Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
File:                     BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json)
Hash identifier:          jxOZSa9x0shVZ+QT/cwbnUeBbyrcB2wm6aTjVmrlfU0=
Subject key identifier:   F7:3E:8A:F0:66:26:3D:C4:1E:43:8B:FE:B2:F2:0A:78:FB:F3:B2:38
Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
Certificate issuer:       /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Certificate serial:       1672
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
Manifest number:          14A6
Signing time:             Fri 31 Jan 2025 17:12:49 +0000
Manifest this update:     Fri 31 Jan 2025 17:12:48 +0000
Manifest next update:     Fri 07 Feb 2025 17:12:48 +0000
Files and hashes:         1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: gP5OvU2WLH4xOxO7kqwZhQ/Xgeu4oBYdFmHHXd5QWM8=)
                          2: 8D19F1388B3511EF99F24263C4F9AE02.roa (hash: k8psAcI9yifLJZ7mYqwtVQil3zhbueOfAddjLp6rE9k=)
                          3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: Lx5JMDz+euSwXfN2bBhbtzFpbOuwQ+UGzdRfQfwqwmg=)
                          4: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: jFWx3yosTM6Ngdos0+GDHNaOyAPdPCLeZtZ1sRgMYug=)
                          5: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: 3K7qEYTTRPaMHZTJiAeJCFj5NoW5czqKHLINeQfDKgQ=)
                          6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: p079JhzkV3DHxp4PDPvrbepGD7tngZQCKWLeyg6QpnQ=)
                          7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: p/kEHMx8f7csUo5NBlHkAvj+aoMN4eX/IkrayOB/b3E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5746 (0x1672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
        Validity
            Not Before: Jan 31 17:12:48 2025 GMT
            Not After : Feb  7 17:12:48 2025 GMT
        Subject: CN=679d0490-8733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:42:f6:7d:16:ae:91:82:5f:10:3a:3d:a5:
                    8e:23:bc:15:94:7b:bf:28:9e:11:32:e6:5e:d8:5b:
                    ab:a0:b1:d4:5b:9f:d1:5c:f2:14:06:09:1a:7c:33:
                    66:f8:8e:aa:76:0c:fe:1a:77:88:22:c8:af:d2:a5:
                    84:5a:4b:25:a3:a6:c9:3d:dc:86:15:68:10:74:e9:
                    66:61:49:8e:e2:87:a0:64:0e:80:cb:20:b8:93:3a:
                    e5:da:28:0d:56:c4:f5:b1:b7:d3:9e:e7:94:31:d0:
                    89:65:a0:3e:ba:ac:5e:6a:63:e1:1e:84:2e:dc:3d:
                    4f:a4:41:16:03:fb:dd:53:12:ef:c7:cd:cb:98:20:
                    3f:da:ab:8e:df:44:c0:ca:a4:c3:1a:02:bf:06:ff:
                    5a:15:d8:d1:94:a4:2d:2c:6b:bd:7d:ae:da:aa:78:
                    17:e1:69:22:42:75:8f:1b:b6:4a:08:59:fd:9f:5e:
                    01:8b:ad:16:37:01:6d:f4:73:0b:bf:78:2d:d2:01:
                    ff:fd:00:44:48:96:4d:1e:a6:db:8d:fb:5f:9f:ae:
                    32:cc:75:b1:9f:c5:26:7b:f0:e1:d7:a4:27:b6:fd:
                    18:0d:f6:f0:b6:8f:ab:72:f2:1b:49:a4:d0:87:31:
                    72:8b:21:dd:07:67:63:dd:1c:76:2a:cb:41:be:b1:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3E:8A:F0:66:26:3D:C4:1E:43:8B:FE:B2:F2:0A:78:FB:F3:B2:38
            X509v3 Authority Key Identifier:
                keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:41:49:e3:06:21:f8:39:6c:70:05:29:d7:b8:bc:5d:21:32:
         4b:6d:38:5c:03:b8:46:3e:61:1c:95:d3:16:e5:7c:c6:42:2d:
         f5:b9:e1:4d:7c:83:16:6e:25:8a:e9:cf:b4:f0:48:eb:27:4f:
         6f:cd:1d:a7:01:b0:67:a1:0e:d7:17:c3:19:4d:93:a7:fc:3e:
         ec:5e:36:df:54:c6:d0:34:4c:16:7c:c2:04:a7:72:bd:07:b1:
         d2:af:7d:ae:c4:f2:de:15:69:a8:a2:24:d6:38:ab:d6:c0:00:
         9f:5b:a2:94:fe:83:b0:19:b9:c4:29:fd:fc:20:9e:d6:50:be:
         03:3f:74:ca:10:d0:d9:b2:bc:eb:e7:5b:cd:34:e3:14:d8:f9:
         ce:03:5b:de:68:41:d7:83:0f:b3:0a:7a:da:d3:30:cf:c7:e5:
         99:7a:4b:8b:46:85:b9:62:be:2f:91:67:0d:67:39:4c:4f:3e:
         5c:9a:9c:88:a2:8d:b5:77:b5:a8:63:a7:62:46:d4:ef:8e:21:
         12:ef:9d:cf:d2:77:04:4a:ee:a5:27:04:8c:43:68:8e:de:30:
         b2:0b:bb:9a:b6:0b:33:eb:bc:5d:60:b3:15:9f:38:38:1c:a7:
         ea:0d:75:5b:41:bb:3f:db:19:ac:96:84:bd:fe:84:e3:63:40:
         9c:2f:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:20 2025 by rpki-client