Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
File:                     SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json)
Hash identifier:          HSLpTJ6RF3WiNMJ+E4Ttj+siYv3WiDvQT4ZsEoERX7g=
Subject key identifier:   35:0D:36:85:C4:18:6B:B1:48:B9:A3:83:5C:57:A8:DA:73:A4:A3:36
Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
Certificate issuer:       /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Certificate serial:       0C66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
Manifest number:          0C2D
Signing time:             Fri 31 Jan 2025 18:28:53 +0000
Manifest this update:     Fri 31 Jan 2025 18:28:53 +0000
Manifest next update:     Fri 07 Feb 2025 18:28:53 +0000
Files and hashes:         1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: 6grxiDxuiCMil9/vRr321ZKVXN2Lh5JVMJhY51A8j6E=)
                          2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: a6Xwc4IgmpEHrW4twM+UR9anddZ08NYax5VtnbtXTkI=)
                          3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: Gy8EKBzby7TbA7bANPsKrh8185xtB8FfvgQKdW33eec=)
                          4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: ZMkvn8M/+ZjeMYlcx5BpRn45pEDyzj9iUfMiESTYCg8=)
                          5: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: Y0Xjy0NkWka/3Qez2EmWXAAasDaGl97FsPDAHdKjWqE=)
                          6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: 0DoL/2IpHaxAw9TImjiB81cUOFzWeL1Jqh3GctUyL3w=)
                          7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: dMeU+VWkNLHSsE/YjflyFx6fuE/Tkj6eZEDgHPwyvpw=)
                          8: E0848D606F7611EDB491621FC4F9AE02.roa (hash: /x4gISDdQ58Cm6cZRirKRBC5irA+dN86MCQWeCpo8e4=)
                          9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: l0LcGN3bLpC6egx6E1ErrRqx4ZIHX8gGWW4UD/kKTdA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
        Validity
            Not Before: Jan 31 18:28:53 2025 GMT
            Not After : Feb  7 18:28:53 2025 GMT
        Subject: CN=679d1665-dc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:fa:94:e4:26:62:f6:ae:62:80:1d:78:1a:
                    ba:d9:57:12:de:f7:09:66:7f:a6:1e:08:e6:e9:2a:
                    d8:fd:de:5c:35:a7:17:39:2d:23:c6:3b:a1:75:57:
                    89:77:d2:6f:ef:1f:d6:5b:d0:63:00:08:07:58:42:
                    14:81:a1:ea:4b:e3:58:45:04:8e:9e:48:b8:54:86:
                    0c:fb:ca:0a:1e:59:19:c9:a3:f1:54:63:bf:01:49:
                    58:77:09:51:e0:0d:cd:a1:22:86:3a:a0:e3:16:91:
                    c3:e0:9b:da:b4:4d:eb:d2:45:58:10:0e:cf:c7:db:
                    f4:91:33:fd:47:a9:3b:32:af:da:37:76:79:a1:f3:
                    b4:4d:6c:0e:8b:4e:96:af:52:2d:dd:ea:67:eb:bb:
                    99:2c:99:b0:69:04:6e:2a:5a:a1:42:01:77:0b:69:
                    94:5b:73:a3:77:14:da:bc:37:18:09:0e:0d:70:62:
                    71:7c:ed:a1:6f:e2:42:b7:41:11:32:c0:e6:1a:a1:
                    54:18:e0:df:d9:f6:7f:08:30:51:ac:79:9a:19:e6:
                    59:bb:cc:5d:08:c0:9c:0e:6d:bb:11:c4:c1:27:85:
                    0c:9b:3a:39:64:c1:f7:c8:09:d7:2d:6f:66:3f:c7:
                    22:51:ea:7b:5f:75:ff:76:2e:d7:1b:fb:cf:6c:55:
                    a1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0D:36:85:C4:18:6B:B1:48:B9:A3:83:5C:57:A8:DA:73:A4:A3:36
            X509v3 Authority Key Identifier:
                keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:a8:28:34:78:88:10:b4:ab:c1:5a:63:b3:38:f2:b2:73:
         af:f1:a3:29:68:db:55:ec:a4:3d:da:a9:15:12:cd:fd:85:a0:
         03:2a:73:b5:41:1b:b4:e0:50:0f:62:9d:f4:cd:84:cf:19:97:
         8b:d2:9b:7c:c5:06:ae:e1:0b:8f:35:dc:55:05:c5:95:8e:ef:
         34:ba:b9:f5:50:56:52:48:f4:9a:28:6d:f8:b7:79:16:d5:84:
         aa:91:c7:aa:bb:ad:ad:63:92:49:74:fd:f4:42:c1:ff:75:41:
         58:4f:c6:55:57:81:14:82:ea:b6:bc:18:2b:7d:19:dc:31:15:
         18:8e:8a:80:0d:d5:38:17:3e:3a:b0:3f:55:64:8d:1c:f9:66:
         bb:56:c4:1a:4e:49:7c:db:3d:ae:02:48:fc:da:6c:b7:a3:9c:
         73:0a:89:3e:b3:8b:81:9d:70:4f:e5:11:66:0a:d5:a8:16:b9:
         1d:f3:04:0c:19:d7:75:d9:60:de:a4:8e:8d:81:cb:17:e2:d7:
         8f:92:a8:69:5e:d9:be:77:e9:da:25:30:5f:a9:e9:0e:3f:55:
         e1:20:3b:34:64:b0:5c:e1:47:1d:b8:d3:0f:0d:ee:c7:db:4d:
         e4:90:ff:1e:42:08:fb:5f:80:b9:d0:a5:bd:86:55:80:66:54:
         ee:56:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----