Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
File:                     pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json)
Hash identifier:          MTYFhBQACWhQ6on055WBQAR3GZwkdMp3bbvWDzUvYbo=
Subject key identifier:   8E:65:67:08:96:06:05:DE:17:06:3A:AD:E0:60:7D:A5:51:44:D0:4E
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Certificate issuer:       /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial:       0D17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
Manifest number:          0CE0
Signing time:             Fri 31 Jan 2025 18:07:16 +0000
Manifest this update:     Fri 31 Jan 2025 18:07:15 +0000
Manifest next update:     Fri 07 Feb 2025 18:07:15 +0000
Files and hashes:         1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: yh3QqVzFOb0H2XDrAlNf5L7nHIZrtdg6NBPOD87d+g8=)
                          2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=)
                          3: 5614ADF6C2D811EF873CE458C4F9AE02.roa (hash: Je3Z35nzgEvUslXJ4oraJDaijtfqayvpURpYN7cdlFs=)
                          4: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=)
                          5: 5B4A8D6EC37C11EF91554967C4F9AE02.roa (hash: DyFZphDj+xYQOQuO59LnOvFtMeJz8Mp/8a6Sd7JeRP8=)
                          6: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=)
                          7: F68834A47B9811EC94EE077EC4F9AE02.roa (hash: OONv2D6RWPurGG09FFRuE2GGRS9SUWjqXoDwbtFmxSw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3351 (0xd17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
        Validity
            Not Before: Jan 31 18:07:15 2025 GMT
            Not After : Feb  7 18:07:15 2025 GMT
        Subject: CN=679d1154-489a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:f3:f4:2a:ae:2f:f9:34:c9:44:92:cd:f1:
                    38:6a:29:90:1a:11:19:8f:74:2f:17:43:74:6a:07:
                    46:91:69:ef:e2:53:1c:8e:8a:4b:a8:50:10:be:bc:
                    37:03:43:b4:10:68:da:5d:3b:5b:bc:4d:88:7a:1d:
                    ea:60:e0:4b:65:f0:a1:69:ad:a0:72:7d:e3:fb:db:
                    cb:01:1f:a3:b0:c4:0f:9e:1c:c1:a9:1f:95:85:d7:
                    f0:f8:a6:05:97:f6:60:55:14:2c:87:ef:17:d8:c9:
                    aa:09:db:89:41:9f:fd:e5:ba:48:a7:a1:f4:a0:f9:
                    1f:dc:e4:b2:0c:dc:9b:aa:ff:f8:1f:7a:4e:65:9a:
                    18:eb:de:2f:88:a1:a4:cf:88:a6:7a:22:cf:2b:a5:
                    e4:e1:67:af:23:6f:eb:53:0b:b2:a2:74:9f:3d:06:
                    b3:31:38:ce:ac:4a:a3:98:88:77:a7:c1:25:7c:98:
                    07:20:83:46:ad:09:0d:c2:3b:c0:60:b1:fa:da:84:
                    f7:76:cc:53:a1:00:6b:bf:33:cf:12:7e:e6:0f:8e:
                    21:06:aa:ae:f1:7c:25:cb:4f:1b:5d:eb:50:58:ab:
                    56:dc:b6:e1:69:fd:6b:4a:ee:c3:75:1f:37:6b:16:
                    7f:7b:88:e8:49:1d:e0:1a:4f:76:05:9d:de:0e:e6:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:65:67:08:96:06:05:DE:17:06:3A:AD:E0:60:7D:A5:51:44:D0:4E
            X509v3 Authority Key Identifier:
                keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:91:d0:f5:eb:b9:06:bf:59:a5:7e:8a:df:4f:ea:3c:68:58:
         82:a2:69:3d:f2:8c:5c:1f:a4:fe:48:66:62:54:60:aa:50:5f:
         61:94:4c:ad:df:ac:c2:be:ae:db:37:ec:62:2b:c5:93:1f:dc:
         ff:15:1b:57:f6:33:cd:ae:f8:2e:e0:36:37:b0:28:92:d5:06:
         49:6f:e3:42:e0:8a:bc:62:b5:38:46:fe:d3:c7:0a:13:f8:94:
         83:1c:7d:a5:5b:90:d4:84:e5:ed:64:8b:3d:00:bb:28:78:8b:
         74:6b:92:cd:d5:af:5a:30:05:88:b7:83:25:22:d6:f2:49:3f:
         9b:e1:79:be:b7:25:9f:04:08:c5:03:bc:b0:53:88:a1:4a:86:
         2b:3c:ad:67:bc:cd:a7:ee:3f:68:7d:4c:ab:0f:bb:66:4f:b3:
         af:1f:11:e3:ab:97:e0:71:48:3c:89:24:55:f8:bd:48:79:e7:
         9a:15:33:b6:3c:5e:0b:aa:62:55:0d:c8:29:93:aa:92:d3:3f:
         51:a9:0c:29:df:3a:23:f3:91:19:ea:72:c8:d4:e8:87:3a:18:
         2f:4d:9a:7b:9a:a3:85:4a:5e:e4:98:c8:4a:c4:94:fe:8f:11:
         2c:72:f8:b6:fc:62:9a:1d:ff:f1:c6:6f:f5:56:e2:ca:30:fe:
         e3:8a:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----