Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
File:                     5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json)
Hash identifier:          1musL0LE3eXrrk9Y05PKGwYu2FINCGcs4AUNK0u5Dhs=
Subject key identifier:   55:14:99:7B:47:4B:9A:10:59:E3:E8:90:15:EB:BF:7B:D1:5E:69:3F
Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51
Certificate issuer:       /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
Manifest number:          019B
Signing time:             Fri 31 Jan 2025 02:50:22 +0000
Manifest this update:     Fri 31 Jan 2025 02:50:22 +0000
Manifest next update:     Fri 07 Feb 2025 02:50:22 +0000
Files and hashes:         1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: cuLL3iMpCF6JeOraNSro0kPn8CNCtzjOZDMWYwn7Vd8=)
                          2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: I6cFYaTwrscj9Do0u5LBBtA5etRJeCEnBRWA8YbVDTo=)
                          3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: 6yZMYTHYRpP2MH6PChCYijNkjUxZFdtlKAJWlJtdpuc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
        Validity
            Not Before: Jan 31 02:50:22 2025 GMT
            Not After : Feb  7 02:50:22 2025 GMT
        Subject: CN=679c3a6e-bc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:15:57:df:0f:93:91:ee:6b:4a:3f:09:af:
                    41:08:ae:e9:c4:e0:93:90:2c:d2:10:d8:d0:2f:38:
                    13:6b:91:ab:c8:66:80:4d:ff:aa:4e:04:0f:ff:5c:
                    cb:a9:c1:6f:09:17:0e:62:0d:92:0d:8d:08:4f:1c:
                    b5:53:cd:c6:5b:cd:d5:0d:62:cc:8e:54:2a:42:5d:
                    ec:7a:dc:4e:57:fd:7c:e4:37:70:3e:8a:04:48:77:
                    79:7f:98:4c:90:72:f4:54:de:99:74:b4:d3:17:fd:
                    03:4b:db:fc:ef:dd:10:52:40:74:fb:67:b0:cb:b1:
                    04:5d:45:e7:85:b6:cc:0b:30:0c:fa:68:bd:fa:1c:
                    c4:16:97:6a:c4:28:a1:1e:de:af:20:30:1a:3b:ac:
                    30:f9:47:64:33:92:49:e9:99:45:ae:c6:d5:e6:b1:
                    e3:5d:30:87:a1:81:be:af:e3:a6:59:50:e3:38:b8:
                    d4:dc:64:c6:c8:81:3d:75:38:f7:52:98:e0:e6:15:
                    d3:45:91:50:c8:be:ef:fc:ee:05:1e:c5:94:8c:65:
                    6e:3d:fe:8e:b8:5e:7e:e3:f6:21:0a:bf:6b:a0:2e:
                    33:42:a6:ca:e5:f4:88:95:8d:d1:ff:e9:f1:09:33:
                    b2:00:a8:08:26:59:3f:fd:8a:ff:4f:a8:87:55:72:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:14:99:7B:47:4B:9A:10:59:E3:E8:90:15:EB:BF:7B:D1:5E:69:3F
            X509v3 Authority Key Identifier:
                keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b3:18:24:a2:96:48:20:4f:b6:a4:c8:19:a2:eb:13:95:77:
         20:55:3e:ae:c2:d4:d3:63:ee:11:48:a4:be:c2:c5:13:07:e4:
         e8:48:b6:20:6b:0e:25:c3:16:a0:69:f5:2d:d1:cf:ed:8c:4a:
         30:2b:ce:40:c8:bb:92:c7:65:40:5f:27:98:62:10:2f:b0:01:
         b5:25:f7:53:6b:e6:88:00:01:68:3d:ad:ba:13:c6:48:3e:1f:
         b2:c2:51:f3:d1:e1:d0:fc:64:50:52:7f:2e:20:75:be:63:16:
         06:fe:81:7e:9b:d0:75:e5:c9:18:f2:53:2f:31:e5:3b:56:3c:
         0c:5a:d7:1d:23:69:9d:6e:83:73:f2:cf:31:a4:23:90:10:14:
         18:11:15:10:c2:d1:da:d5:58:a0:4c:0a:48:92:42:05:45:fe:
         f5:9b:7a:44:95:91:f4:8f:58:39:7c:49:54:89:6c:e9:f2:92:
         ec:38:cd:1b:d9:96:78:2f:b1:c2:a8:cf:77:91:1d:93:1f:a9:
         2c:88:4e:d7:46:61:5a:4f:d7:f5:5e:32:1b:d1:81:7e:e0:f3:
         bc:28:d8:d1:24:4d:b5:25:84:23:65:a9:b7:e7:a0:bc:23:d2:
         56:a5:3f:75:3c:8e:4d:94:d8:79:f0:c7:1f:53:cd:61:1b:10:
         a5:e8:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:02 2025 by rpki-client