Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
File:                     pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json)
Hash identifier:          CABfCTUzrkkXNbAb0wQx+ToOVPV+bIictRZMLZitJlc=
Subject key identifier:   A6:58:43:CC:C8:94:F0:60:4B:FD:62:1A:47:F9:3D:76:BC:C8:51:26
Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70
Certificate issuer:       /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
Manifest number:          25
Signing time:             Fri 31 Jan 2025 06:54:47 +0000
Manifest this update:     Fri 31 Jan 2025 06:54:47 +0000
Manifest next update:     Fri 07 Feb 2025 06:54:47 +0000
Files and hashes:         1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: 0UkNyVhzo+OJT+/bcPk0NEMDzocDNCAZwgSVPTgGn3E=)
                          2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: 6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270
        Validity
            Not Before: Jan 31 06:54:47 2025 GMT
            Not After : Feb  7 06:54:47 2025 GMT
        Subject: CN=679c73b7-c6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:d9:5d:93:01:51:76:e4:b8:c2:e9:d6:6b:
                    90:aa:ea:0c:75:64:d8:af:0b:5e:7f:49:87:e7:5e:
                    94:05:d3:49:2a:56:38:4a:40:5d:97:eb:16:ec:18:
                    3f:2f:b2:1a:a8:b3:ec:d3:b9:a1:72:04:eb:dc:d2:
                    b8:d6:15:66:55:b6:a1:96:66:fd:d1:1d:d5:11:4e:
                    0a:9c:6e:1a:49:f9:10:f6:e8:55:d4:45:57:1a:8a:
                    28:d8:c7:6d:c9:df:fc:75:05:6b:7c:f9:73:e9:13:
                    ce:19:b4:36:c6:d0:21:cb:c8:b7:6b:7b:54:fb:5f:
                    07:59:a3:6a:5b:31:97:41:a0:d6:93:a9:08:03:38:
                    ce:3b:34:7a:52:1b:e0:07:dc:78:73:c3:a5:f0:75:
                    13:0e:c0:b1:5e:71:81:ae:35:ca:d6:54:46:c7:23:
                    1f:5e:1f:54:b8:d0:34:a4:a4:9d:ea:1f:d6:1f:63:
                    dc:82:2b:58:93:1a:32:97:7e:77:01:28:e9:06:c1:
                    3e:5e:16:d2:e1:25:a8:9d:3a:1b:46:ec:92:9a:dd:
                    e5:1d:0d:0c:0b:b4:8c:94:42:6f:70:21:dd:72:19:
                    d3:79:85:00:2d:e7:0c:6f:13:65:1e:19:a8:c5:b8:
                    46:1f:87:51:33:7d:b4:a4:43:4b:3c:2e:81:ef:ec:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:58:43:CC:C8:94:F0:60:4B:FD:62:1A:47:F9:3D:76:BC:C8:51:26
            X509v3 Authority Key Identifier:
                keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:53:05:01:d0:07:68:6a:27:f8:c0:a1:5c:16:a1:47:af:88:
         e4:77:c6:f7:bb:b6:fe:a2:19:a8:07:c0:3a:80:d5:bd:79:a2:
         0f:74:e6:22:a8:07:e4:f6:f5:e8:5b:0a:9b:6c:3e:35:76:11:
         fc:55:b2:12:a8:21:b8:e3:63:34:fd:24:57:fa:ab:b9:0a:a9:
         a4:95:29:70:c8:a6:6c:63:71:ab:3b:04:73:e1:a4:5f:e9:0d:
         3f:e0:67:ef:a6:8b:74:e1:87:4a:7f:f3:4a:ef:98:1a:11:77:
         8a:24:0e:c9:d9:fa:48:aa:1d:f8:06:fb:21:df:27:0f:e9:ac:
         de:eb:db:3d:da:6c:dc:0b:74:2f:1b:f4:70:d5:12:4c:2f:7a:
         a7:d8:40:cd:97:c4:06:08:91:9c:0a:fc:84:21:fd:66:86:c8:
         ae:75:0b:4f:07:dc:49:8c:c3:81:e5:69:10:38:d2:ca:e3:1e:
         97:68:f8:cd:c8:14:25:06:e6:9c:70:04:80:89:80:10:2e:8b:
         0f:78:a9:78:07:53:40:dc:26:78:d4:62:e8:90:79:f6:2e:32:
         f3:74:51:7e:bd:c7:6b:36:1f:d3:f1:dd:0f:5c:11:5b:7c:47:
         69:12:4b:d9:a0:39:50:2a:93:70:49:fd:66:96:e3:d8:ee:e8:
         5c:82:54:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:28 2025 by rpki-client