Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft
File:                     F_lRhEBRRIyJBhQEz7QequBHOno.mft (raw, json)
Hash identifier:          ZOKlnPA5A+SJZd5fUzqvB8/TERD4Zao+k9Vy8UQw7Pg=
Subject key identifier:   DE:09:9E:DE:22:85:CC:EB:CF:4A:02:B2:59:35:75:40:0E:CC:2A:89
Authority key identifier: 17:F9:51:84:40:51:44:8C:89:06:14:04:CF:B4:1E:AA:E0:47:3A:7A
Certificate issuer:       /CN=A91602BE/serialNumber=17F951844051448C89061404CFB41EAAE0473A7A
Certificate serial:       0E27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_lRhEBRRIyJBhQEz7QequBHOno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft
Manifest number:          0E12
Signing time:             Fri 31 Jan 2025 17:48:29 +0000
Manifest this update:     Fri 31 Jan 2025 17:48:28 +0000
Manifest next update:     Fri 07 Feb 2025 17:48:28 +0000
Files and hashes:         1: F_lRhEBRRIyJBhQEz7QequBHOno.crl (hash: D2I2a+IZ9dlKR6tnJIOqkgOEL/IvqxjJHNptyB+YMi4=)
                          2: 57F6EF0C5BD211EF992CFC15C4F9AE02.roa (hash: 3nA72tHDmFfUPzw47VV3xufiMO/gtK8JVIbiIAFnnPM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3623 (0xe27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91602BE/serialNumber=17F951844051448C89061404CFB41EAAE0473A7A
        Validity
            Not Before: Jan 31 17:48:28 2025 GMT
            Not After : Feb  7 17:48:28 2025 GMT
        Subject: CN=679d0ced-7e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:35:2a:8c:a8:96:1f:9b:fe:93:a8:1f:27:
                    46:5c:05:26:12:b4:76:ae:44:b4:b8:54:7b:61:06:
                    01:ca:e5:a1:9f:92:b7:ec:2b:49:a0:be:f2:45:b7:
                    ca:0b:50:2e:c3:00:5b:9b:66:ad:83:bf:9e:e4:56:
                    d2:e2:0e:e4:5a:f7:7d:8a:d1:af:87:29:9f:7f:20:
                    33:4c:6b:70:8d:ec:b7:4f:83:95:bc:2e:1f:db:03:
                    6a:d3:ed:2f:b4:72:09:1b:bb:c7:e3:fe:3f:4e:72:
                    dc:70:fb:bd:fd:c7:bb:90:33:1f:04:1f:80:99:ae:
                    20:12:bd:65:78:d8:96:39:77:e7:a8:53:6a:b9:7a:
                    b2:e8:54:4c:aa:36:86:af:e0:72:47:a7:1c:4a:b6:
                    f9:b6:b3:c8:85:ae:2e:3d:39:d3:05:68:79:44:ce:
                    a1:cb:eb:dc:e1:b6:76:cb:22:bb:ba:cf:ec:da:e7:
                    df:48:09:3b:0b:6b:05:af:7b:86:b9:84:28:22:2f:
                    b2:7a:de:23:0a:66:3f:9a:9b:20:65:dd:63:04:da:
                    18:08:c0:33:9b:b3:7e:6f:95:da:5e:1c:70:6a:f7:
                    3a:5b:aa:e3:d8:79:95:45:22:78:9e:a7:77:e5:56:
                    e5:45:39:d4:1f:44:21:8f:1c:dc:5f:9e:da:16:cd:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:09:9E:DE:22:85:CC:EB:CF:4A:02:B2:59:35:75:40:0E:CC:2A:89
            X509v3 Authority Key Identifier:
                keyid:17:F9:51:84:40:51:44:8C:89:06:14:04:CF:B4:1E:AA:E0:47:3A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_lRhEBRRIyJBhQEz7QequBHOno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602BE/38218332A21D11E99C9DC77DC4F9AE02/F_lRhEBRRIyJBhQEz7QequBHOno.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6a:ed:22:7b:8a:a7:4f:f0:02:d5:4d:f2:d6:9d:83:9d:61:
         3c:aa:c0:fd:91:02:3a:98:b4:9d:05:fb:82:47:ab:a2:0e:ce:
         d2:ba:d7:a9:01:4f:af:75:77:ef:fc:58:1d:af:0a:34:5f:29:
         87:84:7a:9c:08:42:6b:9f:f1:0d:c5:13:3f:69:45:47:53:f9:
         25:cf:e2:e6:b8:be:21:9e:3a:ec:e0:38:f6:72:ff:4e:f8:54:
         f1:13:13:70:a2:04:5f:0b:26:ac:a4:f3:0c:b2:cd:d0:04:27:
         72:98:37:2c:c1:ec:1c:2f:a5:21:ef:58:14:29:8d:79:df:68:
         af:ba:cd:1b:f0:54:30:9c:8c:d7:46:36:af:42:c5:f0:16:a6:
         59:c2:6a:b9:f4:70:7f:ed:2a:ed:56:cc:a7:b1:7b:5c:94:55:
         eb:3d:60:a4:4d:68:9e:70:0c:59:94:44:8b:65:14:a5:a0:99:
         fd:68:a8:eb:50:97:bf:fa:61:f0:64:24:03:53:f7:da:96:f0:
         25:02:b4:37:6d:44:e0:0b:9f:95:f6:a1:2d:e9:63:54:1e:0a:
         0c:45:cc:fa:6c:de:7b:e9:15:dc:f4:98:5c:81:14:9f:d7:27:
         18:b5:0b:32:d2:4c:76:b9:41:03:aa:cd:54:e2:c5:b2:26:3e:
         9a:cc:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:08 2025 by rpki-client