Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File:                     pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier:          cv9j8oPDCeTFRRH1ua7I3OhXPpiWyVuVsPtlxEYw0DE=
Subject key identifier:   94:1D:B8:26:62:D1:09:C8:AC:37:E0:CE:B9:21:F9:BE:80:7D:98:65
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer:       /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number:          54
Signing time:             Sat 29 Mar 2025 06:32:40 +0000
Manifest this update:     Sat 29 Mar 2025 06:32:40 +0000
Manifest next update:     Sat 05 Apr 2025 06:32:40 +0000
Files and hashes:         1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: 8bvKc1HFqw6YzJIaMveiWtUTSlh+50lYRmT+VcrJ5ug=)
                          2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: bRFbzj6pr/OF3ESUy9ky5waEguFBGACn3nS0+utKTXI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197724
        Validity
            Not Before: Mar 29 06:32:40 2025 GMT
            Not After : Apr  5 06:32:40 2025 GMT
        Subject: CN=67e79408-1fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:a4:76:f1:09:11:6b:a3:34:ff:2e:2b:10:
                    81:45:b6:dc:8d:13:50:7a:9f:5c:02:80:70:7f:23:
                    da:bc:35:06:11:3f:4a:aa:db:c7:33:92:5f:47:08:
                    6b:55:7b:e7:26:d3:1c:7b:20:ce:32:0c:dd:df:7a:
                    ce:9c:9a:f9:5a:3b:16:68:85:f9:a1:63:7c:52:9d:
                    dd:b0:24:ba:ff:8d:c7:89:16:19:d5:c8:80:82:28:
                    34:df:4a:8f:43:cf:13:79:81:ea:30:8a:30:02:d8:
                    27:92:46:86:f7:87:7f:0b:ac:c9:6f:4f:f4:a1:e4:
                    bc:9d:5c:2d:79:7c:e1:8e:2e:66:70:fe:77:b4:21:
                    56:2c:ba:6f:39:77:a3:b8:2c:3b:8c:04:8a:de:81:
                    0f:34:64:47:ef:88:fe:db:1c:36:a3:a7:08:8f:21:
                    49:a3:24:95:e7:8b:1b:98:65:b5:8f:c5:59:93:66:
                    ee:8e:bd:82:bd:b6:4d:17:5f:0e:06:d4:dc:29:a8:
                    84:09:95:26:55:f1:ac:a8:80:60:d3:c2:a1:cb:a9:
                    02:ee:47:c0:64:4d:a8:2d:19:05:30:f8:16:12:1b:
                    73:6d:b9:5b:d7:8f:bc:2b:f5:57:e9:2f:1e:07:c1:
                    58:b7:17:bf:d2:3f:8b:c2:1e:64:a3:87:e7:ff:1a:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1D:B8:26:62:D1:09:C8:AC:37:E0:CE:B9:21:F9:BE:80:7D:98:65
            X509v3 Authority Key Identifier:
                keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b7:8f:af:f8:fd:cb:5d:b9:cd:2b:a8:4c:3a:cf:ff:b6:21:
         32:b9:29:c2:b6:0c:29:91:ca:7b:6e:f9:e4:32:af:ff:d2:ee:
         17:d0:54:99:82:46:db:96:d3:0a:38:8b:ef:73:e5:48:19:8d:
         c6:72:e0:36:fc:80:a5:5c:f4:d6:5e:15:fb:05:fc:6a:4b:fd:
         3c:2e:bc:67:fa:15:de:c6:b4:62:c1:50:24:c6:b0:90:00:43:
         86:2b:04:2b:35:08:2b:13:23:22:bb:62:67:1d:59:ce:3b:77:
         39:a9:d0:77:87:fa:51:ea:ce:60:16:9b:9d:d8:d3:c2:2f:8a:
         8e:97:88:1b:4d:3d:6c:cd:53:40:63:0e:77:94:44:db:68:2b:
         bc:0c:48:4f:6e:3e:3e:be:f9:ac:75:82:bf:ac:b5:09:44:e4:
         0e:c4:ba:61:92:19:ce:a2:d9:b7:bd:03:3c:18:e5:23:33:0e:
         c0:d0:3d:75:1a:ae:02:b3:85:09:5d:f0:7e:f3:5e:52:31:bc:
         2f:d8:49:01:22:4b:4d:6e:ef:5d:fe:1b:2c:9a:45:49:3e:d7:
         ef:fe:30:39:02:84:4c:09:3f:d7:8f:ba:08:9f:3d:75:a8:82:
         c0:d1:0e:66:93:21:fd:5f:e7:44:c1:f0:31:90:56:39:e9:0b:
         31:16:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:39:35 2025 by rpki-client