Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
File:                     u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json)
Hash identifier:          mfdvhLXFWqCEX9cqWdkxaA+nz+CceqoeaqSSx+zekjE=
Subject key identifier:   B3:E7:58:35:6B:FC:A0:BB:65:D3:E8:00:F8:35:4F:5C:60:C7:32:69
Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47
Certificate issuer:       /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
Certificate serial:       032D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
Manifest number:          031E
Signing time:             Fri 31 Jan 2025 01:17:51 +0000
Manifest this update:     Fri 31 Jan 2025 01:17:51 +0000
Manifest next update:     Fri 07 Feb 2025 01:17:51 +0000
Files and hashes:         1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: ZWqX0byTbOtSq9vB3ceW3E46bFQNgPC/OECYhn07g/w=)
                          2: EAC6FF9417C011EF8877F40DC4F9AE02.roa (hash: vNmzdKjnse/Z+176RlP2x/L1BQHH992M43sbUobIhx0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47
        Validity
            Not Before: Jan 31 01:17:51 2025 GMT
            Not After : Feb  7 01:17:51 2025 GMT
        Subject: CN=679c24bf-4e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:30:a8:25:77:d6:f2:b1:23:5d:4b:05:4e:d0:
                    a7:d9:a6:69:ab:26:80:e9:df:38:8f:3f:7c:a2:ab:
                    6a:a9:d1:21:36:35:8c:9a:6f:96:f2:82:ba:52:33:
                    c0:84:ad:b6:8c:80:bb:fd:b5:ec:66:45:44:b9:ab:
                    2e:1b:42:4e:56:8d:f9:3d:99:9a:5c:4b:cf:60:e8:
                    10:f8:31:93:6e:4c:4a:c6:f1:84:ae:27:a1:75:2b:
                    cb:84:65:e1:0f:ba:09:95:bd:bc:4e:a2:96:d9:15:
                    79:92:16:dd:08:da:20:67:1c:a5:8c:99:6b:b5:01:
                    96:85:b3:48:a9:b4:38:36:17:a8:ce:1d:75:e6:d1:
                    9b:03:41:bc:be:d7:8b:d5:bd:4b:92:8e:fc:24:91:
                    c9:f4:8e:4a:21:4d:5d:2d:1b:a1:8f:f4:07:11:04:
                    e2:95:b4:09:e2:f5:53:82:d7:f8:bc:e7:99:8a:6e:
                    c0:9b:e8:7f:00:50:53:eb:02:83:a4:96:3d:fc:a7:
                    13:a8:cf:9a:f9:45:40:c6:95:ab:b2:77:a4:85:09:
                    33:a9:5f:df:bd:d0:8f:54:44:a0:4d:7a:02:25:3e:
                    f7:40:da:57:07:f0:e9:6a:cd:03:5a:8c:4c:6b:8f:
                    83:67:cb:f7:c3:97:4a:e7:ce:c2:cf:5c:8a:29:38:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E7:58:35:6B:FC:A0:BB:65:D3:E8:00:F8:35:4F:5C:60:C7:32:69
            X509v3 Authority Key Identifier:
                keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:c1:35:74:62:e1:d2:bb:d9:8c:29:8d:b1:28:c6:cb:7d:b5:
         b4:56:be:2d:1c:a1:ca:90:ac:4e:60:56:eb:ed:38:44:2d:cc:
         2b:98:87:a3:90:f3:48:0d:f6:d5:09:05:a7:3a:5f:d3:c4:4b:
         81:80:c9:a6:38:e2:20:c5:2b:a5:19:64:cc:52:b7:bf:48:63:
         27:cb:88:b9:5c:71:c3:bc:ba:25:c7:2e:cd:3e:32:55:84:44:
         b0:e8:95:82:c6:23:40:16:96:8a:1b:41:dc:d7:72:76:02:1b:
         bb:81:f2:d7:7e:0e:85:84:e3:bc:c0:91:e6:57:b9:9f:24:3a:
         5b:0b:b2:45:87:c9:61:c2:e8:b1:83:5c:27:58:f9:60:6c:9c:
         9b:04:8a:34:61:ce:2e:b4:ae:af:d6:f3:ac:74:2c:f3:99:ef:
         ea:c2:4c:b2:f5:8d:84:31:f3:6e:53:61:01:57:86:b4:ef:8c:
         14:ec:bb:30:82:19:01:f5:ff:23:aa:44:32:5a:b8:ea:b1:17:
         f9:09:f1:ad:41:e3:29:68:71:c1:43:50:a8:f6:77:3b:71:bb:
         ef:84:83:30:b8:fc:42:53:1b:06:1f:d0:1e:d7:eb:a3:b4:2e:
         3f:c9:1d:0f:2e:03:ed:9d:4f:8d:a9:b1:49:13:25:b8:78:2d:
         52:16:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:10 2025 by rpki-client