Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft
File:                     zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft (raw, json)
Hash identifier:          XdxCPU9EcmixIfxAr7yY+7StgnR79jSn0wf86Afq778=
Subject key identifier:   67:D3:88:9E:2C:7B:47:A7:27:B6:60:9B:06:14:CB:37:D3:17:47:67
Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99
Certificate issuer:       /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft
Manifest number:          66
Signing time:             Fri 31 Jan 2025 06:05:09 +0000
Manifest this update:     Fri 31 Jan 2025 06:05:08 +0000
Manifest next update:     Fri 07 Feb 2025 06:05:08 +0000
Files and hashes:         1: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl (hash: +YS7bC5woUZadJrNG/4xr3tTI4Jz6D6KW047I9iTcpM=)
                          2: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (hash: hLvwEFk98bWRQGRyM9lagexFlMamyjjm31+1YE8+aHE=)
                          3: 178F0A124E0D11EFB25FB07FC4F9AE02.roa (hash: qhTLRhnOO7ik7RZ20f6PHZaEkopFMfPgBZc1HXBQUng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999
        Validity
            Not Before: Jan 31 06:05:08 2025 GMT
            Not After : Feb  7 06:05:08 2025 GMT
        Subject: CN=679c6815-7c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:e0:04:c5:d3:77:55:ef:48:1f:6b:4e:b5:
                    e6:aa:26:c6:92:ab:c3:a9:db:0f:95:d2:55:84:15:
                    21:96:88:56:e8:a8:8f:fb:ca:11:da:21:66:04:b6:
                    74:14:d9:05:dd:87:7b:e9:d5:5f:c4:e0:93:ce:22:
                    11:56:2b:8d:47:9f:23:16:c1:2d:b3:7d:e3:fe:d0:
                    f6:aa:62:ac:24:d3:28:5e:9a:72:e4:fe:2f:b2:1b:
                    0b:30:2c:9f:7b:e0:cd:ae:cf:77:73:2a:6c:4f:1a:
                    1f:99:45:fd:7f:eb:ba:19:37:ca:c5:4e:72:f4:9f:
                    76:13:76:8d:95:f5:d7:f8:9e:dd:7b:1f:5b:b0:24:
                    ac:59:31:fe:84:62:42:10:a7:0d:a3:ea:61:11:d7:
                    4c:66:8a:cd:2c:b7:f2:09:c4:f3:9a:0a:90:95:53:
                    9c:de:e3:9b:12:c7:bb:57:4a:21:89:08:9a:4e:52:
                    c6:30:21:d6:89:b4:3a:72:50:83:c2:77:a7:2c:cd:
                    a5:b7:a1:e6:90:d7:41:70:d5:e9:8e:7f:d8:6c:1b:
                    30:59:21:61:66:ac:cd:7a:d3:7b:89:6e:d3:f0:47:
                    af:42:b7:9e:88:aa:f4:26:aa:ea:90:84:52:43:ec:
                    80:5d:d5:cb:89:07:07:14:3a:32:0b:7f:04:b9:20:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D3:88:9E:2C:7B:47:A7:27:B6:60:9B:06:14:CB:37:D3:17:47:67
            X509v3 Authority Key Identifier:
                keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6f:91:ae:03:27:b7:df:03:84:43:98:9b:84:b6:a8:8b:5c:
         f0:00:a6:b2:49:e9:3f:1b:e3:e9:df:07:52:05:9d:d6:a0:79:
         51:0e:dc:ed:dc:0e:01:89:54:48:65:91:e2:f8:7e:6c:bd:64:
         b8:7a:14:27:69:82:a7:d6:81:ac:0d:70:f8:81:1c:c0:0b:d8:
         ca:de:47:0f:b4:d7:04:ac:1d:36:e8:d8:53:db:95:70:ba:c8:
         6a:e1:ef:3d:e5:14:90:39:92:d8:73:82:52:54:80:12:b7:f7:
         db:42:82:d8:fe:39:e7:9c:01:3c:00:09:2c:ea:9d:3d:5c:23:
         a8:56:46:53:d1:c0:fb:0f:11:c9:c5:78:c3:4a:18:9d:d7:04:
         0a:91:43:80:69:34:01:7d:09:bb:6a:0c:91:8f:74:96:49:d4:
         ec:90:e0:33:37:ff:4a:1c:27:df:7a:05:ac:4f:a6:34:fc:7d:
         3a:4f:3b:e4:f0:56:92:a0:1b:a1:a7:39:a4:16:61:c2:72:39:
         16:6d:92:f3:52:cf:9e:69:e8:20:72:8a:a9:38:cc:4f:eb:f9:
         5f:51:ee:71:87:cf:26:63:79:77:70:bd:8f:ec:b5:4f:dd:be:
         ab:2c:88:16:c1:34:af:e2:cf:4a:99:2b:94:a2:66:66:65:48:
         ef:71:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:49:03 2025 by rpki-client