Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
File:                     a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json)
Hash identifier:          p2lC8vA4tOpqfC5uVErh+TF0MQ9OgGtKUlyuF+gI6ac=
Subject key identifier:   74:4F:9D:7A:01:37:95:0E:95:68:87:3F:59:99:45:8C:B7:8B:A0:60
Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
Certificate issuer:       /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Certificate serial:       16D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
Manifest number:          1FD0
Signing time:             Fri 31 Jan 2025 16:39:10 +0000
Manifest this update:     Fri 31 Jan 2025 16:39:10 +0000
Manifest next update:     Fri 07 Feb 2025 16:39:10 +0000
Files and hashes:         1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: p+52Cyq8WdWluoJuo1ybRGQfp/yLu1/9qHszlHkRThQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5843 (0x16d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
        Validity
            Not Before: Jan 31 16:39:10 2025 GMT
            Not After : Feb  7 16:39:10 2025 GMT
        Subject: CN=679cfcae-68b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:6b:43:c7:92:00:06:21:4d:e1:60:54:d0:
                    4f:25:c3:d1:7a:39:06:65:58:ee:92:68:ff:fa:0d:
                    bc:e7:59:15:76:b2:18:f1:18:e2:c0:aa:d0:e8:4c:
                    93:27:49:70:92:ce:e8:09:16:ca:ab:9a:eb:6b:7d:
                    fb:b4:aa:e2:42:7a:52:93:59:1e:1b:20:c1:6d:75:
                    a7:c4:f4:96:cb:70:16:11:95:2c:59:a6:28:ad:ac:
                    e1:d0:b8:ba:16:38:84:0d:9a:e6:28:0d:a4:9a:b8:
                    68:2c:78:3a:e4:cf:bd:12:06:c0:39:0d:60:70:3e:
                    03:d6:fd:03:39:78:fc:25:92:b4:a0:ce:9b:b2:d8:
                    69:87:04:76:b3:d8:ea:eb:6c:fc:c3:94:ba:a4:29:
                    91:97:e4:ce:d2:e7:69:dc:c0:3a:30:b2:2b:69:39:
                    40:35:a0:6a:d4:9e:26:79:26:a0:36:e0:c6:8c:39:
                    67:2c:0b:3e:16:88:6e:69:e7:50:60:9d:6d:50:32:
                    ac:b8:7e:2a:d5:71:6f:33:6f:08:2b:03:17:9f:40:
                    9e:54:9d:6c:3a:39:cb:99:a5:74:19:5c:06:d4:d0:
                    a1:34:51:a8:07:da:76:4b:ef:80:5d:35:1e:e1:71:
                    1f:fb:7f:0e:89:b7:a1:8e:75:1d:de:6b:a7:13:dd:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4F:9D:7A:01:37:95:0E:95:68:87:3F:59:99:45:8C:B7:8B:A0:60
            X509v3 Authority Key Identifier:
                keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:15:26:a3:ed:0d:4b:16:3c:f5:af:ad:be:42:a5:0f:bd:4e:
         ab:e7:ba:13:3f:44:7f:5b:12:c6:cb:5d:07:12:67:3e:74:b2:
         85:5b:57:be:53:cd:7b:06:dc:b7:6a:2c:b8:a5:d4:8d:47:04:
         d1:9e:8c:6b:f3:b1:5f:91:87:94:23:91:db:b0:cb:cc:cb:85:
         31:10:09:0d:a2:8d:4d:4e:bc:56:39:54:e5:f7:90:21:a2:02:
         75:0a:87:78:b2:7e:58:6d:be:24:b6:b7:b0:f3:47:8b:6a:ae:
         3c:f6:82:c3:c3:51:c7:e2:35:5f:e1:ce:f1:fb:ac:e8:78:22:
         98:59:bf:3a:3b:aa:23:57:bb:9e:a1:c6:b7:e9:a4:de:89:ad:
         2e:ed:28:63:9c:30:6b:ac:67:28:08:94:26:54:3b:96:e7:59:
         59:1f:8d:3e:5c:e5:9a:11:db:29:ca:11:b9:d7:bc:e4:a7:f7:
         fe:ad:fe:ef:de:05:eb:4f:91:25:d6:bc:0d:66:13:8f:68:c2:
         92:09:2c:3b:6b:90:39:dd:77:92:a6:d5:11:39:15:da:bc:6f:
         0f:f1:e4:98:7c:72:fc:8f:69:85:9a:eb:3b:fe:ff:a7:4b:d3:
         5e:67:27:7a:2c:91:11:40:5a:c9:ec:71:66:28:22:1e:6a:8d:
         16:d0:34:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:55 2025 by rpki-client