Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
File:                     PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json)
Hash identifier:          FOgmyFSqthYHiyTm82+5ALUkMZ+JFczJdhtfoYG71sw=
Subject key identifier:   58:7D:85:78:21:19:0D:AD:C2:95:1C:25:46:9D:9B:09:48:69:D0:D5
Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
Certificate issuer:       /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
Manifest number:          3B
Signing time:             Fri 31 Jan 2025 06:35:08 +0000
Manifest this update:     Fri 31 Jan 2025 06:35:07 +0000
Manifest next update:     Fri 07 Feb 2025 06:35:07 +0000
Files and hashes:         1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: vyfRaYrB6twXfbrqG3nlEqLpnGnNuDwie5m7x4AhtP8=)
                          2: 0C2CCB529B6D11EF9DC26822C4F9AE02.roa (hash: 3dvjbuMT8Y0qb48SF6bJUwqEnOmDrnVR3qZ9bmDelg8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
        Validity
            Not Before: Jan 31 06:35:07 2025 GMT
            Not After : Feb  7 06:35:07 2025 GMT
        Subject: CN=679c6f1b-c14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:67:6e:98:69:78:ab:7f:fb:66:b1:c8:31:
                    dc:0b:d0:51:d0:4e:61:4f:ed:e0:58:eb:c7:a5:91:
                    f2:0f:0c:a2:89:f7:3e:81:ff:ff:62:8f:47:d9:ff:
                    c7:e6:75:c3:0a:a1:06:12:3c:0f:64:dd:98:59:7c:
                    f2:a3:8c:54:37:30:a6:55:bd:0f:1d:a4:d3:50:09:
                    04:e1:a6:a2:8f:69:6a:1b:42:d5:30:0c:51:c1:c9:
                    81:6b:93:ad:7c:df:5d:57:99:f1:60:04:0f:61:1d:
                    2e:cd:64:a4:fa:15:47:5d:96:06:c5:5c:b5:d9:a7:
                    9e:5d:1a:b8:67:6a:b7:65:b1:f5:59:a4:24:da:f2:
                    da:bb:e3:f1:a4:4b:3b:eb:af:7d:93:cf:1a:62:60:
                    b4:a0:fb:1f:95:2b:90:a1:a5:4c:9b:ff:06:f9:f0:
                    bb:f9:77:44:41:ea:8a:a0:01:c5:09:1a:b1:ca:63:
                    c1:6c:0a:66:f3:9b:c9:d4:58:44:be:7b:9d:9a:19:
                    78:b3:da:3c:5e:67:f4:46:19:10:0a:f1:87:5f:80:
                    e4:3f:1a:02:79:1e:27:ce:cc:ce:5a:a6:ab:fa:11:
                    12:df:f7:5b:53:bd:a8:19:a4:32:a1:e8:64:e1:bb:
                    e2:56:be:a7:59:44:8f:50:cc:75:b7:2f:a6:b1:96:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7D:85:78:21:19:0D:AD:C2:95:1C:25:46:9D:9B:09:48:69:D0:D5
            X509v3 Authority Key Identifier:
                keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cd:1a:68:87:91:eb:53:d0:b5:60:de:b8:7d:d7:78:cf:fd:
         81:50:b8:e8:17:fa:61:77:b8:e7:fe:72:20:5a:c6:2d:00:39:
         62:95:f3:9e:d9:92:9e:f2:65:89:ee:1c:1a:95:6a:2e:5a:5d:
         f5:ff:6d:f9:0f:e4:46:11:e5:17:eb:5c:30:92:eb:0d:b8:37:
         10:56:b3:35:da:66:c8:40:a5:6e:0e:95:d7:5c:22:4d:8b:9a:
         d7:00:8c:bc:df:2a:cd:3e:48:df:29:87:71:5f:b3:71:98:87:
         9a:20:f1:be:e1:bd:6b:47:f8:24:7e:e5:a5:01:5d:dc:ba:be:
         4e:68:35:73:6d:d2:ce:50:5f:f1:9e:74:86:88:af:9c:aa:94:
         80:09:25:45:5b:99:b2:ee:60:1f:4d:ba:c0:7c:1d:8a:34:51:
         7d:88:eb:2c:32:a5:e0:bb:75:8d:2f:26:a8:0a:11:bc:e8:25:
         eb:80:43:6b:95:83:6e:4c:de:32:77:b3:02:30:4e:1e:ff:fd:
         71:33:dd:e3:ca:3d:32:46:fe:88:aa:04:2c:cd:54:09:2d:cb:
         15:eb:7c:91:06:c2:60:b4:df:e6:9d:3c:a2:81:92:1b:83:1f:
         00:13:b7:21:60:91:99:85:17:3c:ca:8a:3c:e8:e3:b1:8d:44:
         85:d4:8b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:15 2025 by rpki-client