Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File:                     bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier:          A1UgafRZyLtUCIy0z1djgy48WRrv/L8KXgIcII5glf4=
Subject key identifier:   CB:B2:46:7D:FE:ED:A9:58:37:96:E6:17:A5:2D:28:82:9B:1E:CF:D3
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer:       /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial:       1873
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number:          1860
Signing time:             Fri 31 Jan 2025 16:30:54 +0000
Manifest this update:     Fri 31 Jan 2025 16:30:54 +0000
Manifest next update:     Fri 07 Feb 2025 16:30:54 +0000
Files and hashes:         1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: Mm4MWhtk6xDn04wbZuTC93aZl3XQWe2QGO+HtQ0npEk=)
                          2: 9D849C0C98FE11E7A3A5F161C4F9AE02.roa (hash: htda9TiOIlXHheUEzpXiQijOUgH7nA3aLWyRMRsqm6o=)
                          3: 8C00D5BC94F111EAB30E7682C4F9AE02.roa (hash: K4zc/Pb7wF5tJt5cymiyC6HJ+mYOvXugDRtcMKB/cgs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6259 (0x1873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
        Validity
            Not Before: Jan 31 16:30:54 2025 GMT
            Not After : Feb  7 16:30:54 2025 GMT
        Subject: CN=679cfabe-832c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:94:94:05:f0:fc:eb:f3:6c:74:e8:48:eb:14:
                    4a:18:b4:18:f4:2d:3f:1e:3d:7c:09:f1:ce:87:04:
                    1f:5f:e6:b0:51:23:b3:5e:d5:f9:db:43:cb:8b:61:
                    d9:9c:2c:f1:2a:4a:dd:44:5a:fb:fa:45:b5:c5:f2:
                    49:61:22:c0:6b:db:ba:a9:ed:08:d1:e5:43:a1:69:
                    ed:53:9e:cd:30:a5:72:3a:84:a5:67:5d:b1:6e:80:
                    2d:fa:c1:ec:66:a0:d2:6c:f3:fc:aa:51:05:64:a8:
                    7f:0f:11:9d:30:a7:42:79:f1:05:79:80:ed:50:c6:
                    4d:b1:29:ec:10:e6:fb:96:91:37:46:22:92:10:7d:
                    07:f7:cc:89:75:ef:62:99:ee:69:9c:65:b3:0e:19:
                    d2:bc:7b:65:06:51:af:3b:01:b0:82:a4:06:52:c3:
                    e2:ce:b7:e7:d7:01:c6:07:e4:f6:5c:a7:a6:1d:53:
                    75:aa:a1:ff:4e:c4:11:6f:ef:64:a4:4d:98:1c:73:
                    a6:57:cb:2f:19:35:ce:e1:f8:1b:a0:55:a0:c3:d4:
                    20:15:7a:a7:a1:59:cf:aa:0c:26:3b:52:fe:50:96:
                    ca:bc:01:0f:54:0f:3c:b4:36:66:a1:ac:4d:fd:ac:
                    a7:5e:c7:53:13:87:10:c3:11:54:40:3e:fe:b6:07:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:46:7D:FE:ED:A9:58:37:96:E6:17:A5:2D:28:82:9B:1E:CF:D3
            X509v3 Authority Key Identifier:
                keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:59:91:0f:d4:3a:59:45:ed:41:96:77:bc:0e:9a:ed:a1:b6:
         15:61:a7:dc:b9:0e:e5:88:b3:1a:70:65:4b:6c:4e:57:e5:1b:
         38:10:cf:d8:c9:4e:b3:ca:35:fa:fc:d5:a5:03:7f:59:45:8a:
         28:c1:6a:2c:18:bd:0b:48:9c:91:18:07:8d:ec:ca:00:f2:8c:
         0f:7a:f4:c7:dd:d1:06:db:29:c2:a9:f5:d4:b3:7d:58:54:e0:
         fa:2a:1d:a1:c2:80:75:d6:8a:29:e9:2e:11:f3:d0:d0:b8:f1:
         b3:14:48:a7:57:77:4d:51:4f:26:bf:c7:42:d1:e5:3d:f9:aa:
         f4:04:25:ae:5d:a4:68:39:ac:4d:9c:3e:ea:3c:5a:d4:84:0b:
         ed:20:ee:b7:aa:64:c6:75:1e:e6:55:2e:9c:95:13:9c:02:26:
         d7:4a:8a:67:66:9e:de:5a:4c:20:bd:2e:1e:d2:55:fe:38:99:
         1d:bc:03:b1:3e:38:1f:7e:6a:83:1b:9b:56:bf:a5:22:2b:44:
         e4:00:39:7d:b0:f5:b8:36:37:f1:6d:0c:83:43:8e:84:d9:3b:
         46:e1:3a:83:d1:c7:39:d4:04:7b:27:a1:18:5a:9e:84:07:c0:
         6e:6e:57:48:b7:fa:12:d9:3b:20:e3:43:24:69:36:70:3e:9b:
         8d:ff:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:44 2025 by rpki-client