Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File:                     Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier:          nlpZGpMNVkxEAnGS0w7qyV6gfBs8NHiVaqPjItGbyy8=
Subject key identifier:   E1:76:29:17:E8:CE:0A:A6:94:5C:ED:33:C7:CC:D8:45:E4:0C:50:AF
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer:       /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial:       06FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number:          06F7
Signing time:             Thu 30 Jan 2025 21:53:44 +0000
Manifest this update:     Thu 30 Jan 2025 21:53:44 +0000
Manifest next update:     Thu 06 Feb 2025 21:53:44 +0000
Files and hashes:         1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: tV1Umrp3Wr6zP/iXGolP04M+oZNI3c5+gGoUSG41GBQ=)
                          2: 765EF4EC2FB411EB9720723EC4F9AE02.roa (hash: oa3l32ZpDHfSSJrhkDdT2fWfIq3w4o01a+Ike5oehX8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1788 (0x6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
        Validity
            Not Before: Jan 30 21:53:44 2025 GMT
            Not After : Feb  6 21:53:44 2025 GMT
        Subject: CN=679bf4e8-f272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:c6:ba:14:ae:03:02:c1:03:6f:42:13:04:
                    93:a9:81:d6:a7:af:b0:13:1d:a3:f7:ca:89:36:e8:
                    ef:33:d5:ff:58:58:15:87:48:9d:f4:e6:3d:68:38:
                    22:89:6e:d2:2d:71:70:c6:4b:c4:66:3e:33:86:51:
                    70:b7:bd:e1:3a:8e:8f:0d:2b:dc:6d:d1:b4:03:11:
                    a9:47:46:25:b0:51:e1:53:b4:cc:b7:69:9f:8b:ba:
                    dd:54:7e:ab:be:5a:2b:79:ad:73:61:ed:c2:9b:a7:
                    ae:fc:19:3c:56:19:ce:21:4c:e2:bb:de:fe:74:1f:
                    cb:a9:22:ec:11:4b:0c:0b:0a:e4:07:cf:9a:ba:be:
                    e9:6e:74:9c:2c:80:64:01:62:3e:bb:0d:25:41:ed:
                    70:38:07:a2:ca:2a:1e:b0:ef:ff:9e:3a:9b:98:e8:
                    22:b5:cb:ae:73:2e:a1:07:9a:67:cc:05:ab:25:32:
                    73:a6:63:37:56:a2:0f:1a:3a:85:15:6d:53:a2:00:
                    1c:1a:d1:7e:64:10:ca:08:d9:13:54:c7:dd:75:d1:
                    85:65:06:20:6e:a5:9e:91:c3:ff:ac:f5:ec:e7:6f:
                    42:cc:f6:b9:0b:8d:c9:2c:eb:94:cb:39:25:6b:04:
                    bf:d0:10:07:c3:18:f4:b1:7c:64:c3:38:38:7a:a3:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:76:29:17:E8:CE:0A:A6:94:5C:ED:33:C7:CC:D8:45:E4:0C:50:AF
            X509v3 Authority Key Identifier:
                keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:20:7e:c6:81:d9:9a:ee:75:87:d8:c9:2e:03:82:9d:ba:a7:
         e1:6a:70:2b:50:05:97:67:78:52:57:fa:db:1f:fe:ab:b1:53:
         b8:25:7f:61:00:f3:92:59:2f:a4:f0:25:0f:4c:86:01:d2:cc:
         ab:2a:d3:d4:a0:67:e7:11:e4:a4:67:c4:09:64:59:fe:cc:2a:
         d3:93:da:c3:e1:1f:55:c3:dd:dc:07:c7:e6:20:00:08:fe:80:
         0a:0a:02:10:da:2a:b8:04:58:c4:b5:1e:84:73:8f:45:c6:3e:
         bc:73:1d:3c:30:b5:a6:19:47:b7:19:2b:d4:38:42:9e:d1:3b:
         18:a0:03:88:e5:11:1f:e2:f0:ea:4c:1a:de:fb:28:79:fb:a0:
         5a:b3:bf:74:47:8e:ec:df:b4:dd:a7:06:6e:d2:29:be:79:fe:
         de:17:34:ea:28:c6:2e:b6:12:f9:8b:14:82:16:22:7f:7e:41:
         7e:ca:00:a2:1f:00:56:6d:9d:39:93:cb:67:9b:8a:c7:64:95:
         55:35:39:78:2d:43:82:63:12:ba:64:7e:b5:8a:5a:a0:d8:8c:
         e1:b5:85:4a:57:eb:0d:32:ef:d6:29:b1:66:f9:e5:82:29:93:
         79:09:bb:fa:27:5c:fc:24:d8:dc:bc:45:31:2e:59:2c:86:fa:
         ac:db:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:55 2025 by rpki-client