Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          QSE5FwI/ejmlRdq06DqNXxYF9HfTHO3YU1b1FwmvBNk=
Subject key identifier:   51:36:E9:3D:91:D2:DA:AA:57:38:27:C8:01:25:4F:DC:69:EB:17:DC
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          F5
Signing time:             Sat 29 Mar 2025 04:59:45 +0000
Manifest this update:     Sat 29 Mar 2025 04:59:44 +0000
Manifest next update:     Sat 05 Apr 2025 04:59:44 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: 7YOOEOGxpBiRcIsIdq3QAq6qqbxrW5bSHkYhjnxoE2E=)
                          2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VGbwSs+xYuuT82QPTEDjBRASIfWEGELF9LE6WDBK6Cw=)
                          3: 467B9370E1B311EE9D77BF36C4F9AE02.roa (hash: QqVMlI0c0eMujNYZA/CTuASVldBwi4qXuRz+B+meHWk=)
                          4: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=)
                          5: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=)
                          6: E2E44CFAE53311EFAE86E460C4F9AE02.roa (hash: zaV2Oty1jL2/c4Uzu5/P7WaAjSXG8VvApwgNyQrGMos=)
                          7: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=)
                          8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I=)
                          9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: xaEZeRSS7SPLQpFTKRrqHdI+Z44FtJElJm/n+VPX6m4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F
        Validity
            Not Before: Mar 29 04:59:44 2025 GMT
            Not After : Apr  5 04:59:44 2025 GMT
        Subject: CN=67e77e40-c6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:ce:05:b5:0f:56:b4:62:8a:ed:57:c2:4b:
                    7b:45:bd:ad:d7:15:8f:b9:09:b2:a9:d5:72:45:01:
                    be:a6:1d:e6:2e:31:d8:71:48:16:b8:44:03:17:ff:
                    9e:77:5c:73:6a:55:c5:db:b6:34:e0:53:30:2f:75:
                    50:f4:8e:09:22:7f:a7:73:96:a6:78:cf:85:ea:35:
                    23:ed:d2:5f:41:51:f5:39:41:4e:c2:5b:3e:05:b4:
                    81:6e:ef:34:58:fb:65:67:55:63:7c:6b:74:9e:19:
                    26:64:c4:04:1b:66:41:12:f6:d8:68:f9:6d:e5:e9:
                    f8:fe:82:27:2f:00:20:ed:be:94:5a:99:07:07:4b:
                    19:7c:77:ba:88:c3:bd:29:71:bb:f1:f5:70:c2:43:
                    dc:20:fd:fe:46:67:9f:e1:09:27:89:87:db:0b:29:
                    37:f7:5d:a8:80:34:e1:22:24:46:99:bf:8b:ed:a9:
                    0e:5b:47:e5:ac:4e:14:60:14:d4:19:2a:32:96:d2:
                    08:ac:99:f6:3a:99:19:20:86:26:76:89:db:de:f6:
                    27:00:f4:15:21:38:1b:40:be:29:cb:b6:70:f7:70:
                    3a:8e:a9:67:b6:08:a7:27:1e:64:03:c1:1f:bc:cb:
                    dd:21:43:7b:f0:59:21:74:bc:35:1a:e6:25:a1:26:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:36:E9:3D:91:D2:DA:AA:57:38:27:C8:01:25:4F:DC:69:EB:17:DC
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a2:69:cc:d4:65:e8:29:31:41:98:58:96:42:59:88:50:22:
         ae:f4:98:8e:0f:3c:2d:91:31:99:14:d5:d3:d2:05:d3:53:41:
         6e:5b:67:98:39:57:1d:35:6f:0d:06:7a:24:60:43:b9:9b:a2:
         e8:77:ee:9d:73:70:ad:fe:ba:86:b5:44:2d:0f:fe:11:dd:49:
         45:75:70:77:84:5a:2f:2b:33:10:68:df:88:ef:e5:98:71:5b:
         df:bd:99:83:87:6f:19:04:98:90:51:c6:5f:ed:00:65:0b:dc:
         e7:6b:98:80:ac:43:c2:c8:84:29:88:20:c0:bc:d4:59:85:45:
         65:4f:76:f1:d2:57:42:e1:39:24:cf:d2:79:b9:c6:9d:82:68:
         9f:e3:c1:77:9c:68:b0:b2:50:87:54:4e:fe:4a:9a:c9:1b:39:
         e0:99:fd:b3:8c:79:31:12:80:d5:46:a7:68:16:16:0f:bb:c2:
         74:e8:11:fb:ee:71:7c:4d:55:88:2c:a7:d3:15:55:8a:8a:18:
         ff:b8:16:84:70:ef:b6:f4:84:f6:67:62:0f:e6:43:49:ab:0f:
         d6:ab:20:07:c2:83:27:9e:07:a8:63:1a:93:0a:1b:25:4f:06:
         61:4e:7d:2f:74:1b:ad:c1:38:26:bb:30:a6:4f:7b:0d:6f:0b:
         ff:1c:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:55 2025 by rpki-client