Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
File:                     9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json)
Hash identifier:          5xzkY8NHa5wwv6c1/TWnoR/pTSqGjX3jKsac1l4gMWA=
Subject key identifier:   BB:DD:A4:0F:45:F5:FA:F9:79:DD:33:6B:7A:62:EC:4B:3F:73:43:6E
Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Certificate issuer:       /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
Manifest number:          0158
Signing time:             Fri 31 Jan 2025 03:21:08 +0000
Manifest this update:     Fri 31 Jan 2025 03:21:08 +0000
Manifest next update:     Fri 07 Feb 2025 03:21:08 +0000
Files and hashes:         1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: 6Jgn7Zczwk80LfbnE2pB2a2WBIiaOz+QlcCC7AaO2G0=)
                          2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: tNyP3GpxOVlhdC8dzuHPeKXAK1xluCFT4wJaTwr6yJc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
        Validity
            Not Before: Jan 31 03:21:08 2025 GMT
            Not After : Feb  7 03:21:08 2025 GMT
        Subject: CN=679c41a4-9f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:fe:88:00:dc:5a:96:4d:7a:75:0c:75:93:
                    06:ca:b1:cd:d3:84:67:bb:43:53:db:8b:8c:b9:1d:
                    31:b5:54:e2:0b:23:ef:d0:13:e5:6d:84:63:b8:e1:
                    80:2c:82:0f:ae:5a:c3:dc:08:e1:ea:85:bb:03:06:
                    82:4f:ee:bd:4c:59:e6:b0:c9:e7:aa:5e:dc:d1:84:
                    d1:6a:c2:76:26:a2:0c:05:38:67:f6:d4:2c:69:b1:
                    1c:14:a8:23:84:a8:7b:aa:26:5a:20:d9:a7:22:7a:
                    26:10:4d:2e:42:6a:10:0e:69:a6:83:47:df:c3:76:
                    8b:2f:b9:9f:d0:34:ef:c4:86:67:ac:72:cb:5d:12:
                    c5:34:1a:de:74:17:bf:ee:af:76:eb:ac:09:cd:db:
                    b5:05:5d:07:6e:ea:dc:f3:09:53:27:c6:56:df:da:
                    58:0a:e4:69:d3:85:ed:28:6b:13:f4:d4:cd:86:f7:
                    85:93:8f:a4:1f:f7:70:7d:55:d9:89:77:ec:b5:c9:
                    16:62:e2:32:fc:70:5d:92:7a:24:7c:16:a6:32:0b:
                    93:e1:eb:96:88:bf:a1:e0:ef:2e:2e:70:b8:a5:45:
                    fa:29:77:c0:20:90:bd:65:8f:89:a7:4e:6c:02:58:
                    8f:60:e8:50:5c:1a:2c:75:a6:2e:68:90:4d:7f:c6:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DD:A4:0F:45:F5:FA:F9:79:DD:33:6B:7A:62:EC:4B:3F:73:43:6E
            X509v3 Authority Key Identifier:
                keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:75:e4:64:c5:20:aa:1e:ce:76:b4:b8:5d:6f:f9:3f:30:
         26:a3:36:9f:a0:c5:b1:3f:af:33:53:ad:75:16:d6:0b:a1:22:
         49:95:74:eb:3e:d0:c8:2c:3e:5a:d5:fb:77:2e:21:fc:ee:04:
         f0:58:a5:82:ee:ee:04:d0:3e:08:10:65:eb:57:f9:0b:9e:1e:
         41:83:67:8f:d3:27:28:26:0f:d2:ca:93:56:ed:af:0c:dc:5b:
         04:ac:75:b2:be:55:96:94:73:f6:17:d5:bc:ee:6f:1f:e7:18:
         94:b8:b0:53:26:df:a1:af:85:93:11:82:80:05:9a:8c:91:86:
         ed:c3:f4:65:4a:19:19:38:3a:e6:90:bd:f0:34:2b:62:7e:8b:
         67:d5:7b:1b:f7:be:83:b2:93:a7:99:c1:e1:97:7c:7c:a5:e3:
         31:24:2f:64:d1:3f:b1:72:6e:4f:6a:3b:a0:e8:8f:f2:07:57:
         2a:f6:5a:a9:5a:62:51:e8:a6:ee:29:47:0f:78:e5:3e:40:fc:
         59:19:3c:bd:c9:1a:32:d2:3f:ff:46:fc:f8:fc:f0:bf:df:ae:
         eb:7f:39:bc:25:e5:5a:23:ce:5a:78:cc:1d:1c:2e:34:79:3b:
         0f:98:df:f5:fe:59:66:08:5c:9e:9f:26:15:b1:ee:20:60:53:
         09:ca:f7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:15:43 2025 by rpki-client