Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
File:                     sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json)
Hash identifier:          5Kr6qbBBWzc9PGURojTDAb8kqRH1NORT+NTAVsJ7F3E=
Subject key identifier:   55:27:4A:B1:34:33:9B:1A:33:18:EC:0C:32:05:F0:4B:FC:7D:DC:A2
Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8
Certificate issuer:       /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
Certificate serial:       0AFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
Manifest number:          0AF4
Signing time:             Thu 30 Jan 2025 19:20:39 +0000
Manifest this update:     Thu 30 Jan 2025 19:20:39 +0000
Manifest next update:     Thu 06 Feb 2025 19:20:39 +0000
Files and hashes:         1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: 6M8ishvKOXY9OAxnSsK1bupoNDbkMG1a2FGoE3eHuAg=)
                          2: B6EF8F5E3A9011EA957A6A34C4F9AE02.roa (hash: MMg6miblGYwiWs8actEKJcMi2SqNBUoJuKwgQQDzl38=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2810 (0xafa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
        Validity
            Not Before: Jan 30 19:20:39 2025 GMT
            Not After : Feb  6 19:20:39 2025 GMT
        Subject: CN=679bd107-25ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:be:a9:32:3b:b7:f5:13:54:6c:2a:ad:ae:
                    a4:7e:b8:7c:4a:40:57:07:1a:1f:14:5a:90:e9:a0:
                    ca:e6:7d:b6:2a:2f:ff:7e:e2:64:63:e4:53:ac:9a:
                    cd:37:40:11:68:82:b8:4a:e0:58:45:1d:66:91:57:
                    81:6b:5e:36:82:53:e5:1a:00:e4:dc:03:f1:cd:d6:
                    7f:90:71:d3:48:d6:00:00:bf:bf:f2:fc:50:4b:f7:
                    07:ec:d8:f9:18:b0:4d:13:dc:a6:a9:60:d4:e2:0e:
                    2d:2b:af:f9:93:34:cb:4b:3c:7e:80:94:16:0f:c1:
                    52:dc:53:96:af:b8:69:57:71:bb:f0:72:5c:e5:1b:
                    dc:99:7a:a8:1b:07:c7:10:32:c1:d2:49:45:9c:2e:
                    ac:8e:b4:c8:d7:22:52:e3:5b:10:e1:7c:b1:f9:af:
                    c7:0a:22:de:71:74:fd:f3:1e:8b:23:6b:a9:61:c2:
                    a6:93:ba:ee:78:57:81:7e:c1:65:2f:0e:a6:71:0e:
                    e3:96:aa:91:ee:db:ef:ee:5b:77:42:5e:99:b5:3e:
                    89:b6:7c:26:c9:51:a3:06:b4:dd:11:8c:2f:c5:69:
                    d4:48:95:f0:7b:4a:0c:62:4d:56:f0:5c:1b:e2:47:
                    58:b7:74:2c:3d:15:bc:b3:b1:2c:43:0b:c6:8b:43:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:27:4A:B1:34:33:9B:1A:33:18:EC:0C:32:05:F0:4B:FC:7D:DC:A2
            X509v3 Authority Key Identifier:
                keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:26:04:b8:58:c0:25:3e:42:45:f4:b8:04:c1:9d:ef:5c:19:
         8a:e1:4d:8a:8b:44:a7:7b:b2:17:32:a1:c6:7e:41:6f:63:15:
         5e:7b:98:fe:fd:19:43:a2:f3:01:1f:17:b4:6d:2f:02:5a:62:
         9f:c0:1a:62:bc:84:47:30:fb:81:68:81:3a:1b:79:38:d9:a9:
         0e:bd:c0:16:a2:fa:0d:e7:d5:1d:77:8f:31:89:fd:d5:7a:ab:
         c8:8a:21:c5:84:70:90:db:e0:33:f6:56:bc:4b:f9:06:8c:bd:
         d5:0c:a4:a5:c7:f4:39:45:33:fd:88:95:62:98:9d:c5:30:04:
         9e:0d:b7:f4:c4:04:ec:00:32:78:c7:c8:4b:ac:ae:c1:a1:20:
         93:92:aa:39:4c:42:4c:1c:ea:a3:74:1d:54:d2:0d:db:aa:f4:
         1f:d2:2f:31:b8:95:a4:d1:ce:f5:30:7a:6a:1c:82:4e:24:3b:
         92:ce:8f:d7:e7:5f:b2:25:f8:6e:6c:b0:99:59:84:c4:38:6a:
         ad:09:32:6a:f2:4c:8a:c4:6b:90:b4:a5:4d:d1:32:00:b8:95:
         04:3f:a9:ed:cb:e6:50:07:e9:f7:88:d4:a0:84:ef:50:a3:72:
         10:d2:7b:31:d1:d9:b5:91:0d:9a:27:27:8e:12:a9:b5:19:c6:
         e2:18:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:46 2025 by rpki-client