Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
File:                     rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft (raw, json)
Hash identifier:          SspGaaDg/xT1Z8A6ApPct9wiOqHLooyslAqMUVqlp5k=
Subject key identifier:   CF:F2:12:93:66:70:0A:38:9D:68:45:44:62:6B:90:06:19:45:B9:D9
Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
Certificate issuer:       /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
Manifest number:          77
Signing time:             Fri 31 Jan 2025 05:50:15 +0000
Manifest this update:     Fri 31 Jan 2025 05:50:15 +0000
Manifest next update:     Fri 07 Feb 2025 05:50:15 +0000
Files and hashes:         1: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl (hash: pEGYFiafweUNkZDBHdbDLwQa8/gh0jOqT91ABIEItVk=)
                          2: 25684F2A2F9211EFBF3A3C2EC4F9AE02.roa (hash: UkjhSga8NsEcNjgfnBE8MNbwF3np7i4uHZIieF8R0tA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
        Validity
            Not Before: Jan 31 05:50:15 2025 GMT
            Not After : Feb  7 05:50:15 2025 GMT
        Subject: CN=679c6497-5614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:ab:bb:19:1e:f0:de:92:a7:19:07:a9:fe:
                    01:33:3e:bc:41:0b:bd:fe:49:e0:9c:ba:f1:3e:28:
                    ba:83:90:92:f7:f9:6b:c7:99:9a:e4:3b:2f:4a:81:
                    77:43:fc:32:e6:ba:a7:ea:90:2a:e6:a9:1e:70:a7:
                    3a:e9:a4:26:fc:9a:13:ec:43:02:07:b4:33:72:9c:
                    c1:a3:0a:e2:98:0e:7a:0d:e5:0a:5a:98:70:36:a4:
                    4b:a4:de:be:f5:20:db:d1:5d:2b:02:20:af:1c:ea:
                    23:40:76:8f:2c:4e:3c:cf:d6:0f:63:db:4b:e1:e3:
                    4c:d2:c5:fd:8a:f6:98:e7:df:99:20:a5:84:d1:b3:
                    6b:1c:6e:54:c9:9b:6b:cf:ab:b2:b2:28:5d:d2:df:
                    93:0e:0a:4b:7a:27:95:bf:b4:0d:b4:0a:04:f4:4f:
                    b7:c0:34:b0:58:41:13:bc:aa:0e:02:6b:76:83:fb:
                    25:f0:ed:68:e6:3c:25:e4:e3:a4:65:b1:b1:37:b0:
                    41:22:4d:2f:c0:26:10:dc:bf:25:fd:9a:1e:c9:74:
                    70:1e:4d:fb:14:be:ce:71:37:55:30:ee:3e:8d:fc:
                    c2:0c:1a:b0:a6:98:e6:b5:a0:88:14:2b:83:70:6c:
                    cb:fb:48:1b:c8:02:ea:49:f9:91:9b:7f:f1:06:d6:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F2:12:93:66:70:0A:38:9D:68:45:44:62:6B:90:06:19:45:B9:D9
            X509v3 Authority Key Identifier:
                keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b5:7f:c0:99:fb:54:58:fc:e1:86:a0:5c:b8:c1:81:dd:7f:
         e3:2b:bc:6b:d9:36:7f:7f:ba:7f:9a:22:35:44:65:87:1b:9a:
         07:c4:64:b2:ed:ce:7c:5a:0a:be:9f:5c:97:df:19:47:fc:a2:
         12:74:20:4a:7f:05:79:e1:a0:7d:d4:92:57:03:9a:e8:21:ea:
         b9:cc:e6:62:3a:4b:03:43:a5:0a:6e:b3:ea:37:92:f1:42:51:
         ea:d6:df:79:00:c9:02:10:80:01:76:ed:18:a5:ae:69:3b:df:
         2c:a9:39:c3:00:c3:2e:79:f6:b4:a9:cc:83:ef:fd:88:14:76:
         84:88:c3:aa:dd:93:bb:46:79:32:29:74:36:ed:72:a9:56:69:
         9b:48:65:4e:10:8e:27:aa:09:a1:e7:2a:98:b9:5a:6d:02:63:
         25:78:0a:44:e5:ff:d5:75:f3:45:91:9c:f5:59:1c:48:f1:63:
         d0:63:ed:fc:cf:7a:6f:98:2e:3f:42:e0:f3:98:ec:e5:96:99:
         1e:1e:97:29:e5:68:20:98:97:b3:cd:d9:9c:6f:45:d3:c9:8e:
         a4:9e:bf:bf:f3:58:ab:e4:39:6f:78:51:42:b2:64:dc:0d:62:
         13:56:7a:84:eb:1a:37:c0:a2:35:33:5e:a2:ed:75:f4:fa:85:
         36:71:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:00 2025 by rpki-client