Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
File:                     5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json)
Hash identifier:          f753v88nLhg+FGM3F317bQFa5gRJiZrQfn7CfDnFZOc=
Subject key identifier:   EE:AC:F2:4B:1D:9D:D6:46:C7:4E:48:43:42:C3:FD:BC:A4:D2:C5:E9
Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93
Certificate issuer:       /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
Manifest number:          E4
Signing time:             Fri 31 Jan 2025 04:34:19 +0000
Manifest this update:     Fri 31 Jan 2025 04:34:18 +0000
Manifest next update:     Fri 07 Feb 2025 04:34:18 +0000
Files and hashes:         1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: a2sE2ODdl1Y55oRCSSRs9IaaCtY/lGfX5zoZsGrU8Hg=)
                          2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: KgQSXjT0/AcvVs+PHWWF/UPrCiIk9MVvntWwSCiQouc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
        Validity
            Not Before: Jan 31 04:34:18 2025 GMT
            Not After : Feb  7 04:34:18 2025 GMT
        Subject: CN=679c52ca-5329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:3d:07:10:35:f5:37:19:c0:51:67:42:8f:
                    76:5a:90:e3:7c:77:f8:ec:60:a4:32:5f:f2:21:a2:
                    5c:5d:5a:06:79:9d:28:bd:e3:7d:ce:51:ef:03:d4:
                    c8:ce:0a:b2:a7:13:14:0e:83:c8:c3:d6:7d:19:94:
                    29:3e:a4:86:dd:ed:75:33:46:95:91:de:1a:63:d4:
                    db:8b:48:48:c9:c9:c1:46:eb:1b:fc:01:34:74:a5:
                    fe:2d:3e:c2:a2:fc:2f:82:fe:61:86:ce:e0:1d:da:
                    83:7c:10:12:18:cf:2f:78:95:7d:25:fc:27:2c:bc:
                    b0:18:2f:9f:6f:b3:03:52:a5:44:52:17:9e:b1:d9:
                    a9:4e:cc:c4:e4:86:e3:53:9b:ff:58:71:b1:73:d3:
                    ff:44:05:e4:cd:2a:54:29:eb:03:f4:bd:3b:d2:11:
                    f8:e1:09:f5:37:a4:7c:34:43:75:d7:b8:c7:6d:a5:
                    14:55:40:16:d3:54:c7:df:c1:29:5a:a6:43:e8:bb:
                    c4:ce:7e:9c:52:0d:fa:f4:8c:bd:26:b7:d7:50:19:
                    59:62:a8:12:f2:a6:f5:9b:21:52:9d:d7:34:65:7f:
                    cf:ad:9f:12:d3:20:cf:2b:a8:44:eb:6f:90:b5:74:
                    12:2e:46:39:dd:32:1a:d1:08:36:9d:48:a8:d4:36:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AC:F2:4B:1D:9D:D6:46:C7:4E:48:43:42:C3:FD:BC:A4:D2:C5:E9
            X509v3 Authority Key Identifier:
                keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:27:a3:73:75:78:9a:61:3a:6e:70:81:a8:ed:29:23:0f:
         b8:58:25:4b:80:37:b4:b6:60:54:ae:72:7f:ef:83:f7:cf:c7:
         2b:45:5f:8c:cb:2f:dc:52:6a:d7:ed:ac:52:58:d1:ef:ab:1f:
         13:20:d6:53:dd:a4:57:84:2e:15:d3:5f:94:fa:f3:48:77:ee:
         8e:d9:8a:86:05:03:ab:66:94:c6:04:c8:26:4c:a5:7d:a7:6b:
         ae:7b:de:ed:e7:50:12:a9:be:46:ea:34:c4:15:29:08:47:7e:
         b6:79:53:53:83:3d:8c:30:ee:05:70:58:93:14:32:1c:7f:80:
         9e:82:6a:0d:bc:fb:2f:9f:b3:ed:f2:00:8d:dd:56:56:9f:43:
         c6:7a:0b:a6:6b:77:0c:8a:7d:70:5d:e6:46:64:ff:f7:12:b3:
         fa:08:a8:9f:47:49:5d:51:53:4a:44:a8:e6:c9:82:0e:4b:68:
         89:ec:1b:8f:61:7e:41:27:23:13:af:9f:26:2b:20:d2:3e:97:
         e0:16:08:97:a3:57:d2:41:a0:f4:39:b0:26:35:8b:43:3e:39:
         b3:5c:8d:62:2d:77:28:90:e2:8a:7e:8f:b1:e3:15:89:13:a2:
         ad:39:d6:de:79:a1:5b:46:cc:9e:66:8a:13:71:f8:9d:67:89:
         87:7a:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:06 2025 by rpki-client