Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
File:                     UWKb64D735TtmmQ_14yB2nO2uho.mft (raw, json)
Hash identifier:          74H56CY8Ig2IWLJWWUbSjaw9zUtGdEdvR4QIMySiBTU=
Subject key identifier:   78:04:D8:8C:DA:C2:73:88:95:BF:71:54:8E:BA:1C:8D:80:F9:2D:9B
Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
Certificate issuer:       /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Certificate serial:       0A3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
Manifest number:          0A2C
Signing time:             Thu 30 Jan 2025 19:51:55 +0000
Manifest this update:     Thu 30 Jan 2025 19:51:54 +0000
Manifest next update:     Thu 06 Feb 2025 19:51:54 +0000
Files and hashes:         1: UWKb64D735TtmmQ_14yB2nO2uho.crl (hash: 3DeJHcgq8Y+nI8bLbcQCJNeENCWVKc0BITKAi3vhE0g=)
                          2: 803C622E9B9111EDBC921164C4F9AE02.roa (hash: cOk9WkbMtekpbvbpWoDS8UUpnz2Yuo9L3yfei4T7i14=)
                          3: 7F1EA1189B9111EDBC921164C4F9AE02.roa (hash: B4bAqc6kkR7Hs43c2EHoV92Uje7SlbmocY/IyCwTMEI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2618 (0xa3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
        Validity
            Not Before: Jan 30 19:51:54 2025 GMT
            Not After : Feb  6 19:51:54 2025 GMT
        Subject: CN=679bd85a-5bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:a3:ad:fb:4e:40:fc:7f:04:15:aa:60:89:
                    79:c4:b6:3a:39:32:4e:c7:8e:fe:d9:81:04:ac:da:
                    5b:42:58:52:8b:70:d4:5b:fc:fb:19:96:46:0d:30:
                    67:8e:1a:40:3f:a6:80:42:da:44:0e:77:0b:5e:6f:
                    bd:4f:d6:ef:d5:a2:f8:2a:13:58:aa:cf:e0:69:a9:
                    44:52:f0:43:8e:09:20:cb:65:68:06:61:81:b2:9b:
                    52:27:0d:0a:9d:dd:59:06:be:ce:b4:e5:f3:e0:40:
                    25:22:bd:02:a8:21:39:1e:57:b1:63:2d:44:d8:9d:
                    5c:d6:79:a3:ef:fc:8f:06:e6:68:fd:86:65:2b:a3:
                    e5:12:68:c9:86:fb:df:1b:c9:63:f1:c8:4e:f6:b1:
                    0c:41:65:3e:da:82:41:e3:ff:70:6d:c4:d0:05:23:
                    ad:fd:cc:70:02:60:c3:b7:71:6e:97:d8:71:2a:9e:
                    47:b3:d9:64:d3:59:d5:f6:8a:d8:de:73:ef:ef:b2:
                    9a:2d:b7:be:08:27:58:de:92:9c:16:35:bd:28:2a:
                    67:f1:f8:7c:55:b2:d3:57:d3:de:11:73:ca:01:ca:
                    31:f8:1c:04:34:8b:54:0a:b6:e5:1e:67:99:6c:e5:
                    3b:10:7c:bd:15:1c:8f:d1:f6:f9:0a:ce:b4:ee:e9:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:04:D8:8C:DA:C2:73:88:95:BF:71:54:8E:BA:1C:8D:80:F9:2D:9B
            X509v3 Authority Key Identifier:
                keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:3e:85:0e:4c:9d:59:3a:ed:1e:fd:c5:06:bb:40:b9:6e:
         76:ef:fa:6e:9f:f2:f8:41:b4:cd:a5:b5:f9:cf:51:33:54:42:
         7d:81:21:d2:ab:29:4a:13:07:4b:4d:6c:60:2b:7e:c2:4b:a5:
         e4:68:03:b9:85:af:84:dd:0f:82:f1:a6:41:36:f2:8d:48:1c:
         d6:83:32:e4:77:96:b4:ed:09:00:ae:d6:0c:b9:ec:f9:26:85:
         e2:84:21:8e:ca:b8:91:51:07:dd:51:09:5f:cb:56:ea:46:f5:
         04:ce:b0:8e:05:4e:df:36:6c:79:92:b9:cf:8f:67:6e:2f:79:
         91:fd:0a:c5:6d:4a:59:fd:e3:99:60:85:41:62:02:82:b5:32:
         53:6f:38:d1:c2:02:d5:10:ec:24:c4:02:4e:09:2a:c2:53:cd:
         7b:12:e1:8b:1e:a1:9f:f4:c2:e9:92:a3:12:0f:f1:a6:c7:cd:
         a9:47:eb:69:32:38:47:73:ef:b4:72:67:6b:f3:c4:cf:4b:fd:
         31:21:af:18:56:26:d9:e2:56:ed:f9:4d:34:19:c9:5c:e0:e0:
         8c:f0:27:00:77:8f:34:77:0f:b4:40:2f:d5:b6:88:c8:af:e3:
         fe:08:55:37:14:b8:0e:84:25:50:51:cd:cb:8e:23:30:ef:de:
         8d:2b:01:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:21 2025 by rpki-client