Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
File:                     ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json)
Hash identifier:          Ymt0piDL9nlZoKA3jbEx2E2KmvQi9AvwX17Cav4F9+4=
Subject key identifier:   3F:17:D4:1A:42:D7:DD:F2:6F:EA:ED:08:73:AD:3D:AC:A7:AC:B0:CD
Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0
Certificate issuer:       /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
Certificate serial:       0B89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
Manifest number:          0B81
Signing time:             Thu 30 Jan 2025 19:04:01 +0000
Manifest this update:     Thu 30 Jan 2025 19:04:00 +0000
Manifest next update:     Thu 06 Feb 2025 19:04:00 +0000
Files and hashes:         1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: 8tts1hMA1Ftj+wT5IngnyF5umguTWQsbjNoq9j1rScE=)
                          2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2953 (0xb89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
        Validity
            Not Before: Jan 30 19:04:00 2025 GMT
            Not After : Feb  6 19:04:00 2025 GMT
        Subject: CN=679bcd21-fa6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:71:9c:21:75:7a:f3:2a:a4:c2:5b:03:8c:32:
                    9c:0a:78:d4:15:49:f9:f8:cf:79:2d:d7:89:0f:6c:
                    00:78:7c:df:28:83:c9:7d:b7:0a:20:b0:27:6f:95:
                    44:22:a4:1a:ad:d4:ce:52:36:d2:e4:f6:8a:eb:eb:
                    87:ea:9d:ee:e4:fa:1f:53:c3:2c:29:a4:96:f4:20:
                    98:62:3b:39:8e:10:ee:17:56:4b:68:a4:08:7f:2b:
                    a5:37:3f:e8:4c:5e:a6:f1:e0:4f:1f:1f:df:46:64:
                    dc:f8:a0:79:1d:84:96:0a:82:9b:4d:56:d5:77:81:
                    08:23:2c:00:3c:21:70:5a:98:7a:d9:ee:58:db:2b:
                    48:98:d4:48:d1:3d:e9:00:3f:c1:cf:a9:ca:6e:04:
                    0e:7d:3b:4d:11:72:40:14:93:78:f4:c6:91:18:6e:
                    fd:5e:4a:8f:b5:61:d4:c3:36:60:92:20:3e:ab:bd:
                    d7:df:ac:2b:cf:ab:75:a0:35:a6:99:21:8b:0f:2b:
                    89:11:e1:e2:e9:c3:ad:39:ac:6d:ed:a6:36:16:1e:
                    7b:33:fb:f6:aa:7c:ed:75:6d:56:50:d3:51:69:e7:
                    54:17:97:7c:f8:0d:be:84:17:fc:34:22:e8:ee:51:
                    66:f1:c4:ab:6e:01:3a:d8:55:e3:09:d2:a0:ed:05:
                    d9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:17:D4:1A:42:D7:DD:F2:6F:EA:ED:08:73:AD:3D:AC:A7:AC:B0:CD
            X509v3 Authority Key Identifier:
                keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9e:3b:85:94:5b:bd:ed:7f:b4:33:9d:96:b6:d0:42:a4:1e:
         ec:91:4c:b6:8e:e3:d2:31:7b:b1:66:22:9d:10:52:a5:bc:b6:
         46:60:f8:10:6a:1e:50:bb:6c:6f:f6:90:c2:18:29:9f:97:1d:
         79:89:3d:81:6c:ec:c8:de:c3:d0:9b:fc:db:6d:6c:cf:ec:20:
         97:15:05:0e:1f:f3:d8:c7:20:c9:28:0d:b0:10:23:a1:9b:84:
         ba:1a:6c:da:ae:59:e6:84:f5:92:bd:88:6a:d6:c1:74:46:23:
         c9:71:34:93:4f:97:11:c6:c7:0b:52:fd:42:1b:dc:d5:72:e0:
         40:db:18:c3:9f:f5:14:17:19:5f:30:20:cf:92:7e:92:36:96:
         55:f0:7c:e0:62:75:8c:bd:1c:b9:f9:e1:33:50:38:ce:31:aa:
         ac:c8:9d:e5:30:ff:15:74:b2:15:b3:99:93:95:9d:96:e3:71:
         63:57:2a:b9:9b:96:de:e9:b9:9c:1d:34:d6:4e:81:0c:5e:21:
         d6:a5:9f:14:e0:b1:5a:c5:b7:0a:dc:b4:d2:f3:e8:d6:ab:d2:
         24:93:b5:a4:bd:07:ed:59:04:fb:88:f6:1d:29:6a:64:e6:24:
         2a:5b:ce:b9:36:bb:86:7e:81:7a:62:9d:a9:14:06:9b:62:4b:
         85:a0:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:53 2025 by rpki-client