Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
File:                     2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json)
Hash identifier:          NuRUMcKzeZLpfqflb8pe6OCD8MPYdFDoF70DK0ymrLM=
Subject key identifier:   18:11:90:ED:DE:07:FE:80:46:3E:06:BD:20:91:04:AD:8C:B6:C4:F9
Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
Certificate issuer:       /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
Manifest number:          71
Signing time:             Fri 31 Jan 2025 05:55:19 +0000
Manifest this update:     Fri 31 Jan 2025 05:55:18 +0000
Manifest next update:     Fri 07 Feb 2025 05:55:18 +0000
Files and hashes:         1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: XC8Kd6Fs8W9BCHKkYDpmEFKsOmMbaSw2z+pOq0yrXVw=)
                          2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: hMAkv0SPUa2fx1kdkftE1TeJlCXaC/PpyWLtj7Qjwao=)
                          3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: RaPUG+Dh7qLyN+q+gPgCKOJ1sH5dp6IUHARU5/CAIwk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192
        Validity
            Not Before: Jan 31 05:55:18 2025 GMT
            Not After : Feb  7 05:55:18 2025 GMT
        Subject: CN=679c65c6-60e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:5e:4f:a4:07:22:5d:04:02:5a:e7:bb:5c:
                    7e:2f:8f:95:42:da:04:51:3b:29:21:25:2a:94:54:
                    33:bc:c8:3a:3d:ac:25:c1:ab:49:f9:d8:f2:ad:29:
                    5b:f5:d9:2b:d2:a3:04:cc:b7:83:ff:ca:a0:59:ea:
                    0d:8c:32:31:70:f1:2d:83:db:09:7d:da:92:97:5e:
                    d2:60:0e:f1:a6:e2:f3:cb:cd:2e:60:09:19:c4:58:
                    dd:f0:0e:59:57:98:0a:2f:37:09:23:f1:bb:62:af:
                    23:bf:4f:ec:9e:bb:94:bd:dc:19:49:96:1a:e7:64:
                    43:e9:20:ce:7e:64:16:55:60:a0:2c:22:83:11:f9:
                    48:44:e3:da:be:c6:63:8b:99:58:f7:54:40:13:60:
                    e4:25:c1:84:d2:d3:1b:b1:21:c5:88:9f:f7:01:d1:
                    c0:d4:dd:2e:5a:41:00:82:38:12:00:e8:4b:12:56:
                    63:21:92:c9:de:2e:c0:0a:2b:ee:5f:4e:73:eb:91:
                    54:70:8b:b7:a9:9b:75:37:1b:d9:9f:19:c5:47:ba:
                    e8:ea:a2:57:20:4a:a0:3c:f4:1d:10:ea:84:84:8f:
                    d9:98:64:d0:87:12:8d:aa:4e:68:0b:9c:fd:b7:d2:
                    dc:fe:d0:ad:4f:f9:64:0b:ac:2a:9d:3c:77:9e:53:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:11:90:ED:DE:07:FE:80:46:3E:06:BD:20:91:04:AD:8C:B6:C4:F9
            X509v3 Authority Key Identifier:
                keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:d9:61:b2:b3:4d:e6:31:de:72:d5:60:db:5b:ce:57:fc:
         fb:40:02:2c:db:4b:0f:10:36:19:74:3d:3f:3c:56:cf:61:8c:
         ff:91:3e:ce:ba:1f:47:6e:21:64:0d:6b:c2:14:13:73:f7:9c:
         be:22:07:d4:d3:77:0f:e0:a6:5e:37:50:a9:dc:02:b2:e9:06:
         af:7e:30:f6:cb:bd:c2:4a:51:c0:8e:06:de:72:dd:22:59:0b:
         57:0c:4c:5c:96:d4:0a:ee:a9:f7:12:d8:1b:5b:b8:5f:51:c5:
         94:cf:89:94:2d:21:a2:8a:8c:f5:7b:f8:be:d5:4a:87:15:c1:
         5a:cf:59:b6:45:f3:03:c9:53:76:a2:a2:e0:8b:f8:d8:c0:70:
         5e:a9:df:13:50:bc:b2:78:99:9e:68:59:96:fa:b8:1c:1f:50:
         39:0f:f2:db:4d:c6:ac:2e:c2:bc:b6:05:90:13:87:20:0a:6e:
         ad:fe:4d:5d:77:82:09:1c:64:c6:56:12:7b:b0:5a:a9:4b:1a:
         28:0d:5d:b3:13:d4:7b:21:16:0b:31:e7:6d:7e:84:0f:a7:c1:
         c2:9a:97:ae:a8:1f:6c:d3:03:e2:96:15:0b:58:c9:70:e9:9c:
         88:b9:2f:86:6b:32:eb:fb:a6:42:c6:75:02:22:a4:31:cb:1b:
         38:7f:8f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:52 2025 by rpki-client