Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
File:                     Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft (raw, json)
Hash identifier:          BftKAaDrXP1Ber9498gi/+j6Bt+0A8X0nBcMDSlQy5w=
Subject key identifier:   91:9A:11:D9:89:77:9D:9A:3A:CD:AE:4C:5F:46:55:3E:49:F4:0C:46
Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58
Certificate issuer:       /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
Manifest number:          0187
Signing time:             Fri 31 Jan 2025 02:51:49 +0000
Manifest this update:     Fri 31 Jan 2025 02:51:48 +0000
Manifest next update:     Fri 07 Feb 2025 02:51:48 +0000
Files and hashes:         1: Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl (hash: D5EuvBZfAlbICCc3k0fT0FRCprZArORiigVsnDzZeXc=)
                          2: F56B35708C0011ED836F0539C4F9AE02.roa (hash: UfZMrxaB0qz4pcGB9q6XltymVUTNDZVQp2pT7h14Zqo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158
        Validity
            Not Before: Jan 31 02:51:48 2025 GMT
            Not After : Feb  7 02:51:48 2025 GMT
        Subject: CN=679c3ac4-ffe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:4c:d9:3d:f1:46:69:6c:be:9f:fa:f4:2e:
                    03:21:6f:87:03:a0:53:18:f4:f1:9f:26:00:55:da:
                    38:0f:8a:dc:7b:39:84:a2:eb:f7:e0:3e:71:6b:71:
                    18:84:89:9c:da:b0:72:01:27:a0:b0:3f:ec:f7:39:
                    3a:95:d1:5f:69:bd:d7:4f:47:a4:87:4f:ff:4f:86:
                    88:ea:e6:c2:55:e9:00:ef:33:55:16:c1:da:ed:42:
                    06:82:7c:c8:f4:8b:8d:a5:ec:02:10:67:f3:14:f3:
                    79:45:c6:53:ba:6f:04:c1:e8:25:08:3f:0c:d1:59:
                    04:ed:a0:e5:b5:81:08:44:d2:38:22:1c:b6:31:40:
                    47:9b:f0:61:91:7b:59:fb:28:2d:f0:db:f9:1a:4a:
                    ee:c5:cb:22:8e:0d:59:c6:22:a4:93:be:5f:6e:38:
                    51:c4:f2:49:8d:5d:7c:9d:c8:32:a9:b0:62:2e:7e:
                    00:c8:ec:42:6c:d2:a2:f5:23:79:04:c5:29:e7:8a:
                    71:c8:20:03:86:bb:37:b9:44:48:ec:32:f2:b3:95:
                    e1:1a:ce:28:b5:c5:bf:9f:cd:b3:f5:1b:17:60:3f:
                    fa:33:a9:66:8a:e9:6d:fd:09:f0:65:31:fe:80:57:
                    19:99:7a:fc:ae:e9:9a:4f:69:de:37:72:eb:01:e2:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9A:11:D9:89:77:9D:9A:3A:CD:AE:4C:5F:46:55:3E:49:F4:0C:46
            X509v3 Authority Key Identifier:
                keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b4:02:86:f1:ae:66:b9:99:7e:7f:1c:d4:3d:c0:bb:5e:39:
         ea:ef:d9:87:1d:9a:c2:7e:4b:1b:21:36:01:4f:d2:bd:d0:95:
         ed:1a:56:77:cc:6d:c5:16:05:1f:ca:c9:6a:a4:56:d7:1a:c5:
         fd:30:0f:f4:cd:5e:24:98:e6:73:8c:0d:de:3d:f9:1a:e8:fb:
         95:53:b8:67:0d:f6:55:dc:50:8d:ba:bb:fb:11:d3:08:1f:e6:
         b6:6c:b8:02:c1:a6:ed:d8:38:87:0b:47:c6:da:e5:01:e1:ae:
         3d:eb:f0:fb:1f:fe:fc:f8:8c:43:49:40:2b:f4:51:47:ee:d6:
         d5:af:21:df:4d:db:ca:02:37:43:54:38:12:d2:34:b6:88:9a:
         15:e6:ff:7a:1f:43:2b:59:ca:1a:dc:55:06:6c:fd:10:ae:18:
         5e:52:28:e4:8c:0a:95:c8:0c:0b:c2:59:13:91:12:f3:86:20:
         49:7d:39:4c:03:0d:36:2d:d8:96:7a:7c:3f:6c:3d:79:93:43:
         bd:01:22:75:4a:8a:8f:87:32:3e:55:3a:9e:9c:43:e0:4d:c6:
         c0:58:79:ce:28:b1:90:2e:fb:54:33:90:2f:e9:37:f2:a5:6a:
         47:6f:96:66:e2:ea:d5:0c:d0:89:f5:81:87:f2:dd:96:bc:c7:
         0b:d3:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:08 2025 by rpki-client