Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
File:                     MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json)
Hash identifier:          kIh065NTxiFlqFLubvSaXVf6yLG2sSvQl9oamm5dGN8=
Subject key identifier:   73:D3:45:CB:5C:52:50:7E:8A:74:BB:06:D9:EE:B5:44:EE:0D:A3:00
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Certificate issuer:       /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial:       193C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
Manifest number:          1918
Signing time:             Fri 31 Jan 2025 16:27:08 +0000
Manifest this update:     Fri 31 Jan 2025 16:27:07 +0000
Manifest next update:     Fri 07 Feb 2025 16:27:07 +0000
Files and hashes:         1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: npBIug40wECZaTEj4QvHBQ7pzdaHM3k3sTakagzvQbo=)
                          2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: orcuIVQDXa55MgUEa+uvpleaNB+r/DtukKrLYo38vu4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6460 (0x193c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
        Validity
            Not Before: Jan 31 16:27:07 2025 GMT
            Not After : Feb  7 16:27:07 2025 GMT
        Subject: CN=679cf9dc-df02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:06:9a:1c:71:a3:13:da:6e:eb:5b:5c:fa:
                    94:9f:7f:62:87:d0:dd:5f:4d:0d:b1:5a:dc:02:fc:
                    8e:ac:ab:08:48:32:9a:75:cc:60:fb:45:38:e9:2e:
                    4f:67:d2:1b:30:42:3c:90:97:8c:2e:96:2d:ea:f3:
                    d5:e7:2f:95:53:0a:91:3f:ee:73:67:64:c0:3f:c8:
                    9b:b3:f0:68:0f:7a:e8:08:f6:54:6c:f4:77:de:29:
                    e4:3d:8c:d5:b5:55:f7:d9:a8:73:50:16:33:fc:c0:
                    2e:79:a7:b2:b5:b8:7a:26:d9:ed:1a:3d:a5:de:52:
                    38:3b:c5:29:ea:da:cf:6a:f3:d0:4e:5c:82:04:00:
                    39:7f:56:6d:59:d2:ea:5d:8b:d9:3b:b5:c0:69:6c:
                    6e:93:50:49:d1:56:c5:76:69:00:6a:4c:d2:34:1f:
                    0d:7f:8b:7a:9b:1f:23:6a:e1:4a:e7:a0:5e:c8:85:
                    27:27:fa:7c:0f:df:8a:08:c5:e4:ee:ba:f2:d7:3a:
                    1a:b9:7a:a0:01:59:34:49:6c:cf:78:32:4c:af:22:
                    b0:2e:ad:4b:43:9f:aa:41:ab:59:5d:fe:3e:45:ac:
                    6e:a6:4b:97:6a:90:df:bd:12:02:26:c1:85:98:ee:
                    1a:cd:ed:22:95:2b:55:6b:84:b1:0f:5e:c6:27:df:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D3:45:CB:5C:52:50:7E:8A:74:BB:06:D9:EE:B5:44:EE:0D:A3:00
            X509v3 Authority Key Identifier:
                keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:06:29:9d:9b:24:6f:7d:f2:c6:a6:a2:8d:54:80:30:54:12:
         b6:45:7e:1c:d5:f6:44:22:ce:80:69:c9:de:76:d4:a0:36:5a:
         54:31:74:c6:b8:e4:5c:df:ca:ba:0a:80:0f:ff:a0:92:37:bd:
         55:56:c2:1f:8c:06:49:be:3e:2c:4f:51:a8:11:25:55:86:82:
         4e:34:25:c2:31:48:dc:b3:cd:cf:c5:9d:c8:a0:5f:0e:2d:92:
         5f:e1:28:99:98:5d:09:0d:7d:5c:7a:ff:f6:81:f0:b8:45:b9:
         6b:ec:63:d3:2e:71:8b:2c:5f:ae:b6:f8:8c:3c:06:63:75:ee:
         54:89:44:97:88:9c:4b:c4:00:93:5f:24:d7:3c:f3:5a:b1:53:
         67:06:55:98:06:44:dc:6a:0f:fa:88:eb:0e:ca:89:ea:3c:87:
         c8:f9:ef:33:79:81:f4:72:b3:45:0a:76:0a:e2:24:fa:d5:22:
         a3:0d:da:68:ff:7a:7f:ac:d9:05:b8:d7:fa:d4:f0:80:70:0b:
         fb:0a:2c:35:b7:8c:dd:80:2f:c1:fa:9a:f6:58:35:48:d5:04:
         4b:39:a7:be:7a:d8:31:08:90:e1:fe:66:42:1d:a0:97:9c:c7:
         62:cf:dc:b1:70:a5:73:e1:9a:c1:f2:df:cf:cb:13:0f:2d:ea:
         32:06:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:30 2025 by rpki-client