Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
File:                     _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json)
Hash identifier:          JMVJhazUDE/AN+wgrQlmu235z/xWnaqhay0Yk2i1Vf4=
Subject key identifier:   99:32:8B:06:14:7D:16:7E:48:47:1F:C3:44:EA:96:84:18:B2:C2:D2
Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Certificate issuer:       /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Certificate serial:       1AE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
Manifest number:          1ACF
Signing time:             Fri 31 Jan 2025 16:19:56 +0000
Manifest this update:     Fri 31 Jan 2025 16:19:55 +0000
Manifest next update:     Fri 07 Feb 2025 16:19:55 +0000
Files and hashes:         1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: 8dtxGpDTE622S3zcii9fHY8Cbgvj2T74iKDAUfwrdns=)
                          2: 90C8D27021C211E786829418C4F9AE02.roa (hash: LAyDzMwa+0p5sRd95KyHExi3C3Z0niccQY6hw3OgiYs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6886 (0x1ae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
        Validity
            Not Before: Jan 31 16:19:55 2025 GMT
            Not After : Feb  7 16:19:55 2025 GMT
        Subject: CN=679cf82c-76b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:9f:1a:6a:46:bc:86:d9:2c:e8:de:85:0f:
                    fd:e4:40:f3:f8:b7:1f:00:de:f9:a7:a9:9d:ac:d9:
                    00:b0:90:ea:38:3d:43:25:e1:b2:25:99:f7:fd:6d:
                    b7:bc:d1:55:52:01:99:a4:bf:03:ab:e7:ea:57:b0:
                    67:2c:b5:09:74:1f:d3:bb:bf:82:3c:03:35:41:c7:
                    b1:73:fd:0c:e7:ea:37:e4:85:f0:79:41:f0:8f:73:
                    5a:dd:d6:eb:94:2b:98:0e:a1:ca:fe:18:34:b7:37:
                    e4:fd:ab:7f:5d:04:da:4e:91:f2:90:f9:38:a0:9a:
                    f3:07:27:16:de:16:20:a4:fb:0c:f3:c8:b7:96:20:
                    25:84:b8:bf:bc:12:77:ee:54:87:75:e8:37:d7:16:
                    5f:5d:fd:5a:05:d4:d2:cc:9a:ac:8b:03:11:ce:46:
                    0c:56:38:78:c3:38:0e:36:e4:44:96:57:92:11:48:
                    75:0d:55:ec:bf:7e:e5:1b:36:7e:7e:87:52:7d:a4:
                    f4:eb:5f:11:2a:72:91:17:1d:74:3f:e6:09:7d:b8:
                    b3:24:88:56:ed:9d:9c:23:7d:a9:71:13:23:33:de:
                    6c:15:7a:94:5a:02:f9:56:14:65:16:ca:13:7a:15:
                    42:02:56:56:0e:1c:34:ce:a2:2f:26:b0:a8:14:6e:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:32:8B:06:14:7D:16:7E:48:47:1F:C3:44:EA:96:84:18:B2:C2:D2
            X509v3 Authority Key Identifier:
                keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:82:b2:9e:bd:67:30:d8:0d:13:e2:15:b4:b5:66:01:31:
         3c:b2:21:4e:48:3c:ce:99:5e:24:1b:f5:dc:d5:59:3e:a0:95:
         99:fd:88:1e:8b:90:47:e2:50:29:35:61:3d:93:5e:d3:de:03:
         4b:dc:92:4b:8b:29:e5:7c:17:c3:07:e4:a0:c9:12:25:ec:be:
         21:dd:12:c6:3d:c5:fe:f5:2b:61:15:e1:0f:59:5c:af:54:bb:
         63:85:98:3e:6c:ea:cb:4f:73:52:0f:81:d9:3f:bd:46:48:0c:
         3c:9e:8b:a2:b1:57:f6:25:b1:17:e9:f0:e8:f7:03:a2:0c:1e:
         0d:b9:52:08:ea:10:d4:ab:14:28:43:c7:cc:42:51:4e:02:35:
         b6:67:fa:f3:dd:26:12:9f:03:cb:4c:4b:1e:30:84:2e:35:da:
         6c:00:96:a0:c5:86:66:3c:36:9e:7d:02:52:4f:99:03:71:7e:
         9e:08:8c:5e:d4:e3:e4:f9:94:bb:69:13:15:42:b1:76:a2:76:
         db:6f:06:a8:1a:87:8f:7a:3c:f2:b8:0d:f5:2f:9a:14:89:f0:
         18:31:13:5f:55:05:ef:ad:be:9d:79:ec:ac:af:c4:7f:87:bd:
         e5:d9:7d:de:d2:81:99:69:ad:9c:14:a0:af:b0:e8:d2:df:fc:
         b9:f8:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:03 2025 by rpki-client