Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File:                     mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier:          w5y754g27vhNkWToQOojTD7u3noSb7rmKlkJtW8eh6g=
Subject key identifier:   A3:D1:E4:45:FE:FF:BC:10:13:8D:C9:52:5A:DD:94:93:4A:B0:DA:0C
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number:          017B
Signing time:             Fri 31 Jan 2025 03:04:13 +0000
Manifest this update:     Fri 31 Jan 2025 03:04:12 +0000
Manifest next update:     Fri 07 Feb 2025 03:04:12 +0000
Files and hashes:         1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: 8Q0pjLUeiruV3YcnkGhqcTIKCKAgfyPYloruArauOmI=)
                          2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: mUMNE966BicNSpJESgW+HWrC/YbRSMoz47CHc52HDoo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: Jan 31 03:04:12 2025 GMT
            Not After : Feb  7 03:04:12 2025 GMT
        Subject: CN=679c3dac-e9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:55:e0:ac:c0:7f:a1:04:2e:a6:d0:c0:cd:72:
                    46:d3:ca:2b:50:58:4b:58:54:b7:8f:29:c2:81:12:
                    e3:15:c3:c2:0d:bd:28:e6:c8:0b:a4:f1:c0:18:bc:
                    ab:bd:14:ac:e2:b2:e0:00:9e:83:a5:be:e7:56:a3:
                    48:a8:1b:57:e1:de:2f:b7:f1:1e:6e:9f:a7:fe:71:
                    96:df:0b:ae:86:60:c1:ee:cc:5a:9c:3e:0d:26:10:
                    cc:6e:a9:5f:8b:1a:f9:b9:e9:f0:f4:e8:1a:6d:34:
                    15:ee:8f:37:77:d8:d9:e4:5f:ab:29:e4:d8:c3:9f:
                    a3:72:e4:9b:a3:39:0c:99:fc:7c:85:24:ae:a4:b4:
                    fd:27:a2:4e:11:cf:2b:bf:86:f6:d5:40:bc:c1:cb:
                    42:ed:1a:ce:cb:13:4c:3c:a0:78:d3:42:22:d0:7b:
                    22:e8:15:0f:84:59:74:ac:c7:7f:6d:60:7a:d5:13:
                    5a:c1:69:2c:bc:d7:c7:e0:73:f3:7e:98:e3:03:09:
                    34:89:4d:ae:84:72:88:49:c8:b5:f9:f2:cf:c1:23:
                    99:4e:99:6f:d8:ab:3c:b6:57:35:94:57:87:30:ac:
                    90:80:61:91:5b:5e:56:e7:35:81:fd:f7:fc:62:48:
                    27:45:6c:82:a1:25:aa:4d:f0:c2:a0:83:1d:31:25:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D1:E4:45:FE:FF:BC:10:13:8D:C9:52:5A:DD:94:93:4A:B0:DA:0C
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:63:9a:3c:7b:d8:8f:f5:ae:ae:11:2f:11:1b:86:47:3b:9b:
         98:da:09:02:1a:2f:4d:47:70:1f:2c:8e:da:00:3c:d6:90:81:
         1e:ef:02:fd:0c:c0:54:b8:cf:d2:9f:86:e7:4d:96:b4:72:f7:
         fa:2a:d5:5e:3c:7d:00:50:1d:6a:9b:12:e0:a2:2a:bd:12:26:
         fe:c8:02:ae:0f:9f:3b:de:1a:d5:ba:10:c6:e4:41:3d:36:0e:
         0c:bc:8a:20:69:cb:09:b0:14:49:af:08:31:e4:7c:e6:15:f7:
         ac:24:5a:71:77:1d:ac:b0:5a:ae:17:76:57:46:ea:ff:7f:b5:
         17:a0:5c:15:ef:3b:81:49:84:44:9c:e1:0b:e5:2f:5c:4f:c9:
         2e:ed:a5:24:e0:f2:2f:8f:e1:62:6a:ff:5e:93:15:d4:c6:fc:
         57:5a:c8:56:1f:00:df:eb:52:f7:c9:37:0d:34:df:2c:bb:ed:
         8e:af:42:a6:14:bd:d8:4b:74:1c:68:33:f8:13:0e:af:e1:52:
         78:9d:11:61:13:31:00:14:e4:35:62:14:f7:a9:53:0a:67:d2:
         33:84:56:e0:31:89:a9:4b:50:16:4c:b3:bd:77:e7:e6:a0:7f:
         70:6a:f8:ba:e9:80:48:d8:08:56:32:99:66:67:24:d6:0b:9e:
         55:4c:d0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:41 2025 by rpki-client