Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
File:                     xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json)
Hash identifier:          TvLFLX9BDA1L1VlEgarL9wcV1jvJmsBkeI2xlJxdj3Q=
Subject key identifier:   D8:F1:7D:4B:4E:1C:C6:C3:58:78:9D:F7:B3:CC:15:F0:86:80:2A:E7
Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
Certificate issuer:       /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Certificate serial:       078C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
Manifest number:          0781
Signing time:             Thu 30 Jan 2025 21:18:25 +0000
Manifest this update:     Thu 30 Jan 2025 21:18:24 +0000
Manifest next update:     Thu 06 Feb 2025 21:18:24 +0000
Files and hashes:         1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: jATRkzSmAhm7pcNI53Ye9Olw7KhP+Mt9071PjqZ4xkc=)
                          2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: 4bMonkEILF31i3rwXcmiWVxlZY8L3ObeZ0NQ0u78bEY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
        Validity
            Not Before: Jan 30 21:18:24 2025 GMT
            Not After : Feb  6 21:18:24 2025 GMT
        Subject: CN=679beca1-47a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:7e:c5:94:49:8c:41:66:4a:17:c9:d0:21:
                    9d:20:de:0f:f6:4a:89:14:98:6b:a0:e1:c5:b9:a8:
                    f4:f2:2e:3d:9e:39:92:d3:eb:07:63:2a:c3:ce:db:
                    9a:eb:ec:2c:8a:b8:a2:24:b1:63:fd:62:aa:7c:69:
                    4a:79:f0:b6:be:6e:46:16:a9:bd:15:d2:ee:d9:0c:
                    63:27:f2:65:d3:62:c5:40:3d:ec:03:66:7f:39:e1:
                    40:69:c3:e8:5f:54:67:f7:b7:28:38:67:f4:a6:71:
                    32:9a:4a:63:89:94:33:0e:92:2d:fc:4d:9d:73:93:
                    d3:d0:45:0c:c2:ff:8d:a3:bc:b6:11:9b:cf:92:d5:
                    8f:36:c0:b3:4e:14:a3:86:50:28:38:80:81:18:cf:
                    eb:d6:8f:fe:82:96:a6:53:93:82:49:d1:03:83:89:
                    6b:2e:1e:1f:fb:09:91:bc:7b:a5:a9:b5:d7:96:5b:
                    74:2b:7e:99:4a:38:e6:f5:5c:b5:0c:a6:b6:75:ca:
                    97:64:3d:75:bb:60:8f:77:c0:29:32:e1:1c:19:6a:
                    37:8e:20:85:a4:13:c3:3c:14:b2:85:11:49:04:55:
                    55:7d:ea:b2:9a:ec:a7:a5:f0:ae:fc:63:bc:91:83:
                    73:62:90:38:ba:b7:61:2a:17:8b:49:e6:3b:ec:1f:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F1:7D:4B:4E:1C:C6:C3:58:78:9D:F7:B3:CC:15:F0:86:80:2A:E7
            X509v3 Authority Key Identifier:
                keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:43:c1:f3:ba:b2:94:ae:f0:3a:a8:dd:54:f3:49:1e:b4:4e:
         14:dd:28:86:01:57:ee:e9:c0:54:14:14:d1:83:92:7e:de:40:
         f3:c9:45:16:c7:44:d6:c6:16:bb:88:cb:22:09:da:b5:3e:b0:
         2c:8d:6a:3a:70:23:28:7f:58:e5:b3:07:8e:d4:48:b8:d1:7d:
         5e:9b:a9:b8:42:91:4b:61:d7:3a:25:74:af:4f:fd:45:78:a4:
         91:9a:fd:fe:d1:27:43:4b:14:de:7c:16:0c:17:da:fa:51:31:
         31:ed:f9:9b:15:08:ab:9f:b8:74:54:be:e2:f6:ab:cc:03:4e:
         26:c8:54:c3:f4:12:53:b5:5e:f4:3f:44:e5:9e:12:77:59:56:
         34:5d:03:eb:c0:53:96:2c:96:8c:dd:ed:24:04:bc:59:93:9c:
         76:fa:e8:6d:fc:c8:68:30:ff:bb:f0:3a:90:85:2e:71:fd:86:
         49:0e:30:b1:34:0b:27:58:f8:dd:c8:10:a4:47:3e:98:f0:60:
         42:1e:f5:ea:dc:dd:5f:ba:d9:69:ab:1b:e8:a6:e0:0e:34:26:
         de:3f:16:2b:17:bc:29:4b:73:43:39:43:86:44:90:c4:d0:e7:
         82:cc:89:ab:18:98:27:a4:f6:9c:7e:61:13:9f:3a:de:b7:0a:
         38:f7:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:30 2025 by rpki-client