Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
File:                     -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json)
Hash identifier:          hseo/Y/f7zmtgjZQzn2hTv9iYCFl1QccPm4Gid10Uxo=
Subject key identifier:   C7:0F:29:D3:D3:1C:3B:39:1C:99:6F:A3:36:AC:5B:77:FE:B6:D1:5A
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Certificate issuer:       /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
Manifest number:          08
Signing time:             Fri 31 Jan 2025 07:13:45 +0000
Manifest this update:     Fri 31 Jan 2025 07:13:44 +0000
Manifest next update:     Fri 07 Feb 2025 07:13:44 +0000
Files and hashes:         1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: 9QX9ftoDogXWYA9Tc0PgHk8HaLx89vzn75UMSlI+DZ4=)
                          2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: EAQQ09z+nA9+id2uzvp7qGBYO8lplKrap01lCURty1I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
        Validity
            Not Before: Jan 31 07:13:44 2025 GMT
            Not After : Feb  7 07:13:44 2025 GMT
        Subject: CN=679c7828-2cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:88:06:56:2b:ed:7b:db:ab:4d:6b:bc:ea:
                    ac:2e:3f:05:52:9c:4f:38:7d:0a:34:45:f4:c6:34:
                    fe:3b:55:9b:83:02:2d:6b:d9:78:87:d4:e9:05:d8:
                    b0:2a:43:2b:ea:2f:13:8e:df:c6:ca:52:17:87:41:
                    93:a6:37:02:5e:ab:e2:e2:a7:af:cb:75:90:58:ef:
                    01:ca:fb:a7:4a:92:89:d8:d4:c8:02:4d:c9:5a:bf:
                    16:fb:a2:a7:57:08:84:d2:8c:c2:45:41:02:7f:cf:
                    a4:3d:3b:56:c2:88:ce:b2:10:c4:37:24:df:30:b4:
                    76:68:02:c8:4a:4f:31:c4:df:e6:00:36:65:24:6d:
                    5d:87:7a:26:8d:3b:2c:78:c4:fc:02:15:2b:53:fe:
                    ce:89:e6:6b:bf:56:5a:bc:e6:a5:b4:63:83:d4:06:
                    83:53:bf:db:6a:e1:e1:c9:09:55:70:83:1d:83:72:
                    ce:b1:e7:36:39:69:7c:be:ad:9b:25:1f:4f:08:0e:
                    30:cc:47:28:b9:e2:b4:00:d2:eb:c1:92:6b:45:29:
                    4e:0f:09:29:a7:57:f3:2f:dd:b1:ab:05:b5:eb:f4:
                    14:0d:b0:ae:4b:a7:87:22:c8:18:9f:b1:a8:6c:99:
                    7e:54:d4:ef:fe:5e:78:81:15:c3:c2:4b:7e:c7:35:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0F:29:D3:D3:1C:3B:39:1C:99:6F:A3:36:AC:5B:77:FE:B6:D1:5A
            X509v3 Authority Key Identifier:
                keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:46:54:c5:a0:f3:54:c1:4e:c8:9b:92:d3:40:0d:1c:be:
         5f:91:3b:8f:f6:a5:d3:f3:ab:2c:dc:d9:7b:ae:fe:da:f2:54:
         e1:e8:28:a1:53:25:a8:a6:6a:db:1e:4d:2d:c3:ab:6e:10:c4:
         77:7b:ca:8f:01:39:cb:52:cf:c2:eb:9b:5d:84:3b:a8:9f:2b:
         20:1e:45:8b:8b:d9:25:ff:1f:49:29:32:99:26:f4:14:73:7f:
         02:71:1d:24:d2:59:71:a0:d2:f6:37:19:bc:77:6a:8b:80:b2:
         c2:4a:37:f5:ca:70:b2:09:bb:34:09:a8:b6:dc:83:54:49:f1:
         ff:9b:b2:27:b6:f9:09:16:95:58:d9:fc:64:43:6d:00:1d:49:
         61:3f:71:6d:f1:4d:0c:85:3b:e9:38:d4:2b:8a:6a:a5:f1:d2:
         2d:97:00:88:ec:8a:05:b5:fa:0c:a4:d2:5f:62:21:6b:82:89:
         d6:31:f2:d2:48:7f:7e:d6:44:44:6e:53:09:24:3d:3e:ac:e3:
         0b:7f:7f:b7:8b:f3:40:f4:ee:1c:cd:64:d9:47:38:d1:90:15:
         c4:6a:2d:2d:4a:b2:dc:fb:42:27:b4:ef:5c:1e:e4:1e:bb:a3:
         08:05:cf:7d:89:7b:4f:16:21:e6:0d:51:34:3e:1c:f2:50:0e:
         6c:eb:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:43 2025 by rpki-client