Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
File:                     mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json)
Hash identifier:          vcypdj2E6R7betHW1KMQJwWk9IvS90GTjTmVRDmchEs=
Subject key identifier:   85:C3:04:71:0F:50:69:D8:F7:29:47:4A:30:3B:C9:73:2D:F3:E3:DA
Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87
Certificate issuer:       /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
Manifest number:          5A
Signing time:             Fri 31 Jan 2025 06:11:19 +0000
Manifest this update:     Fri 31 Jan 2025 06:11:19 +0000
Manifest next update:     Fri 07 Feb 2025 06:11:19 +0000
Files and hashes:         1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: RWT+FvsG3jmKwfFEwjWPl6T8JUxJ/ogKR+yuWTmyGLQ=)
                          2: C6DFC60A5B9B11EFA48FE643C4F9AE02.roa (hash: PcUbeq2GL9ETBRd6OiM02vny8hMoCCAWI9K7b/wI5lE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
        Validity
            Not Before: Jan 31 06:11:19 2025 GMT
            Not After : Feb  7 06:11:19 2025 GMT
        Subject: CN=679c6987-d008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:31:da:df:4f:c4:e0:75:65:1b:64:18:62:
                    43:68:89:65:f3:f7:d4:44:1c:93:b0:fb:78:de:72:
                    9d:33:3f:69:3b:0f:9e:18:6c:f0:e3:9e:9b:7b:59:
                    38:72:25:22:5f:53:b6:23:4a:3f:da:b5:4d:cc:ec:
                    01:82:12:3e:01:b1:f1:7a:50:3d:ca:b8:ae:08:cb:
                    e8:4a:d7:4c:37:11:c9:77:a7:b1:93:7f:95:4b:8b:
                    c7:06:e1:1b:c4:57:e0:e1:03:49:a3:94:cf:aa:65:
                    cc:3c:cc:10:f5:a8:72:03:33:d0:c1:0b:e9:7b:04:
                    97:b0:ac:01:3f:a6:0c:a4:03:92:e6:c7:40:d0:90:
                    ba:5e:ff:5f:cc:26:4d:11:85:fb:20:c5:84:f8:f4:
                    a6:97:d7:84:e2:c8:ff:5f:d2:f8:55:51:bf:1d:d9:
                    cd:77:3b:ca:b0:81:43:fe:a1:7b:1a:28:18:05:6c:
                    b9:82:58:5f:29:51:6e:2f:62:e3:dd:7b:77:20:14:
                    b5:4b:05:4b:bf:cd:1d:5b:7a:3e:6e:66:49:d5:54:
                    ed:88:c1:3f:2e:7e:42:48:84:96:72:2b:7b:df:e7:
                    f5:8b:62:88:29:2b:b4:7c:af:aa:21:a3:91:33:57:
                    55:27:f7:6f:ec:54:16:8e:e8:da:69:a2:52:a8:3f:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:04:71:0F:50:69:D8:F7:29:47:4A:30:3B:C9:73:2D:F3:E3:DA
            X509v3 Authority Key Identifier:
                keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9b:98:fc:b0:d5:19:43:af:cf:8b:7d:82:88:88:df:ca:06:
         4c:b0:6c:d3:30:b8:fd:31:b6:09:2b:27:5b:28:56:1e:de:a9:
         9f:12:9c:da:20:a0:72:b5:bc:d6:5d:38:3a:db:e0:aa:e0:d7:
         81:22:2c:3d:2f:f9:b5:d6:51:bc:0c:d5:2d:34:f5:64:8a:1d:
         76:d3:03:62:e5:8e:09:df:11:7d:72:b8:7a:03:16:5b:3f:27:
         a2:3e:24:f5:d1:bb:d0:14:2a:44:bc:32:48:d5:57:16:74:a0:
         1c:6e:4d:3c:5c:55:4b:8e:3b:80:94:a9:c5:21:a5:6a:4e:82:
         50:62:79:76:12:02:d3:8e:03:4e:20:cb:a0:64:a2:ce:d4:f4:
         e0:16:fc:f2:10:25:d7:00:cd:4e:54:00:ab:70:05:35:b0:dc:
         61:7c:b8:3d:6e:61:09:81:b3:c6:2a:41:4d:47:0e:a5:38:c3:
         0e:6b:dd:5d:39:4f:f4:c5:5e:02:66:73:96:d3:b6:c5:00:73:
         5b:fb:f8:c7:82:a3:9f:39:d4:13:fb:c9:40:53:f3:f7:c1:84:
         44:74:21:4f:83:53:09:2c:e1:4e:e7:34:f9:34:6d:78:10:b0:
         42:32:1e:62:e5:5d:bb:62:e9:5e:72:b0:17:53:99:c8:a5:33:
         20:5d:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:06 2025 by rpki-client