Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
File:                     J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json)
Hash identifier:          5a1Se835n1d2ocSrCT32oD2ggaVVBSe642QLm47UFEg=
Subject key identifier:   20:71:34:33:6D:D9:8F:D8:B3:72:5D:52:98:A2:1B:04:F8:85:1C:50
Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
Certificate issuer:       /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Certificate serial:       1D48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
Manifest number:          1D40
Signing time:             Fri 31 Jan 2025 16:08:44 +0000
Manifest this update:     Fri 31 Jan 2025 16:08:43 +0000
Manifest next update:     Fri 07 Feb 2025 16:08:43 +0000
Files and hashes:         1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: kFN9p2Pu2eDY59PizkI6MuLIHkogfystxVzGPE2G3R4=)
                          2: A17F07705FA311EAB1BB612CC4F9AE02.roa (hash: X5h8vQiP6tB103ZWi1RDruZWJP5MBROBXJX+od9NULg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7496 (0x1d48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
        Validity
            Not Before: Jan 31 16:08:43 2025 GMT
            Not After : Feb  7 16:08:43 2025 GMT
        Subject: CN=679cf58b-e238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:b7:5e:5f:d4:6a:c7:f2:0c:eb:17:3d:bc:
                    16:92:f0:df:59:ec:ad:42:78:93:80:02:ba:2b:64:
                    02:99:e6:79:72:69:b7:d2:47:f9:75:4e:e0:f8:a9:
                    d5:ef:1e:18:5d:88:2a:43:29:71:3c:68:71:d1:1f:
                    5f:61:c3:a9:3b:98:d9:82:3d:32:3b:81:2d:bb:78:
                    ce:46:c1:ab:4c:30:ab:eb:71:b1:a0:ec:c5:94:84:
                    75:58:ea:ca:78:f9:38:dc:21:1b:50:31:b8:a3:75:
                    44:8e:9c:6c:b8:4c:2b:fb:1b:5a:f5:74:6a:2c:0f:
                    28:58:fe:69:c0:b3:96:77:8d:e4:3f:07:bb:76:df:
                    b8:8b:dd:27:ea:17:5c:b4:81:38:d2:89:9c:d2:79:
                    73:96:5d:5d:2a:c8:35:46:92:59:83:05:e5:13:ca:
                    ca:ee:a4:6c:2a:5f:35:7e:1d:9e:02:88:a6:e0:5b:
                    16:3b:f1:cb:30:6e:16:e0:85:16:eb:83:56:dd:1b:
                    11:32:55:4d:bf:24:74:30:10:2f:f4:59:5f:a3:c3:
                    f6:c9:a1:3f:e0:97:c4:47:4c:d3:97:ac:1f:d9:f5:
                    ec:52:5a:71:57:7e:44:97:ec:ff:8b:cb:50:ad:be:
                    4b:c9:f2:44:5b:2d:4a:69:c0:07:f2:3f:96:ef:a8:
                    8a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:71:34:33:6D:D9:8F:D8:B3:72:5D:52:98:A2:1B:04:F8:85:1C:50
            X509v3 Authority Key Identifier:
                keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ae:80:4a:f2:c8:8f:6c:cb:ef:50:04:ad:f7:9c:a3:4f:28:
         b1:4e:89:9c:7b:db:60:a1:35:38:ba:27:32:70:52:ef:07:fb:
         87:eb:78:0a:04:67:3c:f7:61:b9:d0:a9:95:96:27:4c:46:57:
         4e:46:c7:1b:7b:af:c4:bf:b3:ea:f3:10:f2:3e:12:c1:ea:a6:
         6f:b7:dd:3e:fe:ab:13:6a:f8:4c:16:3e:a0:9e:46:e5:66:84:
         3b:c3:f6:ad:26:bf:1d:25:95:0e:a9:f9:a1:4b:5f:01:4b:5f:
         c3:6e:1a:ba:cb:d0:2c:0a:25:fc:09:04:2e:3b:d3:c3:ba:5d:
         41:73:7d:3e:b2:c0:39:4b:65:4c:4f:00:4b:8e:52:ca:b3:d8:
         cf:ec:28:9d:f7:7c:5d:5c:d0:55:14:3c:08:79:aa:e9:3b:ad:
         c0:f8:24:df:b5:e6:9c:c4:ed:e6:e8:28:b7:6c:17:07:6c:6b:
         81:e4:93:6f:d0:54:a8:f7:95:10:96:90:97:86:c7:ab:d8:43:
         a9:7e:76:7b:ef:59:f5:a0:ea:75:3c:0e:b2:1c:86:1d:ec:06:
         d6:b6:94:19:6e:05:28:7c:38:51:af:db:76:a8:03:50:92:e5:
         14:80:77:01:b7:32:bc:8f:f9:53:98:96:06:80:e7:9f:a4:f7:
         49:b5:21:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:18 2025 by rpki-client