Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          rEE2SScmh8niW3KW0DhRQNqjmwKv5jYOM9vMnFpuMw8=
Subject key identifier:   78:A6:79:74:B9:9B:0A:2A:BD:97:04:78:09:94:62:CE:E8:16:DF:4C
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0E44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0E22
Signing time:             Fri 31 Jan 2025 17:47:26 +0000
Manifest this update:     Fri 31 Jan 2025 17:47:26 +0000
Manifest next update:     Fri 07 Feb 2025 17:47:26 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: WEgR84zLHnzMGLT4znPlVAAc/MXPG6kt1mFuR5Y7Cw4=)
                          2: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: ETZXfLUU8V3KJwKDLSCPK2awgHX/8QZCXq5mNJZzacU=)
                          3: 93713A1442F311EDA8889068C4F9AE02.roa (hash: EzMv5lO9o81NCglSMIqMm+Knptd/vLNcXJNN5+fG3pg=)
                          4: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: codx2KaWlaGrUgOplDGQb2t/gzk8xsI27IkWfU9XUcg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3652 (0xe44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Jan 31 17:47:26 2025 GMT
            Not After : Feb  7 17:47:26 2025 GMT
        Subject: CN=679d0cae-0e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:27:b7:b7:0f:80:8a:05:a8:81:1b:03:59:
                    79:90:d9:c9:7a:d6:fd:f3:95:0d:02:f5:ac:4c:20:
                    29:10:cf:2a:f9:cd:e4:27:f1:61:f6:78:f4:b1:f5:
                    d2:85:43:3e:04:52:07:64:6b:08:4f:a8:8f:90:f2:
                    8e:81:98:ee:72:ce:f6:00:30:1a:1a:65:48:13:c2:
                    3f:da:bd:23:ea:d6:49:a1:7d:b2:91:4f:86:99:46:
                    17:ad:ba:8b:70:c0:2a:fd:ae:bc:aa:bf:83:98:ac:
                    39:f0:71:a1:82:22:12:d7:2a:5b:1f:b1:c1:9e:24:
                    5c:ff:2b:27:f5:e3:2b:9c:5b:2b:38:00:e4:06:80:
                    6b:d1:87:88:21:ed:3b:02:35:3d:db:61:62:09:d4:
                    6a:d1:c4:0e:c8:72:a9:d6:5e:dd:4e:bf:ac:43:f7:
                    f2:47:1d:ca:f4:6d:40:8a:6d:e7:5f:4f:77:d6:d9:
                    ef:e3:04:92:e2:26:9c:f7:82:63:24:54:05:21:25:
                    7c:de:e3:30:9f:1c:8a:9c:be:b8:d9:7d:1c:f8:24:
                    76:8c:77:dd:de:19:77:c8:4b:21:b8:70:39:4d:a7:
                    45:fc:ab:f9:69:44:36:26:6d:c8:c1:e2:b9:68:c3:
                    ef:0a:f4:ca:43:90:28:87:7a:33:23:fb:84:22:35:
                    89:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A6:79:74:B9:9B:0A:2A:BD:97:04:78:09:94:62:CE:E8:16:DF:4C
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5a:7e:2c:27:a3:0c:7c:d8:89:85:95:16:83:65:66:de:54:
         da:26:2d:24:9a:3d:d7:87:de:58:0d:e5:84:60:18:21:1a:64:
         dd:47:16:86:d7:85:4a:2a:15:3e:b6:a8:25:fd:dd:16:e6:c6:
         ab:f6:37:b1:f7:0c:c0:a7:7c:20:4b:9e:60:7b:9a:8d:3c:b6:
         10:2f:32:9a:48:fd:db:44:73:20:10:8f:1d:bc:95:7f:4b:be:
         12:11:da:d9:f2:2f:68:36:1c:93:d3:69:62:fa:d3:bf:7b:ad:
         f1:e9:9f:39:5f:4b:70:dc:fc:6d:87:bd:83:44:b8:b6:ca:b9:
         f3:f5:5f:d3:69:48:dd:15:38:2f:1d:64:8a:8e:cf:1a:dc:1d:
         c7:d6:9c:a0:11:c4:a8:1e:eb:1c:4b:3c:b9:17:2d:68:63:d7:
         f1:ec:4d:44:f8:3b:1f:df:c7:91:84:a0:2b:6c:40:01:5a:ff:
         98:8c:a1:54:16:52:22:20:3f:b6:28:9f:bc:28:9f:9b:61:89:
         a6:86:a7:9c:87:6b:59:a7:47:86:e7:0c:41:67:a4:b4:6b:3e:
         3b:2a:6d:9f:d2:b9:36:7b:20:ed:6a:b2:20:32:67:fb:aa:67:
         33:09:ea:b3:5c:d3:6e:48:71:f2:55:15:34:20:ca:4e:ec:18:
         d2:4b:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:22 2025 by rpki-client