Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
File:                     U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json)
Hash identifier:          elUXbXH/kybWMIZGYhADpkXRYhv0oNG8muUQsgGZx8Q=
Subject key identifier:   61:17:1A:03:C5:D2:5F:A1:D2:BF:91:32:6C:1F:14:48:E4:F4:CC:41
Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7
Certificate issuer:       /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
Manifest number:          013B
Signing time:             Fri 31 Jan 2025 01:07:47 +0000
Manifest this update:     Fri 31 Jan 2025 01:07:47 +0000
Manifest next update:     Fri 07 Feb 2025 01:07:47 +0000
Files and hashes:         1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: gdxQvmvpRyHk/jBlEepjVbKU5GKDmduUElEuxYKsnqY=)
                          2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: h1m9sLre/7LN5ad1i+1GbnT3wM3IJOvLq7MEJkLNy3c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
        Validity
            Not Before: Jan 31 01:07:47 2025 GMT
            Not After : Feb  7 01:07:47 2025 GMT
        Subject: CN=679c2263-8ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:3f:a2:ca:2a:d1:fb:e8:05:70:8a:ed:4c:
                    50:c1:e7:e4:eb:5e:4b:fb:07:10:2d:b3:32:b7:f0:
                    d3:cf:00:01:fd:a4:2f:4f:98:3f:0d:af:11:ae:70:
                    0f:54:f1:18:12:f8:f8:5c:de:5f:05:f4:b7:9c:37:
                    66:73:f0:43:db:f7:b4:f7:d2:f9:02:2e:01:64:15:
                    9b:f2:27:32:74:7e:90:3e:8b:55:39:21:9c:89:50:
                    ec:a7:56:37:dd:0d:6b:95:97:dd:01:6e:e9:32:ca:
                    75:e8:76:f9:d9:f4:ad:01:4c:58:95:67:73:47:c3:
                    ef:90:e3:22:43:15:99:cb:a5:5f:b9:d5:eb:e0:2f:
                    4b:48:5f:ca:a9:d0:cc:89:7b:0c:b1:17:d1:34:20:
                    87:f5:0b:35:52:01:1a:c7:98:69:f6:c5:02:43:24:
                    ab:e0:cb:dc:2f:48:4d:30:4f:ee:56:32:15:d8:f8:
                    a7:8c:d6:2b:0f:c1:1a:60:d3:7e:50:ad:e9:bb:3a:
                    b9:d7:0d:c6:00:38:fe:a5:5b:54:6a:b2:38:1c:33:
                    d6:43:4b:fe:13:9e:35:86:64:bb:2e:da:76:32:7e:
                    86:c4:17:88:b9:69:26:d3:ac:09:c4:19:f7:91:0a:
                    2d:4a:75:56:de:51:ee:3b:3f:c2:d8:6a:e3:0d:77:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:17:1A:03:C5:D2:5F:A1:D2:BF:91:32:6C:1F:14:48:E4:F4:CC:41
            X509v3 Authority Key Identifier:
                keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:64:2d:12:2d:20:a7:ca:d3:9e:1f:5e:b2:71:86:75:6f:18:
         1d:e0:b7:dd:f5:43:ec:8c:92:ce:6e:b0:5f:49:fd:1d:23:af:
         12:fb:57:33:cc:5c:2c:9b:9f:b4:29:3b:b0:f0:56:4d:e0:a0:
         b7:e0:96:64:be:14:19:e9:66:c0:df:b3:dc:4f:7d:61:de:5f:
         c5:77:05:be:fe:ef:54:29:f7:41:78:13:6a:aa:2e:ed:f2:57:
         e3:0d:a2:60:3b:33:d8:f7:26:50:e8:df:62:2e:b3:ed:88:18:
         7a:56:07:95:98:51:a8:7e:5f:ee:1a:c1:3d:ee:71:d9:94:c6:
         bc:0f:3d:08:82:0e:b8:8a:93:0c:d9:ff:7c:92:ad:fd:f9:a4:
         99:8b:a3:d7:c4:20:ac:6a:90:ce:bb:10:0f:b4:cb:19:09:64:
         7f:bf:9d:77:81:02:fd:51:56:d4:46:53:48:e8:6c:3a:46:17:
         a6:ff:f0:60:c3:44:18:1d:c5:2e:07:98:6d:a0:2c:bf:c6:b1:
         59:23:66:68:88:ff:e5:cb:66:5e:27:1e:02:b9:7d:21:4f:0f:
         ea:e0:a8:3d:cd:c9:32:17:b4:eb:e0:52:c2:f4:2f:70:56:65:
         7d:ef:63:56:93:09:aa:69:b9:87:0f:5b:fd:66:01:e0:51:a8:
         c3:76:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:20 2025 by rpki-client