Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
File:                     b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json)
Hash identifier:          bubLnYg2w3ZdlAuzQ8YchfngNWoUudYErfiC/2yeGJQ=
Subject key identifier:   7B:B6:9C:7D:23:F8:15:11:51:58:AF:57:DD:3C:4D:1B:03:63:CB:4B
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Certificate issuer:       /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
Manifest number:          27
Signing time:             Fri 31 Jan 2025 06:50:25 +0000
Manifest this update:     Fri 31 Jan 2025 06:50:24 +0000
Manifest next update:     Fri 07 Feb 2025 06:50:24 +0000
Files and hashes:         1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: 0Ya4HCE80idY5ShzCA9mryjf/nTwdECddiugCwO6Z9I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
        Validity
            Not Before: Jan 31 06:50:24 2025 GMT
            Not After : Feb  7 06:50:24 2025 GMT
        Subject: CN=679c72b1-6615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:c9:8b:fd:4b:b6:8a:53:90:74:62:33:71:
                    9a:a1:55:5a:cd:b6:4c:96:43:25:3a:5f:19:b2:12:
                    60:a5:b7:c1:18:43:6b:89:1b:df:94:9d:47:e2:39:
                    55:a9:6b:60:61:e6:e1:67:8d:58:3d:3f:eb:6d:18:
                    dd:3a:b9:aa:c9:ff:14:17:71:54:76:07:4e:70:c9:
                    76:19:e4:85:41:65:4a:14:d0:80:93:05:38:af:52:
                    bd:b5:a9:25:78:05:45:47:33:33:a2:b7:7d:eb:b6:
                    f6:f3:a0:87:79:44:59:68:6c:a7:59:9e:bf:60:30:
                    ba:81:17:5d:3c:c5:95:d5:9c:3b:1a:1b:93:bd:b4:
                    4e:98:10:be:97:8b:0e:37:80:07:eb:f6:54:ec:a4:
                    18:06:7f:c3:ab:a5:77:41:09:d1:4e:94:1f:9c:1e:
                    95:82:67:89:4e:67:38:03:a5:97:72:7a:1a:70:ad:
                    bc:c0:a8:35:09:4b:2a:f4:f1:8e:1c:8c:f5:6f:46:
                    2f:db:ac:dd:b4:00:5f:d5:ff:8f:47:db:b5:3c:5a:
                    78:e0:c3:9a:20:f7:60:7a:69:ae:3c:d1:a9:fd:58:
                    5d:19:8f:db:15:78:9a:9a:f3:5a:50:57:76:a5:4a:
                    b8:44:f2:bc:df:2f:71:73:66:6b:7d:59:d6:89:a1:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B6:9C:7D:23:F8:15:11:51:58:AF:57:DD:3C:4D:1B:03:63:CB:4B
            X509v3 Authority Key Identifier:
                keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:20:1d:89:79:ce:63:e5:44:46:49:67:5a:08:21:b1:81:
         5c:eb:9c:21:6b:0d:7e:ed:0a:10:d0:7b:0f:cc:ae:57:44:ef:
         7a:dc:f6:d7:01:99:4c:0b:4b:ed:ba:d2:9c:f5:1a:1a:85:15:
         f5:4c:70:45:1f:6f:bc:2a:6d:c5:f8:d5:45:38:38:ea:ec:9c:
         3c:2c:9a:ef:11:24:6e:b5:7d:39:a8:41:82:64:00:21:0c:52:
         06:71:b1:a4:86:c4:9f:5d:af:f5:8c:36:ec:e5:83:9a:55:3c:
         14:f4:a6:67:54:42:43:e7:6f:39:88:88:91:7b:b3:ce:ba:21:
         db:33:a5:35:7d:d8:f6:78:af:83:ad:91:f7:21:db:bd:4b:d9:
         c5:c2:60:5a:7f:00:60:b0:be:b0:74:85:ce:af:84:be:e3:d3:
         e2:dd:70:bc:76:b9:16:3a:48:d0:25:c3:e6:5c:95:aa:e7:b3:
         96:f8:ed:55:b1:d8:56:77:66:21:2c:6c:d2:eb:f6:1d:e4:ff:
         56:32:b1:2c:11:fa:32:0f:c8:e0:98:bc:d2:70:71:04:81:40:
         e9:ae:2d:48:ad:6f:6d:f9:59:28:86:3b:00:82:e8:5a:95:6a:
         4e:fa:28:03:5b:f3:28:29:02:68:73:17:f6:b2:45:79:6f:a6:
         0f:73:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:05:59 2025 by rpki-client