Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
File:                     PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json)
Hash identifier:          fuE+kFEBCuXt3hUo/nyRZ0PDz1BunnkSVMMN00AA5RQ=
Subject key identifier:   80:1E:08:BB:FA:25:DD:15:69:80:F2:7B:53:00:85:60:AF:35:DF:B0
Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Certificate issuer:       /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
Manifest number:          E6
Signing time:             Fri 31 Jan 2025 04:32:33 +0000
Manifest this update:     Fri 31 Jan 2025 04:32:32 +0000
Manifest next update:     Fri 07 Feb 2025 04:32:32 +0000
Files and hashes:         1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: 3+998ibHZu0HX9WtppezkyidrHoqZ+dP8JfYSBAik2s=)
                          2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: VY07hPoAnZ6HhFnmDGOrse/S2/32FKp0YWgAY+x8IqE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
        Validity
            Not Before: Jan 31 04:32:32 2025 GMT
            Not After : Feb  7 04:32:32 2025 GMT
        Subject: CN=679c5260-d099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:29:ff:99:1d:7b:7a:5a:44:e2:9b:6b:9a:
                    34:24:08:be:14:40:cc:54:fb:11:7f:98:9c:6a:df:
                    88:1f:f9:8e:92:ef:a6:df:4e:a5:6e:43:95:ba:52:
                    a4:09:ca:9a:25:31:c6:d4:86:38:69:9c:42:d1:88:
                    dd:f8:a3:49:7c:9b:c2:d9:75:e1:91:86:4a:20:3b:
                    68:32:42:e7:50:24:61:94:ea:fb:62:d6:26:b2:b8:
                    55:48:99:43:c8:e3:4e:d3:f1:ee:72:eb:85:0b:5d:
                    73:23:f4:1e:e3:48:a7:de:07:fd:d6:46:b0:90:4e:
                    3d:3f:07:20:cd:84:72:38:96:1a:c1:f1:7f:44:83:
                    52:3c:64:3d:b8:5c:39:ea:62:f6:3f:49:67:88:99:
                    b2:b1:d9:06:d8:ce:65:f6:21:61:f8:b1:77:ab:66:
                    eb:e9:36:fd:43:7a:bb:90:9f:bb:e3:5b:3b:76:92:
                    26:a1:2b:c7:8a:ab:b8:90:11:f3:ec:66:d3:99:e2:
                    24:50:f0:66:b3:92:8e:63:0e:b0:49:65:56:78:c0:
                    60:e9:10:b2:d0:7d:0b:0d:47:39:37:de:8f:1c:3c:
                    3c:0f:50:5f:10:9b:c6:7e:d3:39:34:65:82:79:97:
                    ba:60:09:ce:de:f3:78:0b:fd:fd:70:be:1e:5e:3c:
                    e3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:08:BB:FA:25:DD:15:69:80:F2:7B:53:00:85:60:AF:35:DF:B0
            X509v3 Authority Key Identifier:
                keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:03:52:72:3f:3a:c7:47:ac:96:82:10:67:cf:4a:87:c7:
         00:37:c3:9b:fe:5e:8f:31:69:15:9c:de:2c:54:12:1c:d9:72:
         49:09:dd:95:d9:a4:a7:d5:8c:5c:4c:c8:62:5f:a9:a6:c4:dd:
         08:de:4c:36:ca:8d:67:de:40:95:92:a9:b0:2a:1b:6c:92:82:
         44:3a:67:db:42:d8:bd:69:be:32:67:a3:6f:83:ca:df:c9:9f:
         57:76:f4:af:8e:ab:2b:a1:24:fd:12:f7:9e:d9:db:e0:3c:0b:
         7a:bb:34:83:31:84:34:90:6d:ec:57:5b:e9:37:76:0d:a9:43:
         bd:e7:04:b3:70:b5:c4:27:28:cb:8c:b3:63:9b:6b:99:f1:f8:
         b5:68:ff:43:a8:44:35:e9:14:e0:1a:dd:1d:ba:20:00:2e:1a:
         06:0d:1a:f7:fa:f3:bc:92:a9:3e:57:43:86:82:45:aa:88:9a:
         18:33:a3:a1:0f:8a:61:52:9d:e6:6d:4d:74:b8:29:02:f6:d9:
         fa:d1:21:ca:3e:6d:d9:62:6d:a5:6e:1e:c5:b6:1f:89:35:25:
         03:b7:23:32:7e:1c:95:02:3f:3b:3f:bc:05:d8:f4:00:21:00:
         34:6d:9b:63:aa:f1:da:f6:5a:65:e1:c1:03:d1:a0:ce:65:2b:
         59:21:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:17 2025 by rpki-client