Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File:                     n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier:          aa1lsIB9MCsRhFkfczGCYn46aRUJ+j6+LzfaCHuZrWA=
Subject key identifier:   BE:48:6E:F2:E7:E6:23:E6:C2:82:27:63:53:AF:2C:04:57:24:D4:58
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer:       /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number:          7A
Signing time:             Fri 31 Jan 2025 05:48:29 +0000
Manifest this update:     Fri 31 Jan 2025 05:48:29 +0000
Manifest next update:     Fri 07 Feb 2025 05:48:29 +0000
Files and hashes:         1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: 6nuDo+Y71PhxXs+Bs+yOmLzLx4vszAtuxVE7+Xi6Tm0=)
                          2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=)
                          3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
        Validity
            Not Before: Jan 31 05:48:29 2025 GMT
            Not After : Feb  7 05:48:29 2025 GMT
        Subject: CN=679c642d-101c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:84:37:77:04:9c:cb:58:c5:a2:9c:5f:d9:
                    a6:c0:9b:b3:d1:0d:6e:04:44:8c:ab:8f:0e:a4:a1:
                    78:71:1d:12:c1:a7:5c:5e:b1:16:16:0e:80:6d:d0:
                    e3:04:38:e1:bb:11:12:d9:45:79:e6:2f:46:6f:b6:
                    1b:9b:3f:dd:4c:35:6c:32:6d:b4:14:7b:04:a9:1f:
                    21:da:e2:ef:ff:43:d1:36:27:42:b8:a3:d5:7c:f3:
                    bc:85:60:d9:07:31:8e:2d:29:eb:cd:10:e3:5f:05:
                    e2:34:e5:8a:92:26:41:0f:92:3e:15:ac:d5:1d:01:
                    50:3b:68:73:82:99:bd:cd:bd:8b:da:dd:93:79:2a:
                    44:18:28:36:08:fd:cd:b4:21:20:b5:b6:14:30:74:
                    d9:08:ad:13:1a:39:ec:21:f1:a2:69:ca:f8:1c:28:
                    e5:70:a3:2f:40:03:eb:d9:b8:a8:50:57:a2:c1:03:
                    fb:c8:c1:f1:c2:76:b5:d9:e2:49:31:3e:fd:c6:0b:
                    d6:cd:2f:7b:67:4e:72:fe:61:d3:bb:1b:08:24:7c:
                    5e:c1:0d:f4:b1:18:b4:c2:4e:58:05:db:1c:5c:4f:
                    24:af:38:c2:1c:90:48:e3:8a:1c:a7:a5:6f:3a:e3:
                    70:5c:3b:e8:18:30:01:48:0d:9d:74:42:e6:e5:b7:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:48:6E:F2:E7:E6:23:E6:C2:82:27:63:53:AF:2C:04:57:24:D4:58
            X509v3 Authority Key Identifier:
                keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fc:0c:76:51:0a:3a:4d:13:d3:1d:59:a5:da:05:bf:c5:1e:
         07:f9:2c:a5:c6:5a:c9:d0:64:b2:ec:c9:56:ee:17:fc:57:11:
         a8:c8:68:c1:75:b7:2e:90:b1:07:82:35:30:6b:df:2b:dd:a3:
         65:42:4c:78:6e:68:50:ff:07:e2:5a:dc:de:6d:01:04:ac:e6:
         40:76:4e:03:8a:d0:b5:a0:6d:08:55:1b:35:e9:e7:94:de:12:
         2e:12:5b:28:84:2c:6d:a4:db:a3:ba:7e:29:f8:0d:23:17:5a:
         8d:83:6e:84:d1:8b:80:df:a1:d7:e8:e1:19:9d:43:92:7d:84:
         a8:5f:af:d5:14:74:86:7d:28:0e:ab:d2:aa:19:f8:aa:16:2b:
         f0:05:5a:f7:50:05:4e:0a:bc:5c:1b:28:d1:f9:9c:79:29:06:
         ca:7c:fa:4e:33:f1:c2:12:7c:64:25:32:43:8f:0b:f5:eb:64:
         34:3c:e1:7c:e1:a4:84:13:10:64:49:6b:c4:b9:a2:e4:95:0e:
         91:8f:b8:bb:41:8b:80:42:d3:45:03:4c:3a:00:ac:81:7f:c1:
         37:df:4b:a8:51:67:2c:77:17:73:ff:5c:ad:af:48:01:cf:ab:
         29:69:43:71:38:fa:55:b0:43:dd:c7:a4:5d:6e:42:84:5d:e2:
         b9:42:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:47:28 2025 by rpki-client