Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File:                     VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier:          q7uKXy0CHCAjdwbBCSK7F6GnJQM7Anh0+D5hEoB6Uck=
Subject key identifier:   2C:F6:21:64:81:9C:39:68:5B:0B:A0:3C:21:F4:53:50:21:35:8C:96
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer:       /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial:       1652
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number:          163F
Signing time:             Fri 31 Jan 2025 15:36:31 +0000
Manifest this update:     Fri 31 Jan 2025 15:36:31 +0000
Manifest next update:     Fri 07 Feb 2025 15:36:31 +0000
Files and hashes:         1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: QYoF6z+pXpUSarTOkYk4fCbnCEBrnme068Whu1Mu5ps=)
                          2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5714 (0x1652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
        Validity
            Not Before: Jan 31 15:36:31 2025 GMT
            Not After : Feb  7 15:36:31 2025 GMT
        Subject: CN=679cedff-0d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:87:cc:a8:b6:df:8a:44:2e:3e:53:ce:23:
                    70:02:1a:53:ad:a7:ab:29:88:b5:f4:c8:70:2e:8f:
                    e8:39:03:c3:19:84:9c:f3:95:ac:2b:20:cb:ee:a2:
                    e7:8b:1f:80:fe:fd:08:0c:4c:32:9c:46:6c:c3:73:
                    1c:9c:c3:a2:5f:71:21:da:af:3f:aa:df:a2:72:34:
                    cc:19:6f:a8:40:5e:4b:85:a3:de:62:74:fb:a7:86:
                    6a:e4:f2:53:74:70:ae:43:a4:b8:d1:ec:d9:01:b4:
                    d0:a7:0a:ab:78:f3:a7:82:c5:9c:c1:45:a1:fe:5b:
                    3e:b0:77:96:41:62:90:7c:4b:e4:e2:2d:2a:36:6d:
                    a5:4d:96:22:3d:bc:5a:ec:9d:4d:02:11:ab:0a:61:
                    ad:2c:0c:61:08:36:e6:ae:83:1a:c8:7e:8f:e9:3b:
                    7e:5c:c3:cd:d4:ba:cc:36:e2:04:ed:e0:48:fe:e2:
                    f9:bd:51:21:63:ea:8d:78:bd:f4:22:4e:43:56:30:
                    81:9b:15:2d:35:11:f3:2e:7e:d4:41:03:80:e8:17:
                    bc:78:3b:2f:05:6b:5d:c4:0d:ec:55:64:d5:9b:a5:
                    e0:01:b0:41:9e:88:a8:e9:0c:ce:e3:53:b2:1b:78:
                    00:ed:9c:08:af:f1:d1:bd:97:44:f8:89:25:50:cd:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F6:21:64:81:9C:39:68:5B:0B:A0:3C:21:F4:53:50:21:35:8C:96
            X509v3 Authority Key Identifier:
                keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bc:67:61:ce:6c:0e:58:54:da:31:5b:a0:9e:53:e4:2f:5a:
         bd:b0:d9:f5:04:9b:13:ce:d0:30:f1:ed:76:7b:95:d8:cb:0d:
         57:e8:6f:a7:1d:28:67:fa:a8:71:96:bd:e3:38:71:8f:3d:30:
         3a:71:81:ae:5d:a9:b7:93:dc:42:f5:3c:e8:78:28:99:68:55:
         92:c8:69:e6:e2:39:9d:d7:bf:6f:f2:b9:f4:1d:41:d0:60:b1:
         29:05:be:6f:fb:02:02:73:19:7b:b3:47:aa:29:52:f9:aa:bb:
         d8:da:73:9f:90:10:ac:bc:1f:33:4c:ab:f7:e8:e1:1b:f4:d0:
         99:06:19:e0:35:f4:b2:3d:1e:e9:44:69:b3:f7:bf:87:53:ac:
         1e:32:31:d5:5f:58:fc:a6:3b:be:c6:c4:10:23:4d:07:9c:75:
         83:30:f6:d1:8b:f6:7a:25:01:f4:1a:a7:ae:33:ca:ce:f9:8b:
         f4:46:a4:1a:ed:0e:1c:f4:ec:ca:96:dc:75:d8:2c:37:cc:1d:
         86:e7:a4:dc:3d:46:94:7a:5b:f4:99:39:ec:26:59:0e:c4:a9:
         da:5a:a3:a3:02:1b:ee:74:72:37:44:c5:46:6d:e5:cb:11:b0:
         8d:c5:e9:f5:15:30:56:11:d3:fb:e8:6c:3b:46:ff:e8:9b:54:
         35:66:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:26 2025 by rpki-client