Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
File:                     aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json)
Hash identifier:          JWvrAPRfV1inzYoVXpAR+RvmrrfCThgawgQ6MoJjuCI=
Subject key identifier:   6B:CF:1C:A9:40:DB:E7:EE:7B:77:AB:05:54:CB:8E:2E:06:39:70:71
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Certificate issuer:       /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial:       078C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
Manifest number:          0776
Signing time:             Thu 30 Jan 2025 21:27:56 +0000
Manifest this update:     Thu 30 Jan 2025 21:27:55 +0000
Manifest next update:     Thu 06 Feb 2025 21:27:55 +0000
Files and hashes:         1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: pwHPlC7/8mO3ZMXG91e/renmyhAtp7Kdt0CMVrCEt+8=)
                          2: D19E7784AAF811EE8D8CCD25C4F9AE02.roa (hash: CKOnFjtejKkcAYDWghd3LL+VK58zvWWige9ouAjv5Ws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
        Validity
            Not Before: Jan 30 21:27:55 2025 GMT
            Not After : Feb  6 21:27:55 2025 GMT
        Subject: CN=679beedb-9dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:dc:c7:ef:0b:ad:b5:a1:8b:a7:56:13:a6:
                    46:0d:b3:a2:f2:a0:bb:8c:63:78:4c:e7:e3:bf:98:
                    17:09:59:83:12:34:34:6f:28:c1:fd:de:e9:3d:ab:
                    d4:4f:55:24:af:47:78:95:f3:c3:f6:37:ad:ea:36:
                    11:1a:2d:34:6c:45:e9:45:a4:19:d7:d9:0b:31:e0:
                    91:9e:f7:f8:4b:7e:fc:9f:46:2d:bd:e5:c4:7b:57:
                    42:e8:3d:7a:eb:35:c0:ea:f0:7b:ba:94:96:05:01:
                    42:95:13:f8:d1:93:a7:cc:ed:5d:3b:89:49:e7:2b:
                    a0:9a:22:ae:f6:51:77:60:5f:1a:82:a8:cb:c3:81:
                    a3:19:4f:c3:96:be:60:2a:f1:95:c5:e5:12:5f:dc:
                    35:75:b9:18:d1:e8:8c:a4:04:01:4d:a4:6a:cc:27:
                    06:cd:62:76:1d:9d:8c:8e:59:ed:e3:a5:40:0c:9b:
                    69:7e:78:18:33:87:72:4d:57:3f:d2:64:90:52:ff:
                    1f:55:fa:a0:be:fb:fe:10:37:0d:d7:48:c0:9f:0b:
                    7b:e1:76:df:76:84:99:d5:8b:7d:ac:36:de:14:38:
                    ee:37:df:68:5e:79:c7:cb:e0:ad:9e:f8:d7:94:47:
                    a2:f6:7e:61:ab:cc:6f:4d:4c:53:b3:b6:ef:8e:90:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CF:1C:A9:40:DB:E7:EE:7B:77:AB:05:54:CB:8E:2E:06:39:70:71
            X509v3 Authority Key Identifier:
                keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f8:4c:e6:c8:b3:c5:00:e6:e9:15:5e:c7:49:3d:c5:c0:2e:
         b6:85:ac:42:79:b3:ec:59:dc:a2:0d:a4:0c:ce:e5:7e:d4:78:
         e4:83:3d:b5:61:c5:7b:ef:fc:d9:ad:5d:30:c0:af:1b:8f:72:
         e4:ee:31:76:6b:ea:98:3f:be:d7:34:83:3d:b2:41:af:bc:d2:
         13:90:d2:10:00:c5:fd:3a:c1:1f:4a:d4:f1:5e:e8:bf:55:92:
         b1:b3:9c:e4:c8:91:17:c9:fd:35:31:bf:ff:06:cd:12:74:4d:
         f2:e5:f0:e9:bc:2a:c8:64:fe:77:bc:02:2b:67:06:7c:ba:4a:
         a0:a5:10:37:65:f7:c6:a5:fc:42:06:0b:a1:b9:85:d0:44:ff:
         c8:71:8f:52:df:61:db:79:06:f9:2c:69:cd:f8:a8:e5:e5:ff:
         55:58:31:a7:dd:43:72:92:0c:45:c1:60:57:79:be:26:e6:b2:
         89:f5:e7:68:f1:a4:77:1b:3b:98:30:aa:bd:8d:dc:61:a1:bf:
         48:6b:5e:4c:a6:84:d1:ec:ad:a4:fa:01:69:13:22:a3:b9:f5:
         32:1f:d2:09:37:06:99:93:7f:6d:f3:1e:e6:9f:30:a8:43:a0:
         ef:99:e5:52:93:b4:6d:0e:bd:34:ae:95:58:71:19:11:4e:fe:
         cf:2c:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:22 2025 by rpki-client