Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
File:                     GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json)
Hash identifier:          Mmlj5QyZYKr8is2cqzJm2sxDDk22BuKLKb3VwoB7U3M=
Subject key identifier:   9E:54:E1:F4:86:F7:A0:10:DF:B0:F9:5F:4C:08:BC:19:3A:6B:0A:E5
Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C
Certificate issuer:       /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
Certificate serial:       05D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
Manifest number:          05CD
Signing time:             Thu 30 Jan 2025 22:52:04 +0000
Manifest this update:     Thu 30 Jan 2025 22:52:03 +0000
Manifest next update:     Thu 06 Feb 2025 22:52:03 +0000
Files and hashes:         1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: InsYXfoYxKKM1tvOF3ucebbtGsSnkCCULYcZtz4Tvkc=)
                          2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: AG/I9mH1UyZkq9/E12LEwMXOooWRDNpPF8GK9+IXR2o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
        Validity
            Not Before: Jan 30 22:52:03 2025 GMT
            Not After : Feb  6 22:52:03 2025 GMT
        Subject: CN=679c0293-bb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3c:25:34:99:9f:aa:fa:36:cc:c5:83:44:03:
                    44:69:76:8e:ff:ba:5f:b9:08:d2:ab:dc:bc:92:bc:
                    ad:cf:bc:1c:f7:f1:ce:e3:f9:8a:9d:bb:24:f8:91:
                    5a:f2:22:71:2f:88:06:df:5e:af:f1:88:fe:cd:4f:
                    cf:ec:e2:eb:33:c5:f1:3c:33:35:ff:7f:47:89:56:
                    cc:5f:76:00:4b:69:bb:e8:35:11:13:9a:6e:59:f4:
                    6a:49:7a:5a:5d:ef:f8:ee:03:de:c0:d7:31:36:3c:
                    55:8c:e1:bd:4e:65:24:40:50:4c:66:54:9a:7c:25:
                    aa:37:5a:5a:65:c1:b8:b0:dd:85:c9:07:b8:7f:f3:
                    a5:3b:d2:64:bd:46:f3:02:37:9a:98:8f:1a:c3:1f:
                    b3:ca:be:23:90:dd:b7:7a:f4:6b:5d:40:a5:20:41:
                    f3:d5:e5:5a:0e:5a:49:1d:85:50:ec:6d:10:c1:fe:
                    39:89:b0:bb:a0:24:f7:a5:49:b1:7c:46:de:34:69:
                    e5:f0:a6:28:8d:7f:df:90:9f:35:aa:09:96:41:ce:
                    32:bb:5f:cf:b9:61:b8:01:87:b4:e6:86:1d:71:bc:
                    50:89:8a:f8:4f:b4:f7:07:ef:3c:e8:e8:4a:4f:3d:
                    1b:88:71:75:92:8d:24:a6:14:73:e1:f6:12:c5:84:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:54:E1:F4:86:F7:A0:10:DF:B0:F9:5F:4C:08:BC:19:3A:6B:0A:E5
            X509v3 Authority Key Identifier:
                keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9c:7b:21:55:f2:e8:94:54:6f:f8:cb:17:cb:51:0a:63:a7:
         35:bf:44:2f:65:90:33:cc:9b:b5:fc:15:cd:80:9d:0f:29:0c:
         34:82:30:78:21:0a:1a:72:1c:24:b4:82:91:c9:29:88:e8:e5:
         55:21:80:60:ff:3e:53:32:39:80:65:28:b3:bf:96:5e:0c:68:
         4d:2b:e1:01:29:81:59:25:95:9a:83:e4:5b:d0:86:07:b7:46:
         de:e4:0b:5b:d7:db:c3:d9:66:cd:d5:57:d5:a1:99:7b:ac:82:
         ae:cf:05:57:0e:66:46:5c:b9:e8:a4:20:2d:d1:70:4e:a8:17:
         24:58:de:21:d2:ff:71:57:e6:37:a6:96:36:75:49:43:88:21:
         bb:61:d1:0c:f8:08:4e:c6:6f:81:e0:4e:56:37:6a:33:21:07:
         25:46:39:a6:70:d5:79:70:2b:12:6f:bb:43:10:00:89:2e:28:
         05:0c:1f:a6:c2:a1:d9:cb:64:b7:e8:a3:e7:64:1d:43:e1:7b:
         d1:1d:d1:98:21:e3:fa:72:58:e9:ef:93:1b:0c:9a:0a:c5:5e:
         d8:8a:f9:8e:c3:47:36:73:b3:d9:5b:1e:74:fc:89:66:b7:b2:
         db:1b:3e:9f:c8:c2:68:f6:3d:cb:8f:ca:e7:34:9d:82:9c:42:
         2f:3b:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:07:12 2025 by rpki-client