Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
File:                     e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json)
Hash identifier:          PlBw8Ypwhv5VXLKa7XQ7dHN4MNagd69RQ6PbEE9y6eo=
Subject key identifier:   90:28:FE:50:A8:1A:22:ED:3B:6A:3B:CF:7A:52:62:C0:C1:1C:E5:02
Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14
Certificate issuer:       /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
Manifest number:          015D
Signing time:             Fri 31 Jan 2025 03:18:49 +0000
Manifest this update:     Fri 31 Jan 2025 03:18:49 +0000
Manifest next update:     Fri 07 Feb 2025 03:18:49 +0000
Files and hashes:         1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: kQLB4USnYhdJXYmjp+uJybc3oNAiaHjCsEdJ/fK85vM=)
                          2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: n6K4D2BF6Z/jg8pmMgx23T1tIpkzmfvCsXfhNFPSXIM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714
        Validity
            Not Before: Jan 31 03:18:49 2025 GMT
            Not After : Feb  7 03:18:49 2025 GMT
        Subject: CN=679c4119-b51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:8b:4f:e3:2d:ad:88:22:1d:91:9a:90:20:
                    6e:f5:c3:f5:c9:08:99:f5:95:30:5f:a4:48:02:64:
                    53:5c:63:50:13:7d:24:7f:6c:33:7c:83:89:b4:51:
                    29:18:cb:ae:0c:ae:bf:71:25:65:26:34:14:57:72:
                    7d:98:d3:bb:95:f1:49:18:66:8c:65:e0:68:9d:ef:
                    dd:cb:9a:83:43:58:7b:6d:02:85:38:10:fd:d7:ff:
                    35:5e:f6:18:11:b8:7f:a0:d9:06:dc:d4:68:ce:84:
                    f7:2a:e1:ee:cf:ad:ce:e9:33:bd:bc:1e:2d:b8:24:
                    67:ed:34:ba:03:59:7e:11:e3:2d:21:fb:ab:fa:d2:
                    db:fc:0d:3a:84:15:54:b5:b2:58:bc:de:ba:0a:69:
                    12:a2:d7:be:93:a3:2f:f8:6d:42:c7:6c:e5:4f:cb:
                    89:f5:10:46:9d:b7:b0:c8:7b:21:08:a7:8c:5d:4d:
                    1e:68:6d:7e:4e:7a:66:f3:bc:03:65:fa:9a:78:c9:
                    93:3e:87:72:fd:ee:16:3a:3f:66:59:c7:cb:9f:bb:
                    10:50:d7:b2:43:d1:58:da:4c:26:14:d7:52:a5:35:
                    20:37:cc:61:00:c3:35:89:bd:eb:61:be:b9:32:67:
                    f7:a7:29:db:f9:70:95:7c:03:3e:13:32:60:17:17:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:28:FE:50:A8:1A:22:ED:3B:6A:3B:CF:7A:52:62:C0:C1:1C:E5:02
            X509v3 Authority Key Identifier:
                keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ab:4a:2b:74:e8:4e:c6:68:4c:cb:8c:b1:6e:c9:32:c7:28:
         c5:1f:e6:67:7c:43:91:fe:4d:aa:25:ec:7f:2f:c8:54:c8:6b:
         78:13:5f:82:97:16:5e:59:07:b8:4d:f2:bb:f9:5d:f5:e9:b9:
         7a:ab:a5:a2:58:fa:3b:46:c4:60:0a:23:64:db:ff:84:ba:76:
         ef:2b:60:00:16:29:ea:78:b3:b2:1f:eb:cd:7d:06:af:8c:0a:
         54:6b:48:60:3d:20:7b:2b:63:e7:17:e7:ce:7a:bc:06:1e:f5:
         62:e4:cc:27:fa:ab:05:7d:a8:6f:b6:e9:ca:af:16:ac:77:b9:
         cf:db:15:08:99:85:61:a2:33:67:45:86:35:0c:ad:b2:b8:c0:
         f1:73:a0:c1:4d:e8:ff:ba:98:de:5a:dc:25:c0:db:7b:15:40:
         4d:7b:a0:bf:8b:3a:57:4f:9d:e2:72:91:71:f6:08:b2:d6:fe:
         2d:90:f7:f2:1a:7c:9f:71:27:6a:64:56:a7:2e:1a:b2:c2:dc:
         66:79:7a:e8:f6:e4:30:14:cd:bc:5e:bf:ff:ca:ee:1f:52:1b:
         21:4c:05:71:fa:d2:98:ff:ca:ef:5f:c4:cb:04:92:6f:54:d6:
         1e:2b:b9:af:7d:99:41:3b:ad:f3:eb:6e:ee:1e:db:79:17:b5:
         cd:66:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:16 2025 by rpki-client