Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File:                     T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier:          +LxWtZ7f6yzAkkURCOy/BlLUggim56BQk0Dy1F2Zys4=
Subject key identifier:   76:6C:A1:D6:C2:AB:47:54:B2:29:75:86:AD:B4:EA:B2:5B:E1:BD:7F
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       035B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number:          034C
Signing time:             Fri 31 Jan 2025 01:06:57 +0000
Manifest this update:     Fri 31 Jan 2025 01:06:57 +0000
Manifest next update:     Fri 07 Feb 2025 01:06:57 +0000
Files and hashes:         1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: j4P1VNjx1UbR2jKYm+cCw6NF+FiUELocx1TRR6BNHzY=)
                          2: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: xWMMfEWphw+jGw6vFyTgUW/C6T4JCFAjmX3tY8qjIQU=)
                          3: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: q9Ub/O/CxWNZ+a3hm7Iv+ArFH+XEypUPU6PVAyD6z+U=)
                          4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: JV8w5HTbgBjA5P018WfQWq636lJGXmUnJAVnuy5z5CQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859 (0x35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
        Validity
            Not Before: Jan 31 01:06:57 2025 GMT
            Not After : Feb  7 01:06:57 2025 GMT
        Subject: CN=679c2231-8cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:13:27:2a:8b:27:6e:92:9f:e7:2d:52:ed:
                    d2:a9:0e:54:fd:87:23:9a:02:0f:fd:95:9b:f1:92:
                    7a:5c:c0:13:ee:52:3c:6c:c4:37:a1:4a:da:e3:a4:
                    c3:dd:b4:49:af:a5:ad:de:0f:78:f5:7b:5e:d3:86:
                    a4:67:24:c2:73:14:77:74:a2:05:fb:34:a4:8f:db:
                    41:02:be:39:1a:6e:fd:a3:ee:9c:f8:93:7f:f9:70:
                    f6:07:81:fb:cd:f6:ec:da:97:61:c2:ad:0f:66:65:
                    d9:d2:fe:12:61:56:68:1c:28:08:d2:0a:f1:07:e0:
                    1a:2a:9e:ec:20:b3:09:7b:3e:95:bb:1c:9e:d1:57:
                    91:dd:5c:f0:dd:f5:3b:00:d9:76:9e:b3:df:d4:b1:
                    ba:76:13:fb:36:33:a2:f5:2b:f8:38:92:80:d2:e7:
                    ad:46:10:48:25:9f:75:a1:f7:ba:42:78:cb:07:81:
                    01:6c:bd:1b:3a:f8:81:ce:e1:3d:eb:ef:79:73:aa:
                    64:36:fe:10:95:70:1e:b4:9e:3f:ce:38:03:67:10:
                    30:4d:91:cc:47:f1:46:eb:e8:8d:f8:c0:34:af:80:
                    6e:c1:61:27:e4:7c:bb:86:28:5f:b4:dc:b0:86:59:
                    06:78:c7:bf:c1:37:30:6a:46:85:4d:51:df:e1:b1:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6C:A1:D6:C2:AB:47:54:B2:29:75:86:AD:B4:EA:B2:5B:E1:BD:7F
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:24:37:6c:9c:65:86:04:56:c3:01:3a:73:6f:70:d6:d9:98:
         50:19:cd:b4:1e:e0:f7:1a:6e:74:f3:cf:bc:69:4f:a2:fb:d2:
         be:02:98:0f:66:06:20:03:ce:a7:f2:76:72:d5:1c:82:f9:27:
         df:68:6d:08:f9:2a:d9:19:ab:1e:66:44:65:5f:f1:86:4f:d1:
         ad:39:bd:90:ca:b1:90:83:48:fd:fb:c5:d6:fe:c7:e3:43:08:
         28:5d:10:fe:25:d6:0c:07:29:23:b3:e6:c0:09:bc:cb:44:b9:
         48:f5:b1:7c:aa:f4:6c:28:ef:b1:ec:51:65:78:3f:b0:2e:70:
         c5:e3:f6:20:b0:52:b8:ad:15:7a:3c:c5:31:ec:aa:d9:8f:d4:
         ec:a2:3d:bf:22:48:0e:0a:f8:cb:ec:22:a4:ac:26:8c:a6:c4:
         a5:38:a1:2a:e3:52:e4:4e:b8:d7:57:35:39:26:6d:d2:c2:3c:
         4e:3a:1b:71:3d:6c:b9:7a:a3:63:a3:5a:9e:3c:5f:e9:f2:8c:
         d7:3a:88:17:18:6f:0f:37:89:13:6f:1c:b4:b4:b2:70:ca:8f:
         b2:c0:47:df:eb:6c:92:2c:6a:ad:d1:db:0d:29:4d:88:d1:39:
         1b:75:a4:db:f8:49:4d:c1:d9:cc:f0:8d:96:9c:27:ba:54:80:
         93:3d:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:30 2025 by rpki-client