Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
File:                     C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json)
Hash identifier:          62jsszF+qzk2aho8blVSX/jGdUDNrwBSvX8ZPooTyDs=
Subject key identifier:   0F:96:0E:F6:CE:0E:5E:58:E6:C3:81:CB:C1:D6:BF:7A:24:B9:9B:77
Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF
Certificate issuer:       /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
Manifest number:          0140
Signing time:             Fri 31 Jan 2025 03:35:59 +0000
Manifest this update:     Fri 31 Jan 2025 03:35:59 +0000
Manifest next update:     Fri 07 Feb 2025 03:35:59 +0000
Files and hashes:         1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: 2TsxCRXd42FhBWALuNUECDbiJGlKFvfsF7wTc2jZrog=)
                          2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: HTdqH+rVkV/AtsO/FyEhhxX1Ymy2SFkUhzQ9lJgZ3eM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF
        Validity
            Not Before: Jan 31 03:35:59 2025 GMT
            Not After : Feb  7 03:35:59 2025 GMT
        Subject: CN=679c451f-ff58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:29:a2:7c:4a:98:6a:47:82:54:ce:48:bf:
                    4f:df:a4:22:4e:69:24:6f:1a:88:e3:26:27:17:f3:
                    de:c2:c8:ed:25:aa:0a:64:4b:99:f2:e1:17:6c:05:
                    17:fb:ae:23:30:53:ce:8c:64:2b:ef:bd:ea:23:c3:
                    ba:e5:e4:2e:ee:80:eb:c3:d2:d0:5f:a3:1c:e9:6b:
                    e1:09:7c:6a:4c:3b:05:19:6c:9f:df:a5:e6:17:27:
                    d6:7d:84:91:0f:19:ab:3d:a8:1c:2e:4a:d3:bb:18:
                    02:39:dc:1f:f7:b2:a3:ba:16:34:3b:54:45:64:c3:
                    73:51:47:ab:7b:da:4f:4b:53:24:5f:32:45:92:19:
                    3f:94:41:ea:2c:f4:00:ac:89:0f:6e:f8:f7:f5:83:
                    a3:1e:1d:ec:8b:7f:c3:f4:86:26:d4:ed:ec:92:d5:
                    4e:4f:00:55:dc:e0:37:c3:19:16:fb:1f:53:61:3d:
                    b9:7a:73:0b:7f:ee:56:29:20:79:e1:2b:d1:81:ee:
                    d9:16:0d:ee:06:a1:ec:84:30:be:07:1c:d0:48:80:
                    54:0d:f4:8e:4d:4d:df:55:30:e1:67:0a:93:b6:39:
                    d6:97:ba:50:98:7e:b7:8e:ff:01:9f:df:bc:15:af:
                    22:d8:d1:5c:38:44:b7:30:87:7a:ee:0e:40:d0:e7:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:96:0E:F6:CE:0E:5E:58:E6:C3:81:CB:C1:D6:BF:7A:24:B9:9B:77
            X509v3 Authority Key Identifier:
                keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1e:74:bb:16:52:b0:07:d5:e9:ad:00:29:64:2d:65:76:52:
         73:35:46:7b:05:36:69:50:3c:05:1d:77:35:23:c2:84:47:35:
         2c:61:63:86:a2:65:77:d9:83:85:8e:f8:28:3a:be:17:eb:e3:
         50:36:30:92:81:61:af:81:8c:85:19:5c:d4:5e:8a:c5:7b:e8:
         b4:f7:28:0e:90:f2:e0:d0:7f:cd:b7:c8:83:c0:75:da:6b:2f:
         4c:09:73:95:ec:8f:c2:6b:f0:21:36:03:2d:45:a2:86:c6:65:
         32:3f:d8:dd:2b:8e:93:9c:e9:89:bd:6a:56:ea:76:97:55:ff:
         80:19:a5:52:5f:2f:fa:7c:a9:e1:34:e3:89:b8:f5:6b:b0:b6:
         70:f4:76:6e:00:af:99:99:1a:56:26:9b:11:19:c9:1e:24:78:
         47:6a:2a:d0:74:45:6b:38:1d:37:14:46:e0:78:a0:db:9f:93:
         c0:c3:d5:91:ed:bf:85:c8:d3:0e:47:31:40:79:00:1b:e8:38:
         b7:1e:6b:06:0d:53:88:c9:f6:e0:c4:e5:79:b7:51:07:9a:6b:
         a9:17:3f:7f:86:83:d9:59:ab:6c:cb:43:76:be:72:5d:ff:64:
         a0:66:5b:7f:73:84:83:32:62:4e:23:85:0b:be:a9:ac:22:0e:
         f0:58:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:25 2025 by rpki-client