Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File:                     Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier:          pbXahKAR1eAIpipK50h7SLuONowvKcJW0Oayy/OnAVg=
Subject key identifier:   A1:3F:1C:28:B1:F9:E5:E5:3D:E4:7A:FE:70:80:28:D5:B8:41:16:7E
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       3479
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number:          346C
Signing time:             Fri 28 Mar 2025 15:14:59 +0000
Manifest this update:     Fri 28 Mar 2025 15:14:58 +0000
Manifest next update:     Fri 04 Apr 2025 15:14:58 +0000
Files and hashes:         1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: U4wJ6vN9lmBVon1PHkBtNQ3CUao4RTEYKjm7tYC6oTc=)
                          2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: u3o7AHzkAWjpm//p/0D10Rom5wmEBlx/qRmPwbhLS5Y=)
                          3: E73006AA682811EB8D635520C4F9AE02.roa (hash: /iYEOgQAhfI0KK0K51Ux9lFp8lKBTgd9K9F6YiH5y0o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13433 (0x3479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24
        Validity
            Not Before: Mar 28 15:14:58 2025 GMT
            Not After : Apr  4 15:14:58 2025 GMT
        Subject: CN=67e6bcf3-8b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:c5:88:e1:ca:6a:1f:d0:08:b2:2f:31:1b:
                    c4:b5:22:f7:f8:a9:6a:36:6f:c4:ab:8f:a4:2e:0b:
                    be:21:e0:04:8e:2f:01:7a:d8:13:f0:88:3a:11:46:
                    0d:5d:7c:02:04:80:ac:72:5c:f4:9e:e3:d0:07:3c:
                    b4:96:9a:b5:e6:9b:b0:6c:45:e4:ec:04:a3:7b:4a:
                    af:9a:dc:1a:38:41:26:64:6f:99:28:1f:9c:ba:fd:
                    1b:1d:4f:8b:b4:f5:d4:4e:0a:2e:0b:e0:20:2e:81:
                    05:9a:d8:9c:7b:37:d4:87:15:e9:ed:6b:c6:10:96:
                    b1:0f:3c:1e:a0:01:88:e3:6e:f1:80:d2:4f:92:1a:
                    23:3c:17:00:0c:b1:c8:f6:db:59:5a:f4:9b:ec:1d:
                    e7:27:36:8f:90:88:80:25:40:47:06:7f:c5:15:9f:
                    91:3e:a1:57:51:a2:04:1e:48:33:ad:0e:ed:b3:32:
                    20:a5:d3:20:68:7e:b5:3a:7c:70:6b:9d:d4:aa:cf:
                    9c:44:de:e0:d4:2f:bb:07:44:37:4f:32:33:5c:ec:
                    3e:99:3f:3c:6f:b8:9b:85:9b:12:fc:30:27:9b:0d:
                    71:40:4a:be:53:e2:21:ed:14:31:38:3b:8d:e5:95:
                    44:28:2b:b9:43:5b:ac:76:47:d6:a8:bd:0a:74:e4:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3F:1C:28:B1:F9:E5:E5:3D:E4:7A:FE:70:80:28:D5:B8:41:16:7E
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c9:3c:6c:75:df:13:75:02:38:fe:79:69:dc:7c:66:17:c3:
         2a:66:d3:18:26:0a:a4:84:32:17:fd:95:8d:4c:4b:5e:f0:44:
         64:0e:40:24:9c:da:9d:51:d1:cf:2f:25:07:c3:97:6a:3b:95:
         18:c5:f2:35:c3:4d:95:a8:7c:7f:c5:e5:85:85:9a:01:7e:fc:
         cb:4e:9d:00:44:19:ff:c2:2d:dc:54:4c:d4:f1:f3:eb:24:41:
         2a:b1:c3:32:ba:24:d2:b4:49:84:d3:db:3f:81:9a:f5:93:67:
         91:d4:cf:cd:b4:d6:1b:72:93:b0:0a:1b:5a:17:3a:72:71:9d:
         ff:f3:d8:8f:81:fa:b1:8b:0a:38:b1:fb:6f:c2:33:d1:16:b2:
         c4:a0:88:c0:d2:b4:79:3a:f4:84:49:8c:d3:c3:e6:93:77:7f:
         ee:05:f4:c4:62:e3:dc:11:c8:8d:0b:91:da:08:24:20:05:e9:
         d7:68:02:54:78:4c:fc:32:64:78:b7:31:94:9d:b5:b1:6e:35:
         22:18:88:88:07:d6:63:ac:5a:e3:5b:1c:4a:59:d1:ef:f0:ae:
         35:b9:a7:c3:05:75:04:5c:f8:5a:e0:9b:4a:07:f1:52:e0:73:
         12:8d:98:0f:70:5d:6f:22:13:cc:c0:05:02:20:f9:a6:c2:68:
         a4:9d:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:28:01 2025 by rpki-client