Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
File:                     mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json)
Hash identifier:          W836Cv3xjfatDRyoqs51pNgnZiAdt1FtY4BplKMscFI=
Subject key identifier:   52:6C:88:BB:5C:48:7A:08:48:D5:C3:49:85:62:7F:62:11:10:4A:A8
Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
Certificate issuer:       /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Certificate serial:       0521
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
Manifest number:          051C
Signing time:             Thu 30 Jan 2025 23:36:07 +0000
Manifest this update:     Thu 30 Jan 2025 23:36:06 +0000
Manifest next update:     Thu 06 Feb 2025 23:36:06 +0000
Files and hashes:         1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: 1Ycgg1MsFLQfL+LNjmPYFTmBNB6rS4r+Li3eyR686No=)
                          2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: q+L5tLTqjDOQUKLHpaKDvKoXYe9C7le5sZCMKuytaU8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
        Validity
            Not Before: Jan 30 23:36:06 2025 GMT
            Not After : Feb  6 23:36:06 2025 GMT
        Subject: CN=679c0ce7-0b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:d4:3a:03:e1:be:56:3b:60:28:b1:a7:bc:
                    26:0f:43:38:ab:68:3d:3d:27:88:e6:a3:81:5d:58:
                    96:3f:2f:af:4a:41:ba:4c:b6:dd:ca:d6:6d:34:e1:
                    b1:b3:e8:a9:6d:cb:5d:f9:41:9c:f0:71:eb:d9:e8:
                    d9:70:a6:d2:1f:a0:03:09:73:f3:28:7d:b7:ab:8b:
                    1e:5a:c5:42:11:55:32:44:ad:8d:6c:af:14:6d:6b:
                    02:23:19:3a:6d:3c:5a:5d:2f:5b:84:a7:14:54:0b:
                    97:4e:c3:e1:2e:15:cb:70:8a:f2:a5:e7:11:0e:65:
                    ec:4c:b4:51:8a:4f:15:24:58:eb:cf:bb:49:89:78:
                    db:29:f1:6d:18:25:1a:4f:53:60:40:e5:29:5e:9f:
                    8b:7b:6a:fb:c2:d2:0d:f9:a8:e3:fb:47:a5:85:01:
                    d5:3a:0a:f6:ed:80:78:23:03:fe:30:e9:79:61:7a:
                    47:b0:a9:cf:85:60:6e:f5:24:f5:07:52:78:b6:68:
                    0f:c1:43:0b:61:65:dd:78:8e:fc:a8:e7:00:fe:d4:
                    c9:22:2f:b9:2f:8e:49:28:37:b5:7b:f7:3b:65:5d:
                    e5:68:00:68:fa:1a:99:ca:b4:e3:36:9c:34:ae:9b:
                    a5:5f:4f:bf:1a:b1:b9:ff:2e:92:e8:7e:ad:6f:94:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6C:88:BB:5C:48:7A:08:48:D5:C3:49:85:62:7F:62:11:10:4A:A8
            X509v3 Authority Key Identifier:
                keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a4:7d:76:7e:7e:99:aa:66:16:b4:9b:32:45:20:3f:e7:91:
         98:f1:c1:a9:c0:f5:99:bc:e6:73:12:11:e0:5a:b9:b8:eb:3e:
         81:ef:27:72:6b:bc:46:51:a6:38:48:34:5b:c2:ae:a4:be:bd:
         43:e8:a2:4b:11:53:5e:73:21:9e:72:4e:0f:69:0f:db:27:0e:
         df:df:31:e3:64:77:d3:36:e7:db:17:e1:cb:05:72:1c:a4:a4:
         2d:bd:88:c2:69:dc:a1:65:3e:df:e2:11:1e:e3:74:ce:c6:17:
         64:1d:32:da:3f:5c:de:10:00:77:a7:79:b1:4e:cc:cc:b7:80:
         4e:52:b2:01:d5:de:45:3e:e6:97:4c:64:67:30:66:b8:39:97:
         fd:a0:e9:8c:d8:15:4d:ad:81:3d:ad:a1:32:24:4c:10:00:8a:
         3c:b2:c8:36:d5:c2:11:3b:18:4c:47:26:88:27:f7:12:9b:a3:
         70:12:e4:6a:73:61:9e:9a:e2:0b:7a:d1:f6:f3:ab:a7:65:f9:
         6e:a5:13:0b:1e:af:15:e0:27:c2:83:20:f8:07:5f:f8:14:2f:
         2d:18:bd:a8:6f:4c:3d:58:cc:71:ec:42:74:44:e8:fe:e7:f9:
         62:eb:12:9d:91:a5:a5:2a:44:b2:5a:7e:c3:4d:61:b8:b0:a0:
         a0:0b:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:48:19 2025 by rpki-client