Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
File:                     ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json)
Hash identifier:          nXjih9JayUOPzv49AWYOKSrO/IIRk6czG4PTUL+fu6g=
Subject key identifier:   27:4A:AC:D8:0E:A6:3E:F2:D9:7D:CE:76:15:73:CB:15:20:92:6C:A8
Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
Certificate issuer:       /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Certificate serial:       0D64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
Manifest number:          0D5D
Signing time:             Fri 31 Jan 2025 17:57:14 +0000
Manifest this update:     Fri 31 Jan 2025 17:57:14 +0000
Manifest next update:     Fri 07 Feb 2025 17:57:14 +0000
Files and hashes:         1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: V6JtV2xkVzdnuJcaOFSOUWcPKg7BppQ6Ut1e7oUW0YE=)
                          2: FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa (hash: 88rHQVPR1JUl3cf/OTRoNqatod6IR47YQyVPqlvmZBA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3428 (0xd64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
        Validity
            Not Before: Jan 31 17:57:14 2025 GMT
            Not After : Feb  7 17:57:14 2025 GMT
        Subject: CN=679d0efa-4670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:59:2b:1e:4f:a8:30:a6:36:8a:20:9f:55:
                    67:03:cd:f7:e8:e8:3b:97:ed:de:75:51:a4:ec:88:
                    9e:3a:23:ea:af:c7:8c:f0:31:0f:b6:71:d5:78:10:
                    6c:5a:50:ee:8f:ac:84:ae:c8:c4:5f:2a:64:e9:18:
                    c2:c2:70:4f:9f:03:fd:34:80:54:34:18:6b:85:7d:
                    47:3e:2a:ca:48:c9:ec:fe:dc:47:4d:b6:39:8b:a9:
                    fe:0c:23:03:6f:8a:27:e8:dc:56:fe:e7:f8:9b:9e:
                    65:0a:c5:dc:ae:5b:a3:4f:8d:a6:1c:2b:cd:ad:56:
                    81:34:87:d2:8c:26:b1:38:4b:f6:4f:c3:d0:2b:ec:
                    e8:dd:1d:8b:f7:f1:a6:29:22:af:99:74:b2:53:47:
                    92:c3:72:31:fc:f2:65:6e:d6:c4:9a:01:6a:96:97:
                    4e:82:39:36:cf:50:29:6e:c8:48:ab:ae:ef:3e:2e:
                    e8:88:30:3b:4c:79:ce:4f:7f:94:86:b9:48:dd:78:
                    9e:4e:57:89:54:6e:f9:84:ce:c4:c7:e0:49:6a:d2:
                    d8:4b:c7:45:e7:f6:e4:9e:75:27:26:f2:a5:f2:40:
                    e6:e1:a4:17:a9:ad:49:c1:6b:38:f1:fc:92:f8:7f:
                    31:dc:d7:e4:85:03:20:48:21:58:8e:08:a4:62:e1:
                    c7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4A:AC:D8:0E:A6:3E:F2:D9:7D:CE:76:15:73:CB:15:20:92:6C:A8
            X509v3 Authority Key Identifier:
                keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:87:d8:ad:e0:0e:ef:ec:81:47:ba:30:00:a5:07:69:c3:7c:
         76:a8:5f:db:20:78:db:2f:79:f1:75:99:fd:af:3d:44:25:2e:
         d8:b5:c6:0c:08:bb:2e:1c:1c:22:bf:75:da:63:23:46:7a:21:
         05:ef:91:2b:69:eb:9a:ba:fa:34:13:33:01:09:ff:1a:42:9b:
         09:8d:7a:f9:f7:3d:9e:3b:9a:4e:fb:f9:65:25:5a:79:1e:90:
         ac:4f:27:4c:0e:fa:dc:72:d1:71:9f:4e:e4:e5:60:24:85:9d:
         8f:4a:0e:d6:82:63:44:8d:d0:7e:39:9e:f9:83:31:21:86:37:
         20:7b:74:ba:d1:33:12:23:8f:0a:6b:16:d0:bb:4b:00:df:07:
         45:5b:72:91:52:3e:56:84:29:ab:e9:db:a0:d9:e5:a5:57:37:
         49:59:11:14:6a:6e:da:e6:77:a3:26:8c:3f:6f:9f:c3:42:c3:
         fe:82:a2:04:09:8d:0d:a0:df:8b:5d:25:15:b7:5f:08:5b:02:
         84:81:67:ca:8a:e1:ea:ba:3a:20:cb:e0:64:22:9e:32:36:3c:
         6f:58:e4:3f:b9:fa:36:b7:79:35:2b:1b:22:64:a4:ad:2a:b9:
         13:c4:4b:5b:42:ac:e9:96:b7:fd:c7:33:2c:5c:7a:9c:5d:6a:
         47:1e:ea:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:01 2025 by rpki-client