Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
File:                     -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json)
Hash identifier:          rLbm3w3SuqDYfzFldPwQbT9sVvBdKwgx7VEP66VqSUE=
Subject key identifier:   44:96:37:1C:45:6B:7E:82:E7:4E:D2:22:16:CD:2F:AC:8B:41:6D:B9
Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B
Certificate issuer:       /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
Manifest number:          F1
Signing time:             Fri 31 Jan 2025 04:25:23 +0000
Manifest this update:     Fri 31 Jan 2025 04:25:23 +0000
Manifest next update:     Fri 07 Feb 2025 04:25:23 +0000
Files and hashes:         1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: OsBk0ziUljZIOa5OQmHxJclh1LkclBrg/kGwOGsT8J4=)
                          2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: S9XPQFthPE5Y2c4Zah68ASzF7/aBsexwAKNyaxY/Mbo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
        Validity
            Not Before: Jan 31 04:25:23 2025 GMT
            Not After : Feb  7 04:25:23 2025 GMT
        Subject: CN=679c50b3-a172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:a7:2b:80:a4:94:50:47:e6:a6:fa:21:84:
                    5e:0a:d9:cf:88:0c:61:76:75:65:9f:a0:ee:d7:e7:
                    57:36:68:96:5e:9f:87:8e:e6:af:37:a4:fa:de:28:
                    82:cc:be:4e:ea:0a:19:c8:8f:06:a5:18:d0:83:29:
                    42:4d:d8:c4:58:69:74:9f:b6:79:05:77:bb:df:1a:
                    85:db:ed:6a:e4:be:78:85:2a:7a:a9:62:c1:c3:9c:
                    b7:69:72:a0:b6:d0:c2:03:5a:d0:60:87:6e:7f:7e:
                    e4:1e:5d:44:83:70:7e:f9:77:21:a1:a7:c0:50:22:
                    0b:67:0a:60:6e:80:c3:93:27:e1:c2:88:ed:d2:c6:
                    2f:af:9a:fa:75:71:21:5c:24:cb:c5:b8:5b:95:94:
                    ee:a4:d9:da:1d:0f:a4:08:f1:0f:8e:59:db:cb:8f:
                    44:45:d0:fc:42:5c:e3:73:81:b9:24:27:e5:f1:2f:
                    e4:4c:cb:11:2c:6f:82:c3:24:e9:f1:6c:3c:f1:75:
                    a2:78:e4:96:ed:75:41:a0:fd:4e:86:fd:77:bf:9b:
                    ec:94:3b:3c:9d:b4:8b:9e:9d:fb:50:2d:b7:df:e1:
                    af:29:b5:3d:33:e5:0e:ba:ad:2e:c1:33:bb:db:d1:
                    e1:e8:70:7e:84:a1:f8:eb:f8:bf:30:67:f1:db:57:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:96:37:1C:45:6B:7E:82:E7:4E:D2:22:16:CD:2F:AC:8B:41:6D:B9
            X509v3 Authority Key Identifier:
                keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:60:74:33:ae:ac:96:cd:32:24:0f:52:8d:a1:f4:0b:03:03:
         ec:7e:ba:28:bb:58:fd:92:f4:dc:13:b7:a0:16:dc:02:a7:79:
         56:e4:4c:ad:e7:97:ac:fd:3b:06:b9:ec:7b:30:1d:6d:68:11:
         1f:0f:fc:62:fd:2b:2b:62:a5:16:e6:9c:18:c7:ef:93:ee:ed:
         9a:ba:e2:77:dd:e9:a6:66:e9:03:51:1a:51:f4:00:dc:00:03:
         97:c7:14:9a:f2:86:ff:de:9a:ec:83:c6:36:19:3e:0b:56:94:
         b2:ed:b2:16:6d:d8:23:86:84:db:5c:de:3e:9e:5f:f6:f3:bb:
         f5:6b:d0:f3:e5:e5:1e:fa:ab:44:47:8a:7f:62:13:97:12:bf:
         62:f2:97:14:cd:1c:8a:3f:4a:22:25:1f:57:ad:93:58:38:44:
         0c:8d:90:00:7c:f6:a1:74:52:b0:e1:4d:87:89:12:e9:70:52:
         e5:b2:4b:e6:9e:58:99:49:ed:96:32:ee:ec:ff:e0:08:1b:f5:
         e7:40:b5:80:2c:d7:6b:80:b1:9f:46:0d:26:64:34:69:49:f6:
         7e:f5:46:d2:d9:b5:13:07:02:9d:02:0e:53:db:5c:3d:1b:3c:
         06:19:a3:90:d1:4a:39:d4:c6:64:0f:f2:75:3f:55:d3:08:5e:
         c6:b3:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:43 2025 by rpki-client