Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft
File:                     rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft (raw, json)
Hash identifier:          YTU14NMzcg1gyfXEmWR9yAugzeQyLUFfpmW8l6c4E+M=
Subject key identifier:   08:0F:39:8C:5F:84:C4:F4:B5:90:D2:B2:6E:8B:8C:45:A7:AB:42:25
Authority key identifier: AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3
Certificate issuer:       /CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft
Manifest number:          91
Signing time:             Fri 31 Jan 2025 05:32:43 +0000
Manifest this update:     Fri 31 Jan 2025 05:32:42 +0000
Manifest next update:     Fri 07 Feb 2025 05:32:42 +0000
Files and hashes:         1: rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl (hash: roxIflzS4LVU37nCA5Lz9/CQ9MluN2/pSL63PTAzKLg=)
                          2: 69BCFB40037711EFBE813223C4F9AE02.roa (hash: PMFbGoDR6epjiOKU9mJpCjoNmw0cJb5L7rzhHF+eaLI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3
        Validity
            Not Before: Jan 31 05:32:42 2025 GMT
            Not After : Feb  7 05:32:42 2025 GMT
        Subject: CN=679c607a-bc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e5:b4:fb:09:a5:34:2e:23:cd:f5:ef:9b:c9:
                    cb:53:4f:19:6f:ab:de:ee:80:88:d4:82:49:2c:f0:
                    6e:7b:89:5e:70:93:2c:70:b0:39:7d:22:3a:1e:7d:
                    a4:60:62:e9:35:18:a8:6a:16:67:72:11:86:a4:0f:
                    fe:d9:98:9a:b4:05:ee:ff:69:1c:73:62:34:08:6a:
                    78:8b:a9:aa:5b:48:9a:39:aa:0f:7e:c2:e8:5e:cf:
                    40:b5:e9:78:9c:40:87:ae:83:9f:c4:f7:e1:e2:48:
                    62:38:9b:9f:7a:8b:6f:27:58:5c:b4:b5:f7:8c:f4:
                    c7:d9:b6:fe:bf:6b:46:98:d7:8b:4d:f0:f5:6c:33:
                    bd:08:87:59:a5:8e:86:e2:7a:10:83:0f:64:d9:61:
                    48:15:fe:d3:26:43:8c:89:29:08:80:e3:ea:72:ba:
                    06:26:30:91:46:23:ef:1f:d6:0e:d9:9b:3a:ea:3d:
                    74:5f:3c:a8:c0:6d:b9:e8:94:c9:ec:59:83:59:97:
                    4a:1d:2d:9e:01:a0:b4:44:f8:a2:6a:34:82:4b:31:
                    8f:59:43:84:9d:6d:b7:df:eb:ae:43:99:5d:f7:6e:
                    b2:e7:6b:90:98:6a:f8:f6:b6:ef:a3:9a:56:c2:26:
                    d8:df:92:0e:bd:7b:ba:76:01:97:f9:61:d5:95:1f:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0F:39:8C:5F:84:C4:F4:B5:90:D2:B2:6E:8B:8C:45:A7:AB:42:25
            X509v3 Authority Key Identifier:
                keyid:AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ca:2b:c3:b0:1a:e2:c8:ad:9b:1c:ca:9b:d6:63:b9:e6:ee:
         d8:57:0b:31:4c:16:7d:90:38:6b:ac:3f:da:29:a3:84:e0:17:
         c6:36:18:8b:fc:40:2f:8f:99:5d:1c:d1:be:c9:81:a4:bf:5b:
         5b:59:90:0f:20:6c:e9:0e:9c:51:ea:82:29:f7:4b:81:75:eb:
         11:3b:16:f9:c9:9c:08:26:b7:46:ce:b1:9f:0c:fc:0b:71:ed:
         dc:f7:c4:9d:83:2a:9d:b0:95:3d:a4:65:20:24:40:b9:36:4e:
         ff:4b:71:49:24:dc:d9:f1:30:9c:a5:da:a5:dd:22:33:7d:5d:
         29:49:ce:06:bf:3a:20:b2:57:21:f1:89:8a:b0:81:c6:1c:a2:
         a7:cf:09:fe:37:1f:13:02:f2:66:4c:47:48:af:60:82:0e:cb:
         a6:c4:0a:a6:ad:f6:52:67:4a:77:49:f6:1f:d2:bf:5a:0a:dd:
         08:35:06:42:80:d1:d3:99:1a:8c:a1:89:40:7d:4a:f4:a5:60:
         12:d5:38:8d:54:f1:65:78:1f:b7:e5:9b:37:eb:e2:9b:5d:a4:
         64:d8:2e:64:da:bb:a1:30:2e:fa:2f:af:8b:b8:3d:86:2e:c8:
         61:c4:87:6b:20:1f:63:4d:c0:31:5b:d6:db:1d:56:f3:93:21:
         a2:18:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:32 2025 by rpki-client