Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
File:                     U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft (raw, json)
Hash identifier:          15Jp8/vWIJKr0ZQAzFcUTrhv4eHIqyCR/A48gmSwgkM=
Subject key identifier:   D0:F7:1A:20:2E:1E:08:3A:D3:D2:9B:20:FA:1F:BB:86:ED:B8:76:BC
Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF
Certificate issuer:       /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
Certificate serial:       046C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
Manifest number:          0465
Signing time:             Fri 31 Jan 2025 00:12:30 +0000
Manifest this update:     Fri 31 Jan 2025 00:12:29 +0000
Manifest next update:     Fri 07 Feb 2025 00:12:29 +0000
Files and hashes:         1: U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl (hash: XLmUv8veRkiNo8lA9Q7eiGFxjN9TflSDPAlafDlsdV0=)
                          2: 1C032F5A36E711EC9581EC54C4F9AE02.roa (hash: zuaM96z3jhp+fAEf2SKv65O5x2n5mX1/wYZc1QfKJIE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
        Validity
            Not Before: Jan 31 00:12:29 2025 GMT
            Not After : Feb  7 00:12:29 2025 GMT
        Subject: CN=679c156d-2c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:60:5a:79:bd:88:b9:c3:4a:18:f8:bc:1e:
                    f7:33:84:e2:4a:92:ba:77:23:61:7c:8e:49:fd:9f:
                    37:80:5f:22:55:3c:f4:a1:1c:61:9c:cd:00:cb:aa:
                    09:8a:ca:73:b0:37:18:0c:2e:64:e8:46:aa:7a:4f:
                    0f:8c:8b:8f:b3:e8:ce:9c:cc:c3:b9:d5:3c:3b:60:
                    49:a6:80:9c:b4:29:76:09:ee:d0:5c:20:78:ec:d3:
                    7f:ad:9f:c3:6e:29:81:66:71:c5:74:e9:c5:16:20:
                    d1:dd:ad:3f:1f:54:68:77:b8:af:ae:51:66:3e:2d:
                    63:7c:76:84:4a:c5:6e:98:db:d9:20:f7:92:37:da:
                    f7:da:59:27:94:4a:ba:c1:4f:16:84:1a:eb:20:fb:
                    09:e4:38:b8:4f:6f:77:b7:bb:0b:33:5d:7c:63:a8:
                    84:d7:e0:c9:cd:35:7e:31:2c:b9:cf:d5:3d:cd:0f:
                    46:91:9f:d5:31:fd:aa:f1:34:81:a7:16:9c:98:01:
                    b5:d8:b1:cc:ec:5a:52:66:f7:0f:56:6f:f9:11:e9:
                    17:7d:b4:cc:ac:b9:f6:ac:29:ab:9b:d6:82:6f:6b:
                    bc:d7:ca:ea:d7:55:ed:5f:a2:76:50:54:b5:49:f2:
                    27:6f:03:4a:1a:0c:b3:49:4a:fc:6a:70:22:ca:cf:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F7:1A:20:2E:1E:08:3A:D3:D2:9B:20:FA:1F:BB:86:ED:B8:76:BC
            X509v3 Authority Key Identifier:
                keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:23:4e:f3:e5:15:86:6c:17:0e:e2:c6:19:5a:e7:45:45:f2:
         3d:4b:46:db:e7:e0:91:f2:eb:08:23:e0:5a:e0:79:49:9e:6b:
         0d:69:81:1a:c2:8d:5a:7b:a5:d5:52:35:43:a9:66:a9:a7:78:
         ef:eb:f7:94:13:d6:6c:13:9e:d7:38:7d:5c:70:f1:8e:1f:e6:
         07:d2:15:c0:25:24:7e:d4:83:80:2e:1c:85:f1:fc:42:f0:ca:
         7b:58:ae:0c:7d:fc:63:c5:c9:f3:ec:e9:c6:75:c3:7a:c1:ed:
         1f:99:58:76:53:13:8f:9b:dd:40:38:40:d9:48:01:7d:fb:1d:
         ac:f3:72:9e:45:7c:08:6f:8e:4b:a1:0e:ab:fe:49:7f:4b:5f:
         aa:27:9f:bb:5d:82:22:95:7f:bb:75:d5:87:c4:de:81:90:71:
         3d:a6:41:a5:48:83:d2:ba:3e:d2:a9:a2:7f:2f:61:48:39:48:
         89:b5:89:74:3e:cd:ac:bb:0c:83:16:64:26:1e:6c:eb:39:b8:
         a3:ec:3b:b1:d4:a9:f2:84:28:a7:9b:65:c5:3e:0f:1a:ac:61:
         45:02:61:4e:80:33:bb:9b:33:1f:43:fc:f2:c9:f8:0b:86:fa:
         10:59:4c:f3:52:16:9a:4c:c0:b6:b5:b9:cc:27:d4:0a:14:49:
         18:51:4f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:39 2025 by rpki-client