Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
File:                     EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft (raw, json)
Hash identifier:          ow3Ng2gJv5KMRPy70Z8T48RttXlYa3ai32AU7ua3fQ4=
Subject key identifier:   56:79:CD:BD:7A:F1:8D:B6:BA:61:E9:E8:92:8C:79:D3:F2:7B:B0:B1
Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
Certificate issuer:       /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
Manifest number:          014A
Signing time:             Fri 31 Jan 2025 03:40:37 +0000
Manifest this update:     Fri 31 Jan 2025 03:40:37 +0000
Manifest next update:     Fri 07 Feb 2025 03:40:37 +0000
Files and hashes:         1: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl (hash: QvPU7khnc22TiRXwyqL9h7UjrlD7uQxU61p6hlHFFzQ=)
                          2: F098580828C511EFB2C79E5FC4F9AE02.roa (hash: hGyVKJOy3s+uSXiEJLjSDUVmn7ewhXLjDLBZl593H3w=)
                          3: 14C77BFA28C611EFA33ED95FC4F9AE02.roa (hash: kiepz3d3PXC78matqhezJSK/iL+kv++r/FbCbnosOR4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
        Validity
            Not Before: Jan 31 03:40:37 2025 GMT
            Not After : Feb  7 03:40:37 2025 GMT
        Subject: CN=679c4635-6892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:6a:0f:2b:de:fd:30:af:90:80:b3:4a:86:
                    f3:3d:4c:29:80:37:ac:7f:29:bb:fd:49:5c:a2:37:
                    78:7a:08:89:87:98:ed:75:72:f3:9c:02:e5:59:0a:
                    42:fb:0d:49:ee:8e:58:ac:8c:d0:a4:e9:68:a8:34:
                    d1:8c:4a:2b:6e:ef:e1:29:17:3d:40:32:7a:fe:fe:
                    88:63:0a:ac:cc:cb:46:01:e0:d3:b5:76:f3:5e:f2:
                    4a:36:e3:b4:a7:3d:74:6f:41:c7:96:3b:54:3d:65:
                    7f:76:ec:8f:27:88:7b:43:65:a7:d0:9b:b4:07:59:
                    d6:d2:c2:5d:4c:28:c3:b6:00:99:53:94:9e:85:2d:
                    aa:99:d7:8d:c3:54:6e:ac:f9:63:d9:5f:2b:51:6d:
                    0c:81:c8:b5:1d:7d:77:8e:26:e0:63:ec:33:1f:14:
                    7e:1c:4f:20:94:b8:2b:d8:24:cd:e9:90:44:dc:b9:
                    9d:cd:98:94:a2:44:24:da:b7:5b:eb:0b:f4:48:a4:
                    d3:e4:39:4b:6f:3a:3e:5f:a3:f1:75:e4:33:43:62:
                    87:65:84:d5:bf:17:90:4f:87:2d:43:35:d2:b6:44:
                    41:f8:9f:b0:2c:e0:33:03:de:af:39:3c:b0:40:ee:
                    60:36:1b:0d:26:84:9e:1b:5c:ca:53:54:ca:56:68:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:CD:BD:7A:F1:8D:B6:BA:61:E9:E8:92:8C:79:D3:F2:7B:B0:B1
            X509v3 Authority Key Identifier:
                keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:40:ee:00:dc:d5:81:70:69:3b:92:dc:72:8a:21:f7:25:78:
         06:92:2e:27:b0:8d:18:44:08:03:b7:bf:7d:d4:7e:91:ff:16:
         f9:48:15:ad:fd:3e:3f:8f:73:46:51:4a:c4:99:b4:d4:c9:22:
         39:c8:d8:56:82:1a:67:ae:4c:08:d4:65:f8:e2:a7:97:bd:7b:
         fb:d5:94:13:85:68:6a:8d:a2:0e:15:85:14:f2:3e:88:63:87:
         99:b1:37:ae:02:ed:0c:07:f8:89:8c:e3:79:b1:fc:3e:d6:90:
         e6:c9:37:d9:34:fa:87:3d:c1:d7:bd:8b:56:89:12:a9:df:d6:
         ce:14:bb:a5:d5:10:e0:53:de:d0:d7:fa:2d:84:a6:c7:ed:a1:
         cd:0c:cc:43:b3:05:7c:e8:36:fe:c4:7a:60:02:f0:f3:3e:03:
         ef:0f:9e:f6:f7:61:5b:fa:66:76:01:9e:ff:ae:64:bc:1a:ba:
         04:ea:58:28:24:e1:1c:f7:09:af:92:83:c5:42:d8:06:cc:79:
         16:05:fe:b0:d0:b6:aa:9e:5d:ee:cd:69:c1:f0:ea:d5:7b:52:
         16:2c:8b:3b:86:af:b2:dc:87:29:81:5d:ef:20:69:bd:0e:52:
         64:cd:ba:f6:19:70:22:99:8e:57:92:e9:6c:ac:a6:bb:2e:68:
         bd:0c:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:43 2025 by rpki-client