Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File:                     4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier:          XsEieX07/CpdZaH1uO8Q7PHu42kul26jMyH5anZsCTU=
Subject key identifier:   1D:AB:4D:A6:7B:6D:EA:EF:A8:97:A2:C0:75:97:B2:D7:43:B2:1A:DF
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer:       /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial:       0766
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number:          075F
Signing time:             Thu 30 Jan 2025 21:28:04 +0000
Manifest this update:     Thu 30 Jan 2025 21:28:04 +0000
Manifest next update:     Thu 06 Feb 2025 21:28:04 +0000
Files and hashes:         1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: XuRpd8Zdffoe9n7JUM+lQxZpkXkYnn//WFyi+iJpnp4=)
                          2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: 04Yyac0X4yooHW+vSmS1SL3uVYlQ7JtEGZ1zzlU0iN0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
        Validity
            Not Before: Jan 30 21:28:04 2025 GMT
            Not After : Feb  6 21:28:04 2025 GMT
        Subject: CN=679beee4-fe9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:f8:1b:18:73:c0:30:36:f7:d2:68:c8:9a:
                    c0:36:86:3b:a6:6c:33:96:55:a8:f3:cf:b7:db:93:
                    dd:23:6b:28:66:21:dd:9c:47:11:22:c3:4d:2c:d9:
                    8c:7f:0e:55:d3:51:af:b5:a9:de:1e:06:f3:7b:c3:
                    aa:1e:de:27:97:27:31:c8:82:26:36:e2:f2:03:68:
                    01:26:3f:95:0d:e8:db:6a:08:e2:bc:d9:a6:27:08:
                    ab:2d:56:10:b7:05:8b:a4:ed:f0:1b:21:9a:1c:11:
                    d6:c6:b2:76:4c:29:0c:55:44:d1:13:bb:51:3f:37:
                    7b:a8:5a:e8:f5:47:ee:3d:8c:ea:2f:3c:ed:6c:4b:
                    bf:09:c9:f1:34:d2:73:62:ae:78:8a:2c:6c:5f:0d:
                    91:27:8a:63:98:fb:f9:69:a7:80:82:25:bd:73:e3:
                    fe:b2:38:3e:57:b7:8e:8f:96:ae:f6:82:86:02:1e:
                    36:02:e7:46:23:ac:8d:fa:17:31:1b:85:32:2e:5e:
                    8e:ae:cc:e1:ab:0f:b6:cd:18:aa:00:e5:d4:f5:d2:
                    4f:88:3b:83:a7:29:bb:f7:fd:29:2c:3f:7f:86:08:
                    55:d1:f8:e4:e4:5e:07:50:00:36:ae:0f:0f:d5:cb:
                    83:5b:6a:af:b6:5e:60:91:6e:17:b2:14:85:87:16:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AB:4D:A6:7B:6D:EA:EF:A8:97:A2:C0:75:97:B2:D7:43:B2:1A:DF
            X509v3 Authority Key Identifier:
                keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a8:14:47:cb:07:80:90:4e:06:65:be:31:f0:11:0b:ed:b3:
         64:7d:41:16:1c:91:5d:52:bb:d4:1e:5b:96:ca:13:8b:d8:4a:
         ba:c3:78:dd:85:fe:24:cd:24:62:c1:3f:93:70:a5:7f:f9:8e:
         1c:65:12:06:44:25:aa:86:bf:9f:c0:a6:b9:3b:58:16:33:60:
         92:2c:2b:9a:6a:c1:b8:c4:25:9d:cb:ba:19:1a:5c:ec:5d:fa:
         b0:e5:ff:cf:f5:f3:40:4f:92:ca:5e:fb:66:b4:2f:d0:09:d6:
         94:20:1c:51:56:a5:d1:83:7e:ef:f4:7c:97:4c:fe:89:84:61:
         86:8f:56:b1:94:17:04:41:a5:3e:b1:11:7e:f8:d2:f8:cd:9e:
         19:cb:0f:b9:20:32:f8:b5:4a:42:90:88:9a:7a:01:ba:13:88:
         4d:41:b3:b6:ed:f4:80:51:ea:ff:cc:52:68:58:8c:b7:68:9b:
         16:53:87:0e:84:ac:86:82:10:93:fd:ee:4d:ef:bd:9c:a6:b5:
         50:3b:f5:d1:cf:a9:e9:40:d2:b3:c7:f6:69:ba:57:a1:e5:9d:
         37:50:b2:82:43:44:8e:5c:61:8c:e9:83:ca:a3:0e:c4:42:48:
         a0:3c:e7:b2:3d:8a:75:2f:09:1a:2d:a1:3e:c9:30:08:32:b7:
         89:c1:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:39 2025 by rpki-client