Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
File:                     GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json)
Hash identifier:          8EoEG9w0ou1zhWMUD5b4AJ8cYAqCTZN6/sdVqQiWqrU=
Subject key identifier:   BB:FE:18:49:33:56:8E:89:4A:EB:7A:0F:4D:C6:A8:8B:79:F5:AA:A3
Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61
Certificate issuer:       /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
Manifest number:          0108
Signing time:             Fri 31 Jan 2025 04:07:04 +0000
Manifest this update:     Fri 31 Jan 2025 04:07:03 +0000
Manifest next update:     Fri 07 Feb 2025 04:07:03 +0000
Files and hashes:         1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: xwl9/gfH4zKJOIf/gq110r4a+PKziLJsOj8B8HcMGRE=)
                          2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: kc35Syn08c4EtuwoQYpFr9xOBj5+HU59IWuBenhwr1A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
        Validity
            Not Before: Jan 31 04:07:03 2025 GMT
            Not After : Feb  7 04:07:03 2025 GMT
        Subject: CN=679c4c67-4712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:64:e7:04:46:6b:56:7f:e4:03:b7:e6:14:0a:
                    cf:af:cb:f0:da:1d:ee:91:90:6e:5e:04:18:1c:f6:
                    22:1b:b9:46:4b:04:e3:b4:00:a5:7d:ce:66:c8:a8:
                    f7:8f:1a:1b:0c:3d:ac:64:7d:b1:4d:c1:04:b0:35:
                    dd:2b:b4:1b:e3:0d:2b:2a:26:f3:93:db:52:9a:39:
                    69:be:62:8d:a1:a3:53:f9:c6:91:3c:5d:21:09:43:
                    33:91:39:d1:d4:ce:df:ba:17:3c:db:21:3d:00:d1:
                    7d:57:70:9d:db:4a:99:9f:47:d7:dd:ed:ac:29:04:
                    c6:e2:ef:b5:e5:bb:46:13:e1:5f:a7:e8:d0:1f:62:
                    43:bb:b7:0e:86:45:cc:e3:4a:73:ba:9f:3a:9e:0b:
                    27:b6:48:cd:24:90:1b:17:4e:e5:51:67:66:27:4b:
                    a9:60:18:7c:87:b2:b5:fd:d5:e7:7f:9f:29:f7:2c:
                    f6:43:6a:b9:e4:ad:c5:89:68:93:a3:cc:d7:39:d9:
                    84:83:b8:5e:54:56:df:54:ff:fb:19:ab:95:1a:41:
                    cd:96:b1:e6:0b:d9:de:c3:94:bc:a3:73:e2:81:73:
                    3a:04:0d:83:4e:1a:d4:b8:d3:54:2f:1d:df:d2:73:
                    a2:02:b2:3d:e5:15:ad:8e:ce:e1:ba:88:f0:87:c4:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FE:18:49:33:56:8E:89:4A:EB:7A:0F:4D:C6:A8:8B:79:F5:AA:A3
            X509v3 Authority Key Identifier:
                keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8e:1e:cb:33:57:63:cf:e0:cf:8b:b4:ba:d0:44:ab:33:0c:
         e9:98:eb:2d:f8:e5:8c:83:96:6a:93:15:38:d2:98:57:58:55:
         7d:38:9a:b5:db:2c:4f:2f:13:c1:e1:bd:08:17:06:5f:1f:8a:
         b1:f6:1b:2d:99:4d:d3:b0:cf:54:9f:fc:8b:4e:ab:f1:9b:d1:
         0c:7d:57:a4:cb:c5:29:91:b3:d8:6d:ec:46:13:0f:7a:6e:1e:
         dd:0d:9d:2c:a7:a9:92:ef:5a:7b:e9:e1:f5:cb:cf:70:b6:09:
         60:03:e1:a1:6d:16:9e:de:33:f1:78:b0:7f:3b:36:ce:b3:95:
         48:42:af:40:18:47:11:06:4f:b1:cb:56:53:a9:90:a4:ef:09:
         65:10:ef:7b:31:68:28:a2:7d:9e:f8:45:e7:f0:fc:61:c2:58:
         e2:c7:94:35:70:06:7e:a1:dc:85:08:a6:df:e6:dc:84:c7:64:
         e3:52:94:74:ba:d8:57:10:83:5b:e1:af:b4:b6:5b:c1:46:43:
         fa:99:86:13:fd:bd:03:b8:c3:2e:6d:77:b9:b6:64:c3:ab:c1:
         8d:f3:97:9b:2b:c3:58:28:f5:6f:5c:9f:5d:b4:01:0a:4c:bf:
         b8:ba:5b:0f:8a:26:ce:ad:a7:02:1b:f4:40:58:b8:6a:63:c5:
         4e:1c:9d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:49:07 2025 by rpki-client