Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File:                     UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier:          gE/XvLWuzoyNC1fL2eeVPND+HqOCFSburN5FTWL7wGA=
Subject key identifier:   9E:4B:0E:31:42:09:FB:33:7F:BD:6E:E3:B1:5C:9B:DA:74:51:87:3E
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer:       /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number:          A3
Signing time:             Fri 31 Jan 2025 05:21:37 +0000
Manifest this update:     Fri 31 Jan 2025 05:21:37 +0000
Manifest next update:     Fri 07 Feb 2025 05:21:36 +0000
Files and hashes:         1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: PtlLycWYtGDioYIog44Y7aPtZZEJHHVnqWctThbuU7E=)
                          2: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: pZLz3ej+tVLc2J7+rwf06tDZnqs3dwrJq7aVxSC7rms=)
                          3: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: /2tjWIi0u7oNCgmiDrZKKU8I6bZFjH4t5+cXs2Pyels=)
                          4: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: lNdrav2FKiwHzQRaLPDIVyHVR0XthNGpd6hQfMeEMGo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
        Validity
            Not Before: Jan 31 05:21:37 2025 GMT
            Not After : Feb  7 05:21:36 2025 GMT
        Subject: CN=679c5de1-1fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:aa:a3:0d:37:ba:ab:0b:21:84:f5:32:93:
                    e0:07:c2:ab:6f:36:00:2a:79:95:0f:31:b9:0b:ba:
                    7c:8b:86:45:23:03:37:7b:7a:c1:e2:6b:b2:f2:6b:
                    ee:21:b1:e3:48:72:16:8d:76:a0:97:ca:18:6f:e8:
                    ff:ee:e0:5c:6a:fc:a7:85:2d:b7:8a:ee:d0:7a:31:
                    2f:73:54:9d:99:e5:ef:1a:08:b5:91:47:92:9f:39:
                    a8:df:c0:b1:0e:2a:1a:9a:b2:eb:fc:ca:a4:71:ee:
                    f7:b1:7c:0d:55:36:22:be:72:63:2c:08:9c:f3:69:
                    ce:69:ef:53:0b:12:8d:74:c4:38:df:ce:a9:60:44:
                    12:5f:82:05:6c:86:fc:71:0a:f9:37:42:8c:b7:95:
                    51:0f:f2:ea:36:af:f4:3f:a8:49:14:00:2f:11:87:
                    1b:8b:03:5e:e3:57:cb:8e:8d:14:38:a4:03:30:12:
                    7c:82:7a:df:59:ba:db:89:ee:bc:f8:10:93:f1:2f:
                    e9:64:ea:b1:9c:c4:af:bd:6f:ba:98:f0:ba:49:26:
                    b0:79:ad:16:f2:47:f3:22:23:1d:b1:22:fa:46:c2:
                    82:a2:ab:4e:1f:aa:5e:f4:db:f0:c6:82:31:60:af:
                    fa:ce:88:5f:77:70:59:55:9b:ad:53:46:f0:d8:b7:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4B:0E:31:42:09:FB:33:7F:BD:6E:E3:B1:5C:9B:DA:74:51:87:3E
            X509v3 Authority Key Identifier:
                keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:de:fa:d3:da:95:04:2d:f1:09:93:5b:f9:f4:d7:08:04:7f:
         97:cd:19:44:1c:bf:d0:b2:dd:f2:10:c1:04:7d:87:c6:45:02:
         c6:e3:00:17:a1:44:94:eb:7b:9f:fa:c2:1d:65:a7:05:2e:0a:
         a7:62:fd:98:fc:bf:3d:37:3d:49:69:ec:6e:42:a4:3f:6f:eb:
         6d:84:3d:1d:1c:e6:73:c1:75:6f:fa:a3:56:6e:a3:4a:c8:4b:
         d6:13:11:9a:79:5b:a6:f5:5a:c3:e7:d0:f6:21:4e:e6:df:55:
         3b:0c:b7:d6:a9:d8:36:b4:44:da:8c:b1:3c:3d:fb:e6:68:f9:
         72:0e:6a:e5:5f:17:53:c7:d4:03:d9:8a:2f:22:3b:f3:ff:77:
         cf:40:a5:25:23:e2:a5:12:25:f7:b1:c4:a9:67:f5:66:63:4e:
         53:1c:4b:ee:d0:41:69:eb:f5:1d:60:38:ba:4d:1e:f2:81:36:
         d6:ed:30:e5:55:fa:f6:1d:ae:4d:95:05:e3:d8:6f:e0:00:68:
         c6:6d:66:25:11:3e:ea:04:f0:52:ba:e4:fe:54:ba:5e:a5:fa:
         85:f4:ae:f7:bc:57:94:bc:82:92:eb:d6:04:87:7d:4b:1b:f7:
         4c:9b:6c:a3:f3:78:46:3a:1e:6a:76:be:cd:67:b9:5c:8d:49:
         65:06:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:37:10 2025 by rpki-client