Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
File:                     Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json)
Hash identifier:          ajyokBgC+NRxtuNtK4rVJdjgWEFrJo7gKlr160s+5XQ=
Subject key identifier:   AF:BB:C4:4E:E2:D0:4B:E8:52:3B:68:A9:0D:34:16:9E:1B:2B:A4:BA
Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
Certificate issuer:       /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
Manifest number:          15
Signing time:             Fri 31 Jan 2025 07:03:49 +0000
Manifest this update:     Fri 31 Jan 2025 07:03:49 +0000
Manifest next update:     Fri 07 Feb 2025 07:03:49 +0000
Files and hashes:         1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: +Cz6DjxQ+AUVG0Fprz8vng+bgbyXPpxopF+aiom61Lo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
        Validity
            Not Before: Jan 31 07:03:49 2025 GMT
            Not After : Feb  7 07:03:49 2025 GMT
        Subject: CN=679c75d5-1cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:d5:4d:5f:31:8e:30:3e:52:e3:f7:1d:35:
                    66:7a:c0:85:6a:53:2e:7a:1b:50:77:83:b6:e0:4e:
                    88:95:39:d3:46:90:3c:ab:57:28:f5:eb:96:13:ee:
                    9e:12:f8:93:46:95:e8:e4:86:57:1f:fd:c3:8e:58:
                    8d:c5:07:71:87:3d:9b:e0:9d:9e:0c:e2:bf:7d:02:
                    2e:d3:83:2f:bf:6b:11:dd:a3:55:37:4b:4b:df:3a:
                    8f:df:21:d1:fc:33:1d:1a:06:ec:ea:e3:a8:84:6a:
                    8a:61:9b:96:59:6e:01:54:7a:9d:a8:8c:81:b0:82:
                    17:6d:02:cc:ab:cb:7a:e8:ab:aa:6b:a1:33:7c:50:
                    41:b7:8b:ed:1e:04:2d:6c:6d:91:40:de:71:85:bb:
                    e6:fe:18:32:fc:8f:c5:9d:e2:3a:62:9b:ef:97:81:
                    ac:2f:9d:48:6a:bd:48:d8:b5:5c:e1:45:23:aa:f2:
                    7f:2f:67:b9:fc:6a:62:a0:c7:67:d1:13:c9:4d:e5:
                    7d:9b:b5:a8:ff:28:11:48:69:6b:bb:8b:80:4d:73:
                    c1:c4:27:96:14:0e:fe:9e:67:f7:62:11:b8:54:73:
                    0c:b9:d4:78:5b:98:d4:96:ff:c6:42:77:3a:b5:05:
                    03:fc:e6:45:99:46:6b:e0:87:72:83:88:9d:e2:5d:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BB:C4:4E:E2:D0:4B:E8:52:3B:68:A9:0D:34:16:9E:1B:2B:A4:BA
            X509v3 Authority Key Identifier:
                keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:b0:bc:b5:c5:b1:81:1e:80:42:6a:9c:47:49:4f:77:cb:
         98:5c:77:fe:f9:eb:cb:bd:79:c7:d9:27:48:f0:91:42:f8:fa:
         e4:c2:35:29:6f:17:e9:3f:75:46:1a:60:84:ea:c5:3c:dc:b8:
         b1:77:0e:aa:0b:ff:93:07:df:42:0b:05:58:e9:b6:4f:ca:b9:
         85:87:52:96:1f:da:09:23:00:5a:c0:b7:a0:6d:2b:4e:e2:59:
         c6:51:97:8e:61:7d:24:3d:3c:91:9b:0a:bf:90:00:d3:f5:85:
         84:1b:0b:91:6e:1f:5f:07:2e:25:78:6d:f4:33:8a:91:72:87:
         a5:2d:23:19:06:4b:3f:33:ae:97:37:22:5b:aa:dc:d7:93:bd:
         29:8f:cc:b2:6e:01:56:9a:98:fa:c7:d1:61:a0:58:b7:49:3d:
         67:d1:9f:e1:56:2a:5a:0d:e0:db:df:3e:b6:95:91:64:ad:fc:
         15:e1:9a:26:7f:61:ce:2d:31:0b:bb:ea:84:37:95:28:ca:dd:
         d1:84:75:ac:f3:1a:1c:c6:96:59:a5:e3:01:0e:a2:d0:2f:77:
         b2:82:42:b2:ca:1d:da:b6:1d:45:bb:92:9a:fb:9f:17:0f:10:
         57:56:6b:9c:5d:b9:f7:46:b1:e5:7b:2b:c9:38:39:ef:fd:de:
         66:40:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:37 2025 by rpki-client