Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
File:                     rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json)
Hash identifier:          b5tuRPO1D9SZm8N0nLfLmq9PRn8Xbt6qijlS9JzLumQ=
Subject key identifier:   BC:76:FF:8D:38:66:72:11:68:B5:30:43:6A:79:C6:80:B4:9E:FB:38
Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80
Certificate issuer:       /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
Certificate serial:       34E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
Manifest number:          349D
Signing time:             Fri 31 Jan 2025 14:43:06 +0000
Manifest this update:     Fri 31 Jan 2025 14:43:06 +0000
Manifest next update:     Fri 07 Feb 2025 14:43:06 +0000
Files and hashes:         1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: d94jeMGWtSDIkV8xhzMmWzc60/ETUkyGXRuZjGspGp4=)
                          2: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: h9F1tXbUdsyNYFPUVJCB1ist/+nNZLk15lU+6OKai0c=)
                          3: 0537EDD4E37C11EA8C217816C4F9AE02.roa (hash: SqzEVckRy0F20kGZ/i2KdXyFceQ+W0O7xzAWCq702q0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13538 (0x34e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
        Validity
            Not Before: Jan 31 14:43:06 2025 GMT
            Not After : Feb  7 14:43:06 2025 GMT
        Subject: CN=679ce17a-d56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:28:bf:7c:f3:2a:39:e4:9a:af:cf:1d:bf:
                    dc:32:7e:77:8f:33:f1:3a:03:c2:c2:47:4f:12:c4:
                    0f:8b:5c:67:b3:ae:db:d8:6c:ff:21:5d:21:e1:b6:
                    95:bd:9c:8d:36:bb:c9:ca:f6:fd:03:dc:95:5c:f1:
                    20:f0:d0:b4:da:ca:24:66:1b:00:6a:d9:07:cf:cc:
                    6a:36:14:e7:65:2f:3c:cf:a1:f1:50:76:d2:b9:98:
                    8a:1e:33:9b:b1:7a:77:aa:fa:b4:eb:0d:3f:03:47:
                    f3:67:36:f6:66:56:d7:ca:da:34:25:77:18:d6:79:
                    9e:40:a2:2b:77:a1:f2:64:7a:20:4d:b7:90:af:a2:
                    e5:bc:a5:27:e5:af:a3:db:1f:19:99:8b:02:44:fc:
                    6c:4d:d7:55:6d:6d:6d:35:32:02:b4:e1:1f:88:32:
                    1e:df:f9:38:7b:b5:a0:fe:95:ee:45:26:29:0c:1c:
                    aa:e3:63:07:d0:0a:c9:ed:ef:9e:57:01:99:f1:cc:
                    d1:0c:ca:da:6d:1f:de:08:65:12:66:d6:21:f6:9a:
                    65:ad:b2:bf:3d:ee:c6:ed:53:79:bd:ea:5a:59:57:
                    18:79:08:bf:cd:01:ea:8e:49:07:ea:f2:de:81:59:
                    a9:f1:78:23:70:d4:3e:fc:28:af:ac:c2:9b:7a:e9:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:76:FF:8D:38:66:72:11:68:B5:30:43:6A:79:C6:80:B4:9E:FB:38
            X509v3 Authority Key Identifier:
                keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:84:7d:27:a0:1c:53:2b:fd:a3:14:5f:95:d7:e5:ee:76:09:
         4b:ed:f0:2f:2e:56:98:bb:56:5b:b3:0f:39:cc:f7:ff:e3:12:
         38:3d:c6:40:9d:0f:83:17:b0:be:3e:9b:af:72:87:9f:b8:8b:
         31:30:1d:ef:59:e6:1a:a4:c9:18:13:36:ba:40:92:53:ee:35:
         23:81:30:c3:92:f8:79:62:b4:18:e9:78:ee:2d:27:c4:8b:4d:
         56:ec:e8:6a:e6:d0:ad:5c:eb:55:da:75:87:ed:07:cc:f9:99:
         92:8e:96:7b:1d:c0:93:74:99:cf:87:b9:0d:b4:f1:fa:c5:22:
         c4:a4:11:b4:0c:91:11:46:47:56:0d:ce:31:21:e8:a1:df:28:
         8a:e8:30:0b:fe:aa:3c:96:f5:9d:47:1a:16:4a:16:30:ec:e7:
         d4:9f:64:1f:05:30:65:eb:a2:76:e7:1d:c9:18:61:a5:fe:3f:
         a3:21:7e:0f:a6:68:ac:b0:91:2b:5d:f1:55:bf:fd:3a:68:ec:
         ca:54:a8:a8:7a:e4:b8:f5:f0:95:00:19:eb:8b:20:30:20:68:
         2e:d3:79:b3:fd:c0:97:f4:15:cc:65:a4:92:28:28:60:29:76:
         f5:40:53:e3:2a:74:4a:8e:84:9b:e5:b5:13:95:fc:e7:06:b8:
         b3:60:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:29 2025 by rpki-client