Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
File:                     _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json)
Hash identifier:          yGbszDjELj98KcC/KWFiu3RKKYtXeIDNUqLra1La0rU=
Subject key identifier:   DE:7C:65:7A:F4:BE:4E:2D:A3:BB:6E:BB:72:F2:26:3E:5D:2A:AC:16
Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48
Certificate issuer:       /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
Certificate serial:       0361
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
Manifest number:          035E
Signing time:             Fri 31 Jan 2025 01:01:04 +0000
Manifest this update:     Fri 31 Jan 2025 01:01:03 +0000
Manifest next update:     Fri 07 Feb 2025 01:01:03 +0000
Files and hashes:         1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: k4/EQCyaJYhDAVz4tVR00ccwX+K3jar1H+Ai9W+onjU=)
                          2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: cgSyYI5P/wggzlE/vHKgGqnNhOUL3VpZ2zoSJhZ6RSc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865 (0x361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
        Validity
            Not Before: Jan 31 01:01:03 2025 GMT
            Not After : Feb  7 01:01:03 2025 GMT
        Subject: CN=679c20cf-f254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:a3:cb:50:5d:36:b8:0c:36:ad:e9:05:70:
                    55:b4:98:93:e5:59:36:b6:9f:0c:50:3d:19:f7:47:
                    1c:ac:55:e3:12:ee:20:d8:c2:0c:98:12:d1:5b:48:
                    5e:3b:bb:48:0d:79:13:6f:fa:e2:46:f2:6e:06:80:
                    c4:25:ce:a9:cf:86:d6:63:ed:97:ca:7c:76:cd:58:
                    8b:a9:19:73:0b:a7:24:21:6d:d2:9d:94:94:ae:c4:
                    1e:76:72:f6:70:20:22:51:54:f4:4a:61:b9:be:0b:
                    de:f6:26:0e:6d:17:2a:c7:d5:ce:d9:54:95:ef:d1:
                    bb:8b:d5:43:56:e4:63:8f:26:18:ad:a9:99:47:0f:
                    4a:fd:de:4a:c1:7a:b9:3c:4b:ed:20:c0:c0:b2:03:
                    24:fa:4a:40:7c:08:90:ff:0e:30:ed:30:98:d0:ce:
                    86:6f:88:88:2c:e6:2f:24:a0:a6:f1:9b:68:14:6f:
                    c5:7f:35:59:06:15:b1:94:b6:87:fe:c8:88:ca:b7:
                    36:fd:99:47:f7:76:d6:f5:be:b8:00:25:0d:9e:97:
                    09:3a:28:64:84:2f:5f:62:e0:da:23:18:c0:9f:71:
                    8a:98:f3:0f:02:70:52:97:e4:9f:61:bc:a9:8e:f8:
                    1c:60:77:25:12:6b:f4:3b:08:e8:00:e9:05:ba:15:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:65:7A:F4:BE:4E:2D:A3:BB:6E:BB:72:F2:26:3E:5D:2A:AC:16
            X509v3 Authority Key Identifier:
                keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:dd:0b:59:f7:f7:e9:43:17:55:af:31:6b:45:20:e9:48:4a:
         eb:8e:79:e5:af:71:25:34:fb:a8:05:8c:40:93:03:64:64:b7:
         ff:1b:82:bc:1a:e0:3e:a3:48:f8:b2:12:ea:7e:a7:07:17:38:
         f4:a9:85:95:ba:c3:13:ed:fe:45:58:39:46:ae:dc:f1:bf:b5:
         79:07:7f:52:7e:e7:ec:0e:fb:0f:63:2e:42:b7:27:b0:52:43:
         04:55:e9:0f:0f:79:e4:67:76:e6:26:e0:43:76:26:26:85:77:
         cf:08:7c:e9:42:14:c7:08:ef:9e:61:b8:bb:91:56:63:d4:bc:
         f9:e2:2c:f4:f2:27:f7:7d:2c:2c:dd:c9:30:88:c2:75:88:f0:
         77:f3:7c:41:c1:d2:97:03:4b:75:b8:35:10:9c:e1:b9:be:fe:
         9d:68:49:2a:9d:0e:0d:5b:fb:aa:84:6c:53:80:dc:cb:27:a6:
         9d:67:64:32:89:55:ff:0b:90:b7:40:d7:b3:56:0f:e0:5d:f8:
         f0:a9:69:ba:e0:b4:88:66:43:6b:ab:de:99:4b:67:36:d8:8c:
         f1:b4:b7:7e:ab:ae:25:f2:e5:e1:f5:eb:a9:49:5a:31:a8:9a:
         9d:95:57:23:f5:ad:18:79:ed:16:04:09:58:bd:dd:2a:f3:97:
         30:f0:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:34 2025 by rpki-client