Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
File:                     vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft (raw, json)
Hash identifier:          VLakuC/CvrnZbPTCyJeaGCRfVga+El3al+Ovamvlyr8=
Subject key identifier:   56:F2:15:70:59:4C:D7:74:8B:61:A0:3A:6E:C0:5D:9F:A6:5E:FD:D1
Authority key identifier: BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E
Certificate issuer:       /CN=A916B30C/serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
Manifest number:          C7
Signing time:             Fri 31 Jan 2025 04:54:09 +0000
Manifest this update:     Fri 31 Jan 2025 04:54:09 +0000
Manifest next update:     Fri 07 Feb 2025 04:54:09 +0000
Files and hashes:         1: vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl (hash: MeZwUU4JL9MHJAbmO6WZ8BObTl6cmH/IvAN/Xg9Ln9c=)
                          2: C75C471CB05F11EEB81C6C79C4F9AE02.roa (hash: EdSZ6qr63xC+oSn3BtQeqPtqk0XiF3n+3mroGstsIKo=)
                          3: 610EBED6B06911EEA7F1DA31C4F9AE02.roa (hash: U8W7Ewp5/SdLbkdRNTL2q4DNj5csWNACLl4FWcVO/wo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B30C/serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
        Validity
            Not Before: Jan 31 04:54:09 2025 GMT
            Not After : Feb  7 04:54:09 2025 GMT
        Subject: CN=679c5771-c27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:ec:6a:a8:e8:16:4d:36:3f:0c:50:c1:c2:
                    97:c3:d5:47:ca:36:95:30:16:79:fa:d5:ac:53:8f:
                    7f:3c:b3:a2:18:57:a5:e8:d3:1b:a1:64:e0:6f:9c:
                    69:a8:40:08:c5:e0:b9:69:20:93:81:f2:50:6b:05:
                    cb:28:11:88:ca:1f:e1:a2:5d:a6:56:4e:eb:68:a8:
                    e1:d8:82:40:fd:56:02:1d:f8:c1:15:da:a6:73:73:
                    c4:75:3f:65:49:14:17:bf:ff:fc:d3:ba:50:5a:fa:
                    37:c6:5c:3c:c5:1e:d5:9c:b1:f0:af:5e:fa:4d:85:
                    97:26:92:63:f8:7c:e5:89:7d:55:d4:0f:02:33:33:
                    c3:10:95:e5:09:cb:b5:3b:70:eb:c0:47:d2:f8:03:
                    63:19:e6:a6:fd:7a:04:b9:7c:42:f0:57:cd:65:97:
                    26:b5:64:fb:a3:cc:99:83:40:68:4b:ab:d1:d1:54:
                    dc:8c:64:cf:61:18:42:1c:a5:a4:c2:50:24:5b:6b:
                    cf:f6:b3:e6:44:57:e3:c5:22:86:47:5a:13:43:35:
                    40:91:20:6a:8a:f3:d8:be:12:80:91:8e:0b:6e:78:
                    2c:a6:26:4d:a9:7b:f0:ac:e7:44:22:e5:60:1c:87:
                    29:c5:23:91:34:cf:da:3b:5e:ba:b3:72:63:7f:87:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F2:15:70:59:4C:D7:74:8B:61:A0:3A:6E:C0:5D:9F:A6:5E:FD:D1
            X509v3 Authority Key Identifier:
                keyid:BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7e:92:0c:fc:0d:5f:8d:9e:43:58:76:0f:26:71:f5:d9:71:
         8a:cb:07:7d:6a:0c:9d:2c:c8:c6:12:e7:dd:03:70:64:59:3b:
         6a:cb:52:6c:fe:2a:a4:94:ee:4d:85:1a:fc:93:1b:e6:6e:78:
         f3:18:a5:46:16:64:c5:b0:7f:5b:2d:26:ce:a5:0a:14:84:e7:
         32:e1:30:d0:ec:21:1e:a3:17:14:ed:20:dd:c3:ef:71:f0:dc:
         e9:a1:65:18:3d:28:2d:f5:7f:73:1c:f9:90:23:f0:3b:d8:e0:
         ec:7d:d7:a6:e1:70:84:92:40:52:4f:03:a9:c9:44:de:fe:38:
         9d:22:08:4d:09:09:41:d8:56:16:5c:7d:29:52:28:6c:87:a8:
         6a:04:9d:83:52:be:58:94:5f:ef:71:f0:0b:69:11:19:64:21:
         62:c7:fc:7a:2a:fc:9c:ef:fd:94:a5:15:40:3c:a2:b2:2f:93:
         3e:98:1f:54:75:0a:d9:16:c1:1f:a0:79:73:1d:cf:f4:69:fb:
         72:69:bc:44:d9:8c:8b:26:f3:5f:85:d2:5f:d3:c5:3c:13:9b:
         6c:72:41:8f:cc:8c:e8:1f:57:be:43:aa:26:c6:d3:f7:48:64:
         e6:02:7f:7a:02:23:84:3d:ad:f9:3d:34:22:1c:0e:34:3c:ad:
         bb:55:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----