Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
File:                     uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json)
Hash identifier:          yhSPL0yRLpvWGGnehljwH/2Jers3+ZrtdJ9zr/7HxZ8=
Subject key identifier:   2F:51:A1:F0:2C:16:33:F4:45:2D:8A:FC:7B:6A:07:49:F8:D9:F7:0B
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Certificate issuer:       /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial:       0627
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
Manifest number:          061F
Signing time:             Thu 30 Jan 2025 22:41:06 +0000
Manifest this update:     Thu 30 Jan 2025 22:41:06 +0000
Manifest next update:     Thu 06 Feb 2025 22:41:06 +0000
Files and hashes:         1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: GH63FMeUxgRo/aoYZvqS7cNdcJMTojH6La50SuD0eSs=)
                          2: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: J+8/ZwrlIkoJr01jQAl9vk2aVwqPeoCZlFWB5DqiI1A=)
                          3: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: ojB4V4VtVHXuFHAezvaTkfH4Bh/CstC86ZtstiMw1LA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
        Validity
            Not Before: Jan 30 22:41:06 2025 GMT
            Not After : Feb  6 22:41:06 2025 GMT
        Subject: CN=679c0002-1578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:26:5d:86:74:33:d7:9e:6a:f9:ed:46:f7:59:
                    ee:bb:9a:e1:a8:3e:c2:c5:66:95:f5:7c:a9:e2:bf:
                    9c:57:90:5a:47:55:80:82:b3:7c:ac:e4:d4:3d:a5:
                    00:7e:83:28:75:37:2b:48:9c:86:d2:a7:b7:46:59:
                    60:c0:3b:5c:c8:a0:d8:3a:7e:b7:09:42:5e:8f:78:
                    c6:f2:2a:ce:3f:d2:f5:24:30:b4:40:de:43:0e:40:
                    1e:f1:28:d6:00:d2:1a:35:1a:90:93:60:60:ed:d2:
                    d3:57:e8:fc:3a:8b:2f:03:03:3f:9e:66:0a:4c:56:
                    97:af:bb:11:b4:df:b6:e3:26:56:c5:81:12:8c:e6:
                    cb:c5:c8:e9:81:0c:cc:ec:95:b0:29:1f:49:f3:50:
                    1b:01:2f:10:5c:ba:55:d0:48:b6:1e:a1:42:b5:d0:
                    30:99:25:66:23:a3:c7:30:e3:9c:49:5d:36:77:9d:
                    f0:da:9b:71:af:5f:c8:9c:44:d1:e3:84:e5:bf:6d:
                    5f:7d:52:a3:9e:64:fd:43:15:ee:43:b3:1b:db:40:
                    d7:8c:01:18:28:22:91:fc:48:94:6a:44:64:ec:ff:
                    45:bd:9c:38:19:c5:b3:f7:6d:54:78:cb:77:aa:59:
                    31:53:93:c0:9c:b4:40:48:36:d2:5c:d7:09:63:5c:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:51:A1:F0:2C:16:33:F4:45:2D:8A:FC:7B:6A:07:49:F8:D9:F7:0B
            X509v3 Authority Key Identifier:
                keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:97:26:3c:61:dd:99:c3:5b:a4:5c:c3:07:e8:6b:e6:5e:24:
         44:53:64:4d:79:f2:8e:83:ae:f7:20:9e:08:0c:9b:e8:73:a5:
         80:c3:d0:a0:51:a2:1f:54:c7:dc:50:f9:73:cf:07:d7:b8:c0:
         b6:0e:aa:66:d8:86:09:d5:f4:01:bf:58:ec:43:4c:03:85:c5:
         ca:be:d5:d6:9d:3c:37:a4:8a:e8:43:66:90:22:74:97:01:b4:
         b9:37:69:c8:49:b7:da:02:ea:9b:28:89:9d:05:09:7b:03:f1:
         34:0e:83:9f:01:2f:bb:18:0b:f2:69:2a:c6:04:3c:d0:52:88:
         6b:8e:36:c6:53:10:c4:30:5b:f4:9c:7c:14:17:de:94:02:b7:
         90:2c:78:a4:5a:92:b1:3e:7d:24:70:8b:87:49:2f:45:19:b4:
         52:79:ba:62:f4:25:2b:b3:11:7e:61:27:91:e6:cf:03:87:07:
         e3:14:33:27:09:8b:e0:c1:46:c9:9f:79:02:59:ff:b1:b5:67:
         86:20:c1:55:36:34:b9:a6:93:83:14:03:dc:5d:2c:94:be:71:
         86:17:49:b5:60:24:0f:d9:e6:3a:d8:56:07:28:2c:62:0c:c7:
         e6:b6:b7:20:21:bc:e7:74:03:74:aa:ab:c2:b5:60:92:0d:a3:
         95:19:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:28 2025 by rpki-client