eEgS9BmgdxV02qZKoJdoyBCwS9fu7JJFA=)
                          2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: Ot9cpLYOpRPaFsp3xYibZwM51C9pmXOqK219ZE/jTZk=)
                          3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: W7ba5JYerHkkZ4+27LlJwNkE8nn+BEtnpt42cK9Iauc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
        Validity
            Not Before: Jan 31 04:39:49 2025 GMT
            Not After : Feb  7 04:39:49 2025 GMT
        Subject: CN=679c5415-5865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:00:69:3f:cc:73:f0:99:32:62:ce:35:cd:
                    2f:98:b8:32:50:cd:df:84:bf:ad:98:db:81:16:2d:
                    4e:c5:d9:f3:60:15:98:82:0d:74:8a:f2:11:73:29:
                    33:a1:de:75:d1:bf:02:45:8d:8d:a9:a5:c2:40:eb:
                    ad:e1:f6:dd:d0:a3:01:82:3c:f3:41:34:13:de:6a:
                    3f:e5:e1:f8:14:cc:94:b2:2f:b3:96:cb:d2:c6:54:
                    5a:a7:b4:bf:39:2b:e0:ff:37:3d:68:03:24:ef:e8:
                    51:5a:a6:42:bc:b1:94:f4:01:13:61:ef:cf:be:dc:
                    25:71:b5:81:5e:32:4f:c7:43:f6:57:45:6c:e5:8e:
                    5b:aa:53:51:ad:6c:d9:d4:05:48:cd:f4:35:50:75:
                    35:77:ae:ee:e0:33:60:63:55:58:0f:74:61:0e:12:
                    5f:b7:22:b6:a0:0c:3d:4c:e1:47:41:77:c4:be:9f:
                    94:a1:11:18:7e:b2:57:8d:9e:60:38:f2:4a:f3:ad:
                    f9:cf:27:40:f6:af:0d:b7:86:d3:30:0d:52:b4:5b:
                    e4:63:63:bc:f5:6f:6a:18:a8:06:f7:f6:71:cf:32:
                    f6:ae:8e:86:44:61:ca:82:39:c6:5c:99:66:90:3d:
                    c1:fb:2d:39:a4:e1:e0:cc:54:36:4c:d2:e8:06:ae:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CE:47:B1:DD:D9:D9:1B:7C:62:2D:8C:6B:F2:3B:E9:25:FD:6D:F7
            X509v3 Authority Key Identifier:
                keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:10:91:36:04:ff:9a:80:e4:f5:d8:e3:02:83:e3:90:e2:20:
         6e:b5:08:1c:70:d6:76:3c:0d:54:87:16:25:c3:33:94:30:e1:
         78:2b:04:b5:cb:ed:fd:20:40:6e:61:2f:ec:fb:02:7d:8d:29:
         f1:2f:7f:92:11:0f:98:b2:4e:69:70:9e:76:37:1c:79:39:7f:
         b9:5c:42:f6:ea:c4:f9:3a:3a:89:12:69:4e:f4:cd:dc:c2:e7:
         1b:72:e5:80:8e:2d:92:94:d6:d7:83:47:f5:4b:73:94:0e:25:
         14:13:c7:21:0f:f3:81:18:4d:d4:b5:b7:f3:85:1c:da:ac:18:
         8a:d2:3f:ed:80:0e:7a:04:83:3c:79:88:32:8a:79:52:a0:32:
         02:fc:c7:7d:8f:fb:41:f3:7d:85:c5:9e:90:6b:0f:ca:09:8a:
         74:37:36:5f:46:4d:f1:ec:0b:7f:b8:b8:25:a0:70:94:b9:63:
         25:b5:95:53:b0:32:82:9e:be:88:96:95:1d:6b:8d:26:b5:0e:
         98:3b:ba:68:cf:f9:5c:ac:e5:d6:09:86:65:81:71:5c:8d:70:
         b1:c2:53:86:6d:2f:b5:30:e1:76:23:1f:1a:21:ee:b2:5b:f0:
         7c:19:d5:0e:10:33:fa:39:42:55:c3:1e:06:6b:2d:99:1d:01:
         a0:ee:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:56 2025 by rpki-client