Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
File:                     _hORwLImyM6_pKKtZpauS4K_fic.mft (raw, json)
Hash identifier:          EOh1DlWloW9Sx2zXJQbHnTf+jy23DrDi/fVxJKpFUgA=
Subject key identifier:   D6:29:07:5D:7E:6C:A4:A9:66:C3:19:DB:C6:15:5C:6D:E0:BF:A9:E9
Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27
Certificate issuer:       /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
Manifest number:          0189
Signing time:             Fri 31 Jan 2025 02:50:56 +0000
Manifest this update:     Fri 31 Jan 2025 02:50:55 +0000
Manifest next update:     Fri 07 Feb 2025 02:50:55 +0000
Files and hashes:         1: _hORwLImyM6_pKKtZpauS4K_fic.crl (hash: itWc8N6FEo5ps060voQbkf+mXNn/h1dYV3GOlX+7T/Q=)
                          2: 7369922E680A11EEA25B1D1FC4F9AE02.roa (hash: fXjP05p8ued4HQ6KJnvZ7btsZDNaHLwlJqya0wuGxPU=)
                          3: 7AEB97D2A45011ED8AB8A437C4F9AE02.roa (hash: SQlJaQGpXDcZFHRgAOau+fYoi/5pe0SWyRviImDftQQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
        Validity
            Not Before: Jan 31 02:50:55 2025 GMT
            Not After : Feb  7 02:50:55 2025 GMT
        Subject: CN=679c3a8f-d983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:e8:38:4a:fe:b3:40:1e:63:11:ed:8c:3a:
                    71:8f:49:39:e6:e8:7e:d7:cc:63:ed:dc:94:19:37:
                    8f:93:d6:d7:a9:02:c1:39:68:7b:e4:3f:a4:b2:b9:
                    0c:2e:45:20:f4:63:8c:c8:8a:3c:04:97:4b:01:8b:
                    c0:a1:06:40:8a:e8:24:88:6a:98:ae:eb:da:00:a5:
                    ee:ba:b0:20:2f:e9:39:e6:cf:cb:b4:19:8d:bc:1d:
                    13:63:39:d5:39:c5:c0:55:01:c6:db:56:8c:55:9a:
                    62:6e:be:95:c2:3a:d8:4c:9d:05:6c:5c:75:1e:21:
                    73:93:4b:6d:9d:47:e1:47:c5:3f:9e:ed:c2:c0:e8:
                    4d:b7:e7:79:71:56:56:47:49:1b:3a:0b:23:f2:08:
                    4d:fb:49:59:fe:58:0c:ef:37:a8:2a:6a:ed:35:f8:
                    61:f3:f8:32:a5:4d:a4:65:ec:89:ec:63:88:49:69:
                    64:7c:69:1d:54:32:66:64:a5:e9:d5:47:09:7a:2a:
                    dd:57:90:af:cc:2b:14:22:2e:c6:ae:95:82:18:85:
                    4e:2e:fe:89:d8:b5:90:ba:bd:25:5f:dd:2c:28:39:
                    ff:38:0e:9b:19:68:d6:53:11:51:46:3f:30:7e:ef:
                    28:44:9b:14:03:51:31:10:16:ef:b1:f4:44:95:29:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:29:07:5D:7E:6C:A4:A9:66:C3:19:DB:C6:15:5C:6D:E0:BF:A9:E9
            X509v3 Authority Key Identifier:
                keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:bd:93:f5:5c:a2:38:a2:99:99:9f:e7:0d:fc:4e:47:62:71:
         eb:00:73:38:ad:43:db:71:4f:cb:2f:45:98:92:78:f3:47:c4:
         66:b2:35:3e:a6:b5:21:cd:b7:03:55:49:00:bb:bd:92:ad:8a:
         23:0e:af:2e:66:e1:88:42:27:51:8e:66:cc:68:69:22:2a:12:
         3a:ab:3b:e6:08:f9:61:8a:7e:c8:f3:7a:e6:78:6d:b8:44:70:
         c7:15:90:1c:08:b8:00:9a:73:bc:e7:d1:11:e6:ac:7a:82:bb:
         e1:ae:ca:da:1f:42:5d:60:47:ab:39:d0:44:4f:0c:ae:97:2c:
         8e:ee:15:c6:50:69:e8:f9:99:e8:e9:a5:2f:69:ab:e0:84:58:
         e8:19:4a:ec:1b:7f:0f:a1:d8:90:6c:e3:b0:17:d0:33:c9:ce:
         a1:ae:9f:4c:03:67:97:0a:ff:6d:4a:cd:b7:c1:ba:5f:62:92:
         05:56:0a:5f:17:99:98:29:7c:71:af:ea:2f:72:4f:0c:2e:b5:
         67:95:04:eb:85:c3:a5:4e:5b:be:82:11:98:6b:df:31:48:4d:
         73:23:8f:28:be:0f:12:a2:49:9c:4f:cd:01:3e:8e:ca:ca:bc:
         17:aa:a9:8a:0c:da:0a:78:f3:a6:2d:c1:41:04:76:55:61:0a:
         11:b7:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:50 2025 by rpki-client