Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft
File:                     7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json)
Hash identifier:          x9vj/BHPOvozIGgVYXuTpqR9DvGhO8DkxGF0uIB87xU=
Subject key identifier:   1B:37:A5:CB:1B:0F:DA:E2:AB:6A:C9:F7:B3:AD:8A:3B:E3:11:7A:4C
Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9
Certificate issuer:       /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft
Manifest number:          39
Signing time:             Fri 31 Jan 2025 06:40:56 +0000
Manifest this update:     Fri 31 Jan 2025 06:40:56 +0000
Manifest next update:     Fri 07 Feb 2025 06:40:56 +0000
Files and hashes:         1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: IPpbl/f+Nj0QTtwbB8JAzp9bWZFRL3MHMYze83cGZv0=)
                          2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: 6Ekj1nXZBXdZ0SK5obl2WhrbeIrpop08pwoR14tlr2w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9
        Validity
            Not Before: Jan 31 06:40:56 2025 GMT
            Not After : Feb  7 06:40:56 2025 GMT
        Subject: CN=679c7078-ce11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:3e:e1:d4:57:93:c7:7e:5b:a5:23:0d:dd:
                    e9:d4:0b:a6:b7:35:f6:c3:b1:0a:71:22:72:47:c4:
                    22:51:3b:34:d8:3c:6f:da:28:86:81:67:49:45:4d:
                    f6:41:b2:55:b3:f3:ab:14:7f:63:7c:30:b9:0c:e5:
                    d8:9c:88:8f:86:0c:f8:94:39:90:93:63:57:4d:e1:
                    3a:65:fb:d9:c2:02:20:a9:7a:b8:fd:9d:62:d1:f8:
                    7a:6e:73:f7:88:ea:28:28:7d:eb:ac:36:ff:a3:c8:
                    85:a2:2f:0d:9c:24:34:3b:9d:2a:c7:df:e9:f8:7e:
                    c4:78:07:58:e6:71:3c:c9:ad:ec:57:15:a1:7f:9a:
                    c1:3e:cc:b3:f3:14:18:64:36:e5:e6:f6:5c:6f:09:
                    d8:ef:07:f2:45:ed:fa:38:95:0a:e8:38:68:45:ca:
                    a7:7a:95:4f:c1:57:fa:22:d3:a7:54:9f:4c:5c:9a:
                    e3:49:b8:b4:bd:4b:32:05:13:80:e9:76:75:c3:c2:
                    e6:e1:d7:fd:b4:f3:27:99:16:ff:e3:57:01:65:9f:
                    29:c5:1f:6e:ba:a0:1f:43:eb:a9:5b:f5:db:44:bf:
                    dd:5e:fd:c6:9a:b2:40:f5:5b:b4:1a:99:5a:ab:06:
                    64:74:c6:ed:99:24:49:40:5f:2d:9f:73:c7:51:78:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:37:A5:CB:1B:0F:DA:E2:AB:6A:C9:F7:B3:AD:8A:3B:E3:11:7A:4C
            X509v3 Authority Key Identifier:
                keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:78:16:68:6c:b1:9a:d8:2e:49:9f:31:75:70:68:a5:f9:5f:
         96:38:e2:33:4a:90:0e:64:3e:0c:9e:6b:4b:d2:9f:29:eb:8e:
         af:ab:71:ad:ab:95:66:e8:51:f4:3e:74:9f:05:01:83:1a:13:
         58:db:6e:a6:32:28:b4:c4:98:28:91:1a:2b:e1:ff:1d:dd:38:
         d1:40:aa:3a:75:60:5c:cb:b7:d9:42:30:ce:e8:2a:23:c2:45:
         2a:1d:35:aa:24:b6:96:e9:c4:ce:be:4a:4e:72:76:ca:70:e7:
         fd:e2:5d:80:4b:76:ff:ad:aa:4c:e4:7e:0e:e6:af:bb:c8:37:
         58:f7:e0:6f:b1:63:4e:73:cd:59:d7:ca:2e:42:1e:86:62:1e:
         64:2a:d1:57:58:90:d2:a9:81:c0:2f:00:f2:6f:2c:ed:a2:6f:
         a2:bb:10:67:10:a5:b3:07:0d:50:5c:7e:7e:11:d5:e1:39:41:
         31:9b:ea:66:7f:57:66:40:fd:0d:1b:22:ef:c4:21:8c:27:5f:
         ed:8f:0f:21:c6:87:8c:65:6f:f5:d3:57:a0:89:c9:f2:ac:e3:
         93:be:2e:0b:6d:4b:bb:62:21:df:38:6b:2c:b9:05:35:2b:84:
         18:ab:3f:46:77:8d:8e:40:7e:a9:23:de:55:21:32:7e:d8:08:
         f9:d7:80:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:26 2025 by rpki-client