Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
File:                     o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json)
Hash identifier:          arImYGYZNSEkWXOrUJ672lKaIAvDV0cQCu61O1DN7jQ=
Subject key identifier:   D0:C4:81:02:11:58:4D:2D:3A:08:2E:9D:43:FD:E6:46:77:4E:FA:B1
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Certificate issuer:       /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial:       03C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
Manifest number:          03BD
Signing time:             Fri 31 Jan 2025 00:42:49 +0000
Manifest this update:     Fri 31 Jan 2025 00:42:48 +0000
Manifest next update:     Fri 07 Feb 2025 00:42:48 +0000
Files and hashes:         1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: BGiNV7/g0w7NvxSJ5n7S733Nv7sC7tYlBZUUQeBpcM4=)
                          2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: PnVC3vOx/m/d2i5GijyZP2nHOvoHme0AIyPBMzeLZ6g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961 (0x3c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
        Validity
            Not Before: Jan 31 00:42:48 2025 GMT
            Not After : Feb  7 00:42:48 2025 GMT
        Subject: CN=679c1c89-172d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:61:46:67:2b:8f:92:3d:96:46:d4:4f:c9:
                    a4:f8:bd:cf:a7:96:7e:72:b6:78:31:ab:26:85:df:
                    c1:82:6c:1c:5e:63:f0:4d:9e:e0:3f:55:8d:b6:9f:
                    2a:c4:fe:d7:c7:e6:3f:91:cb:4a:8a:74:6a:b5:47:
                    51:8a:94:39:d1:29:ca:0a:63:a4:63:d4:33:d4:89:
                    0d:02:39:03:09:88:6d:4b:64:37:19:7e:bd:55:ee:
                    4d:7a:8b:37:74:82:b3:22:c1:52:17:24:eb:c2:11:
                    91:b8:72:af:bd:da:2e:74:1b:08:62:10:f2:41:c2:
                    90:b3:2c:2f:f4:4c:a8:f7:c1:35:9f:0f:61:eb:82:
                    82:da:55:c1:e1:80:15:02:9c:09:72:2c:99:a7:c3:
                    3d:2a:22:ca:ba:c4:69:8b:11:28:be:42:a3:fc:fd:
                    9b:42:52:5b:d0:38:7e:a1:18:ad:d9:c3:51:33:a7:
                    39:a7:ee:82:7c:ab:3c:2e:e1:f6:54:23:f1:45:50:
                    98:07:44:3e:a7:ff:f4:b0:3a:c7:41:65:18:a3:eb:
                    2b:26:74:a4:e7:e4:74:2d:69:d9:ab:a1:bc:81:dd:
                    5f:5a:59:d7:8c:e3:42:83:14:40:85:5f:61:ff:51:
                    e9:cd:c9:c9:03:9c:4d:06:43:01:3d:b2:3c:01:44:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C4:81:02:11:58:4D:2D:3A:08:2E:9D:43:FD:E6:46:77:4E:FA:B1
            X509v3 Authority Key Identifier:
                keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:8f:64:d8:9a:07:8c:3d:55:35:9b:d6:a0:2f:b4:88:0b:
         46:1d:ea:e3:d9:17:e4:44:4f:d4:4a:a2:c1:a3:11:ac:e1:85:
         97:56:cd:3a:94:33:c4:85:47:55:29:aa:54:2e:84:a1:59:a3:
         60:a7:9e:68:32:b3:7e:fd:79:69:00:e6:45:4a:87:61:ed:e5:
         af:73:65:77:e1:59:a2:25:67:92:65:d6:ff:36:03:97:ed:3c:
         58:dd:d9:08:f7:78:53:39:fb:91:c8:f4:4d:86:1f:58:fe:28:
         50:62:1a:8b:be:d0:89:5e:34:95:7f:63:c9:1d:d1:37:02:ce:
         a2:65:ff:94:d1:d4:33:a8:f4:0f:5f:05:93:22:c3:a4:74:5f:
         3e:80:07:30:e6:29:0a:5c:d8:5f:bc:5c:4e:1f:e3:07:8e:84:
         2a:2b:34:91:cd:2a:9c:51:0c:20:ba:c5:1a:e5:8e:1b:f7:7c:
         d9:4f:ee:b8:e9:ca:8c:1a:5f:ba:c7:d6:ec:09:92:3e:91:f8:
         c9:3b:50:b3:90:d8:33:dd:75:78:0b:33:70:f0:ca:22:c3:63:
         3f:a9:fe:11:02:4a:cc:7c:8c:9a:82:14:e2:55:dc:11:75:96:
         80:e3:77:c3:7c:10:c3:f2:bd:b2:ae:75:cb:af:7f:f5:fc:fe:
         f2:6c:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:20 2025 by rpki-client