Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
File:                     Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json)
Hash identifier:          m3UDvqai2shkWs/41h+tJkEcEh3FEVrHl17DMg5CXFA=
Subject key identifier:   0F:0E:2A:40:CB:F0:63:30:39:53:B7:F1:E9:29:63:24:C9:AD:11:9D
Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD
Certificate issuer:       /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
Certificate serial:       0B91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
Manifest number:          0B88
Signing time:             Thu 30 Jan 2025 19:08:39 +0000
Manifest this update:     Thu 30 Jan 2025 19:08:39 +0000
Manifest next update:     Thu 06 Feb 2025 19:08:39 +0000
Files and hashes:         1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: eIPlSaaZXCGWaDSNV6Sgn/ghdIj1TW9Bb+cyX/kS6Ww=)
                          2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: DqpcsnETrsD/ZoudbKc3PullsOFOwG2Q8eehgR+lmOg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
        Validity
            Not Before: Jan 30 19:08:39 2025 GMT
            Not After : Feb  6 19:08:39 2025 GMT
        Subject: CN=679bce37-9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:2a:d6:ea:eb:9c:51:a4:a0:f2:7a:c0:39:
                    2a:7a:66:82:d0:e3:23:fb:d7:59:24:03:e6:bc:c2:
                    15:ed:83:46:e5:5a:4b:83:3c:c5:0b:cd:4c:da:c2:
                    2e:70:4b:25:ff:5e:56:11:2f:90:e3:da:1a:3a:11:
                    91:5e:4d:04:03:49:41:26:17:ae:30:73:9e:32:47:
                    0a:41:51:b5:2d:37:95:48:9c:a8:89:bb:1d:b1:d2:
                    8f:ee:d8:af:32:95:47:c3:94:7c:d1:62:9a:76:ca:
                    b3:e2:17:45:9a:a0:b3:b5:ee:3e:e7:b3:55:96:31:
                    df:3b:65:52:45:a5:dc:e7:26:38:3d:08:be:41:eb:
                    41:24:dd:75:ad:e2:b0:2b:42:27:08:b5:0b:6c:d6:
                    a8:6a:7f:12:52:47:81:9a:91:80:54:c5:98:fe:95:
                    a3:1e:88:77:61:b4:6f:7b:95:56:7e:d8:43:93:6e:
                    fc:35:ef:fe:fc:fc:c8:c6:54:83:cc:e3:14:e3:85:
                    3a:38:a4:5c:fb:c3:c7:c0:8f:11:02:42:6c:fd:2c:
                    11:0f:af:65:37:24:4f:5c:d3:c8:5e:fa:4c:0a:4f:
                    50:9e:18:dd:78:45:70:ff:d3:15:8c:e0:92:df:20:
                    63:01:cc:71:3e:1e:97:e9:9e:d9:e0:a8:4c:80:3f:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0E:2A:40:CB:F0:63:30:39:53:B7:F1:E9:29:63:24:C9:AD:11:9D
            X509v3 Authority Key Identifier:
                keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:59:c4:34:50:91:7a:d5:d8:98:8b:4f:62:b9:bc:9f:55:51:
         c8:55:37:b2:24:8b:ea:51:99:dc:61:cb:32:08:47:b2:43:0f:
         e5:94:4d:19:b7:1e:d7:35:28:a9:cb:b2:03:28:7c:85:30:39:
         11:34:1a:b5:d8:17:28:32:bd:43:b9:c1:bd:59:ee:d1:03:50:
         08:99:ee:69:4a:43:cd:e9:6e:90:ec:89:31:98:04:6b:2c:8f:
         e4:a1:a5:15:5f:e6:a0:06:1b:68:96:d9:b5:f2:20:27:8a:69:
         71:a2:56:64:79:8d:0b:98:d5:3a:e4:f3:48:1e:d8:f0:5f:6f:
         84:ed:d2:04:37:d2:d4:2c:ff:83:6b:15:4d:9b:fd:7b:a0:7c:
         67:f7:e0:b2:89:1a:21:46:8c:e8:5d:2a:fa:47:75:41:ee:19:
         bf:e9:cd:0a:c7:29:2f:c6:b3:6c:22:68:fd:7b:7f:87:1a:e2:
         80:ca:6d:65:3d:6a:66:e8:eb:96:76:a5:5b:3a:a0:a2:c3:15:
         75:a6:27:c0:f4:e2:41:04:3c:96:e1:b3:2d:54:50:2f:79:44:
         eb:bd:81:31:7c:bb:bb:f7:21:6c:93:ac:89:2c:21:21:5f:a2:
         e3:fa:fe:3b:d4:fd:61:4e:53:d3:5c:06:1a:6f:8e:ec:ec:80:
         3e:1a:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:49 2025 by rpki-client