Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
File:                     aw5C2IWeCxzeVBV6y412BK0_8bM.mft (raw, json)
Hash identifier:          KM5GQwWIqISr2G1O53/GSVJfEe4MLwQTPYLS3IhAeJo=
Subject key identifier:   D0:D5:BC:79:56:55:56:E6:88:6E:8D:80:95:78:D0:97:FF:35:B5:AB
Authority key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3
Certificate issuer:       /CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3
Certificate serial:       353D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
Manifest number:          34D8
Signing time:             Fri 31 Jan 2025 14:21:07 +0000
Manifest this update:     Fri 31 Jan 2025 14:21:06 +0000
Manifest next update:     Fri 07 Feb 2025 14:21:06 +0000
Files and hashes:         1: aw5C2IWeCxzeVBV6y412BK0_8bM.crl (hash: raMakSbz5GU6qWXaYGcNqCec5SYSgBgbzho8lPt4fuI=)
                          2: 4265BD864D5811EF98470D6DC4F9AE02.roa (hash: DI0whxBE0VRYz5yAE2OsMixzXg5yBtVwc2go7LOY180=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13629 (0x353d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3
        Validity
            Not Before: Jan 31 14:21:06 2025 GMT
            Not After : Feb  7 14:21:06 2025 GMT
        Subject: CN=679cdc53-277f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:be:3e:0f:b3:83:5c:62:16:a4:c7:0d:ee:
                    20:d2:b8:b2:63:6e:ab:80:c6:0c:07:f3:6c:7d:cc:
                    5a:8a:be:ce:eb:22:dd:73:3c:64:ef:20:7e:d6:62:
                    78:db:ef:60:14:5e:68:bc:9d:ff:57:16:62:07:16:
                    84:58:ba:ef:8f:12:c9:61:5a:df:b3:3d:57:c0:96:
                    0e:11:d0:df:3b:68:f4:32:fa:bb:9e:e7:d8:89:1d:
                    a8:16:1e:f5:ba:2c:7f:22:b0:a1:34:ec:49:99:98:
                    8b:4c:19:4c:29:ed:32:7f:aa:76:18:f8:7a:b9:d2:
                    b5:82:5f:e0:14:a3:4f:e1:72:f8:cb:c0:06:f3:47:
                    9d:b8:1b:90:28:5f:43:50:ec:89:6e:1a:3d:2c:e8:
                    8a:d7:72:21:07:2c:bf:48:dc:98:97:f3:0d:3d:e4:
                    1d:38:cf:ce:6d:ad:e2:5c:c7:55:5f:b6:cd:3f:3a:
                    4f:39:86:e8:41:6b:5b:8c:e0:02:9c:72:6c:07:d9:
                    95:25:ee:ea:04:16:f5:4b:81:ee:38:6c:4f:5e:0c:
                    e0:7a:e3:76:07:6b:6e:05:32:9c:1a:0e:c1:d6:b9:
                    08:84:71:72:45:4d:29:2b:ed:6b:c2:2d:a9:1f:e8:
                    f7:2f:f1:b9:2b:77:5f:cf:a2:32:e8:ad:6d:50:4b:
                    5c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D5:BC:79:56:55:56:E6:88:6E:8D:80:95:78:D0:97:FF:35:B5:AB
            X509v3 Authority Key Identifier:
                keyid:6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ad:b3:00:5c:87:27:a3:9d:8a:9a:5f:e5:41:3d:1d:fc:6c:
         6f:ea:1f:25:72:71:e8:3b:47:1e:7d:7f:ab:54:1f:2b:e2:2f:
         20:d7:3e:84:ab:53:c5:27:fb:6d:83:c0:de:2a:dd:0a:a7:60:
         59:0d:7f:e4:8f:7f:44:1a:78:02:3a:b4:f9:36:4a:93:15:a2:
         18:fd:51:9e:98:c8:5d:96:12:e2:e6:c0:0a:94:76:a6:52:14:
         71:66:d1:24:02:6e:40:1e:50:de:61:2b:19:d7:dc:1d:47:bb:
         f1:a6:51:60:5a:54:94:14:9b:b7:58:dc:8c:3f:e9:94:03:c9:
         04:03:72:8b:98:65:50:a7:12:37:09:0f:67:15:cb:52:12:fe:
         cd:6c:ad:05:4f:78:fe:f3:3d:91:21:3a:73:00:30:f3:b8:4e:
         ab:ce:ba:29:ab:e5:d9:92:6f:7c:c4:c6:f7:64:17:09:9e:ea:
         99:a7:e2:d8:11:a9:4a:6f:98:38:69:a0:9b:62:91:64:09:a5:
         24:fe:08:40:16:8d:4a:ee:14:f4:0f:82:b7:e0:b4:f6:15:03:
         16:28:c1:2b:e4:3b:5c:7d:50:6a:47:be:1d:e7:d6:54:50:af:
         e3:cb:6c:68:98:86:37:d1:01:f5:0e:64:ee:a1:2f:c2:fa:71:
         f7:42:66:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:20:18 2025 by rpki-client