Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft
File:                     f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json)
Hash identifier:          5LXSlPt0q2S7pgjHGxf5w6blWrIntn1mwTfUVZEkbBs=
Subject key identifier:   D3:4A:8B:A0:99:3C:19:03:CF:3E:0B:C6:BF:C0:E1:B0:80:87:89:E9
Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6
Certificate issuer:       /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6
Certificate serial:       0C1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft
Manifest number:          0C16
Signing time:             Fri 31 Jan 2025 18:22:46 +0000
Manifest this update:     Fri 31 Jan 2025 18:22:45 +0000
Manifest next update:     Fri 07 Feb 2025 18:22:45 +0000
Files and hashes:         1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: aJhqdO4YV7dSmqTWkQfrAlnBjIryyh8YJDWLFq9LJtk=)
                          2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3101 (0xc1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6
        Validity
            Not Before: Jan 31 18:22:45 2025 GMT
            Not After : Feb  7 18:22:45 2025 GMT
        Subject: CN=679d14f5-435c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:cc:97:05:f6:d7:50:a5:47:ad:6e:36:fe:
                    57:ad:26:53:6c:d5:d6:28:57:69:06:2a:76:70:cc:
                    e0:b5:2d:a1:7c:79:a5:41:b3:9f:cf:bc:ad:e3:5f:
                    9d:73:ef:44:53:5a:fa:fc:5b:8e:9e:e4:f9:78:09:
                    9a:96:d4:6c:31:f8:23:41:c8:0f:7b:1d:06:b4:73:
                    85:57:6a:a9:f5:f3:29:78:08:0b:f8:07:88:67:ff:
                    e4:06:71:c5:65:4f:32:84:b4:b7:2e:a7:a7:d5:9e:
                    cd:19:f1:19:f8:89:43:a6:bb:50:58:af:2a:8f:71:
                    19:35:30:2b:f2:bd:34:34:19:9b:22:7f:ed:11:37:
                    b0:9d:00:d4:bb:64:e0:c8:63:4a:f0:11:4e:9b:93:
                    7b:7f:ce:2a:2d:cd:96:d0:28:37:b5:d5:7c:57:f3:
                    64:20:e1:17:e7:ac:98:2b:5a:eb:3e:41:9d:00:13:
                    43:da:4d:37:78:c5:1a:ce:5b:bc:e1:d1:2e:f0:02:
                    e7:30:54:aa:5c:62:09:a3:e8:13:65:05:b2:72:00:
                    a6:1a:7f:75:e0:05:3c:2c:4f:70:35:de:6f:86:19:
                    71:b7:5c:2d:20:d1:8c:13:10:dc:53:44:b5:09:61:
                    da:ea:b5:02:2c:9f:c1:7b:f1:c0:de:eb:75:57:09:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4A:8B:A0:99:3C:19:03:CF:3E:0B:C6:BF:C0:E1:B0:80:87:89:E9
            X509v3 Authority Key Identifier:
                keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ed:3b:05:4a:a9:54:98:9f:c2:0b:00:dd:d6:9b:7d:d1:5b:
         20:3b:ef:ac:97:40:47:29:15:7a:70:c0:2c:a0:03:f0:60:fd:
         b7:db:e1:fe:b1:33:e5:74:96:c1:e5:b6:f7:32:2a:c4:a5:dd:
         55:52:10:e8:c2:ea:b4:68:6b:99:ae:94:49:f2:5b:8e:92:93:
         09:62:9c:d0:8b:69:d1:1b:ce:59:9b:14:16:1b:7a:92:19:39:
         96:6d:d5:aa:5c:26:1a:9b:29:2f:6b:7f:fb:fe:d2:f0:ff:ca:
         4a:f4:6e:f7:87:f1:a0:af:41:11:b4:f7:3f:7f:9e:f0:7f:af:
         0c:27:c5:98:be:cf:b7:e8:90:21:6f:28:cd:47:64:7e:01:d5:
         1c:ec:3a:fa:04:5d:0b:b6:49:b1:07:8d:d3:31:ad:2a:4a:d1:
         eb:97:79:55:6d:fc:95:50:59:ed:ed:7f:e2:41:f0:06:c4:68:
         36:d6:bc:20:f2:67:27:96:55:a9:21:26:df:b6:a1:88:e7:a4:
         c8:97:5c:35:49:49:d1:60:66:be:89:bb:8d:c3:40:66:a8:c7:
         ad:72:e2:8a:39:9c:4a:ad:bb:5e:cb:4b:b0:2d:b7:63:ca:25:
         48:70:4b:79:ed:c1:fb:35:bd:d5:3c:e2:d4:af:fa:f4:6b:58:
         dd:d3:e7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:42:44 2025 by rpki-client