Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
File:                     -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json)
Hash identifier:          qDrzbkVt0cjPhpQZ07nevOJV/pZA/nf4JrliIt6lK2U=
Subject key identifier:   C8:F3:FF:C1:FC:F8:8E:C7:BA:B1:05:E1:CE:43:CA:93:E3:07:DB:03
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Certificate issuer:       /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial:       03A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
Manifest number:          039A
Signing time:             Fri 31 Jan 2025 00:51:30 +0000
Manifest this update:     Fri 31 Jan 2025 00:51:29 +0000
Manifest next update:     Fri 07 Feb 2025 00:51:29 +0000
Files and hashes:         1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: xxD9YiYrRUaWaxL8FVtOUBwhfeRAU0AKI5bO0wMTSWg=)
                          2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
        Validity
            Not Before: Jan 31 00:51:29 2025 GMT
            Not After : Feb  7 00:51:29 2025 GMT
        Subject: CN=679c1e91-a06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:a3:32:d0:26:be:86:32:27:f1:fd:22:0f:
                    0e:21:ab:2d:5a:58:93:be:da:d2:d3:5f:34:bd:41:
                    45:a5:d8:60:ac:86:bb:2c:5e:11:44:22:f3:f4:01:
                    e4:9f:f5:32:7e:c0:2d:af:03:90:3d:19:08:cd:7c:
                    69:85:d9:59:e4:04:88:6e:52:02:f8:70:23:b4:08:
                    59:7d:8e:1a:e2:9a:65:1b:45:8c:03:a0:20:16:51:
                    c0:82:d8:81:05:0c:88:da:de:63:a5:b9:1b:d0:d7:
                    27:67:13:3a:91:44:f2:15:30:07:33:75:f3:4f:1a:
                    3d:8b:11:ed:93:1d:f1:91:7b:90:14:d3:09:cb:41:
                    8c:95:78:2e:e9:c4:15:eb:1a:38:83:12:fb:34:6e:
                    b6:cc:f0:27:e9:33:b1:d0:39:6b:1e:b4:ba:3f:72:
                    39:04:c2:f9:57:b2:c3:f8:87:a0:c8:44:e6:0b:6d:
                    c2:79:35:86:31:9e:56:32:eb:b6:7e:ad:fa:31:1c:
                    e8:b2:da:55:72:e8:3e:62:66:96:ce:bb:b6:51:64:
                    09:3b:19:af:13:20:3a:f8:3c:91:8b:95:ce:28:4e:
                    a3:8b:b4:7e:a1:c5:de:ff:9a:7a:db:92:59:32:07:
                    4b:50:56:f2:ca:44:5c:ba:24:cd:e4:77:95:a0:13:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F3:FF:C1:FC:F8:8E:C7:BA:B1:05:E1:CE:43:CA:93:E3:07:DB:03
            X509v3 Authority Key Identifier:
                keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:04:e9:f1:68:c2:cd:e0:68:7d:13:06:96:e6:57:a2:3a:c3:
         1a:ab:e0:f1:6d:d2:88:81:af:b6:f7:1e:0f:54:27:cc:8e:20:
         df:d2:79:49:00:32:50:9f:20:5a:9d:2b:ff:00:91:c6:51:30:
         e1:66:11:79:8d:a7:31:8d:0a:a2:84:dc:16:ee:2e:82:5a:6d:
         eb:bc:1e:f6:0d:f7:14:f5:83:2e:5b:ba:06:e9:39:dd:da:1c:
         4d:da:f5:57:b3:8b:b6:b1:68:12:c8:13:43:9b:e0:14:65:2c:
         d8:84:9f:d0:c0:6d:c6:47:b5:5b:11:83:da:c9:3b:33:4a:6e:
         05:64:d0:ec:d7:75:87:4d:b9:7a:9d:c7:68:44:9f:77:ce:c4:
         d1:bc:6e:0f:60:8d:57:ce:9e:b8:2b:0a:8b:17:c8:9a:3c:45:
         ba:dd:56:70:c3:c5:1a:3e:14:8d:c8:0a:2b:3e:de:11:3c:01:
         05:65:51:14:45:4b:f1:28:ec:f3:b9:5e:b3:ed:46:51:ea:d0:
         e1:ed:a0:54:59:21:7c:0c:c5:4a:fb:7d:b8:1c:71:d3:f3:7d:
         d9:aa:b9:11:51:4e:3a:ac:2e:f8:25:44:0c:00:5a:a9:ab:08:
         41:ce:7f:cc:d9:9c:47:eb:fb:32:79:b1:2d:24:6b:22:60:14:
         a7:27:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:58 2025 by rpki-client