Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
File:                     NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json)
Hash identifier:          BIaF8FXS2MgRd3XaNxouAw37RPXeb2msOCo51DFZlbs=
Subject key identifier:   D0:6C:17:90:08:3E:26:EA:19:21:06:87:3D:95:52:FD:34:3B:05:B8
Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E
Certificate issuer:       /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
Certificate serial:       0A28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
Manifest number:          0A21
Signing time:             Thu 30 Jan 2025 19:52:50 +0000
Manifest this update:     Thu 30 Jan 2025 19:52:49 +0000
Manifest next update:     Thu 06 Feb 2025 19:52:49 +0000
Files and hashes:         1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: rrDnS+0neIHqL/fF48wWbL04OERWbTNAUkur/biyyLA=)
                          2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2600 (0xa28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
        Validity
            Not Before: Jan 30 19:52:49 2025 GMT
            Not After : Feb  6 19:52:49 2025 GMT
        Subject: CN=679bd891-b70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:da:d8:ad:77:46:59:a6:34:66:87:db:2b:
                    59:eb:d1:ec:da:a1:95:58:23:36:2b:4a:5c:57:f6:
                    8d:1f:24:91:5b:37:ba:84:6f:f3:c8:70:f3:52:b0:
                    9d:c0:d2:61:46:fa:c0:7e:77:55:51:f9:bf:a1:d2:
                    7d:b0:7d:78:78:45:f4:5a:13:00:4a:c4:60:b2:e3:
                    c2:a9:2d:1a:06:24:fa:84:09:ec:23:2b:f9:ec:ff:
                    15:f6:03:de:56:95:c0:94:d2:ef:ef:67:ab:ba:8b:
                    59:56:97:24:cf:e5:85:66:fd:17:e7:f3:7c:97:ba:
                    c2:b7:72:b7:01:0e:62:d0:b0:5e:f8:a3:42:b4:0c:
                    1e:bf:ff:84:bc:60:54:9f:f4:08:b9:68:58:e0:05:
                    85:bc:56:c0:a8:ba:b2:d7:bd:37:ea:cc:98:45:8a:
                    94:22:02:68:0f:5f:11:40:aa:b7:80:ee:7b:40:7e:
                    41:40:c6:3f:5f:c9:d5:da:fa:86:9f:b8:ba:52:21:
                    b2:aa:90:94:f0:f0:0a:83:24:24:c8:a6:52:ad:19:
                    b9:b4:3e:20:d3:c8:6f:ce:1e:97:86:6e:66:30:86:
                    4b:00:86:08:7a:51:94:b9:f9:ea:b0:3c:d8:9a:82:
                    e7:c8:43:e1:50:b6:d6:16:88:e7:c7:e4:12:8f:0c:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6C:17:90:08:3E:26:EA:19:21:06:87:3D:95:52:FD:34:3B:05:B8
            X509v3 Authority Key Identifier:
                keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:bf:53:26:27:97:fc:d5:35:5e:bd:15:7a:b5:d4:62:60:d0:
         2d:4e:3b:17:59:ad:0c:08:99:78:05:58:20:3e:ad:41:25:ed:
         4e:1f:b5:69:09:eb:26:09:f0:27:6e:a0:16:f4:1e:33:30:60:
         1d:a1:da:be:58:0b:27:80:5f:56:ad:ee:43:58:06:32:8f:b6:
         98:dc:2f:15:aa:4a:52:34:4c:db:70:5f:35:12:75:cd:45:6b:
         73:60:5d:4f:92:c1:62:cf:2c:53:05:1c:ea:fc:37:e9:7c:10:
         c9:ab:c7:f6:29:1a:49:e0:fa:c2:1d:e8:df:94:f5:80:ce:06:
         ec:91:9a:7e:1d:fd:02:b9:23:ad:5b:f5:49:dd:14:17:c6:bf:
         24:0e:b0:94:a3:82:d4:62:ae:bc:39:5b:02:f4:c8:4a:e6:e6:
         40:11:3d:28:d7:12:17:46:ed:7a:db:3b:4e:a0:58:db:cf:e1:
         96:ec:fe:e3:af:70:18:4d:f5:5e:ea:06:7f:1a:49:19:f2:05:
         f4:ba:88:34:bf:c4:c3:80:5b:af:02:ed:c9:ea:3c:79:9d:45:
         76:90:9d:4b:05:93:5a:d0:6d:37:43:ec:04:38:73:8e:0c:99:
         e2:40:68:9b:11:5a:a5:b0:fc:28:20:14:43:f7:d4:d9:7b:ff:
         a8:81:a2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:20 2025 by rpki-client