Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          IR7ZUfEAJkhFkTelHIVewVX+kf6qv1oPTki/dXYeyrk=
Subject key identifier:   CD:E2:27:36:27:35:DD:B7:D7:DB:DA:68:42:E1:0C:89:C1:76:C6:A6
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       03CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          03AE
Signing time:             Fri 31 Jan 2025 00:51:22 +0000
Manifest this update:     Fri 31 Jan 2025 00:51:22 +0000
Manifest next update:     Fri 07 Feb 2025 00:51:22 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: Cvlj3zVG11DTBP+E3zDW01qcOIW+IqM34+A6fYtwwns=)
                          2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: XYAlCpJ7mzvp/cofGi5NvPIKtbxLdre0l8+aO1T1+jg=)
                          3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: DWvrRFsnIPoLKEJMzAK4aBrg0Gv8BJj/6fbSi0CsC/o=)
                          4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 5W5E+3mSkVgIcfD5D9nwVRXpAej/2LIvbq7hJHUIIQs=)
                          5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: 1/c265I61z81RbwUjN+/+ktuTISDdU6AGxRGRBwwFGQ=)
                          6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: 0bYsYs837SFgGZweeq9bSFBIzROTTbuMX0UkDBxpW3g=)
                          7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: zT5o3xGQl3eggTa0HGvpU0sVsYrZsqPQ9mpieJGNY8E=)
                          8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: ZX3EFF6YPYsvFLMNAm4Da6miOiuOSCWVNa70Njpa5XM=)
                          9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: RdvlkapM35MRJfHVT6ITjiEohu/282iaA5oNrFH45uM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Jan 31 00:51:22 2025 GMT
            Not After : Feb  7 00:51:22 2025 GMT
        Subject: CN=679c1e8a-c039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:a5:fa:4a:c4:6d:e6:ec:52:42:13:93:db:
                    87:38:90:5b:36:c0:09:35:88:02:60:62:3b:29:88:
                    18:9f:bd:33:e9:69:e2:56:59:eb:d9:fb:36:48:45:
                    1d:0a:87:bb:4a:77:29:5e:bd:7e:53:f3:02:17:6d:
                    25:43:e6:1c:f4:69:d6:75:4f:30:e8:97:39:c2:33:
                    0d:a3:aa:9b:61:57:de:3a:ee:36:7b:6f:0e:d4:82:
                    7a:29:80:c7:7e:95:98:9e:29:35:9f:b5:60:00:59:
                    fb:70:29:39:8f:43:cc:04:1b:68:e8:90:53:ec:b1:
                    44:97:0c:8a:5d:2f:16:7b:93:71:d1:47:84:40:26:
                    bf:4a:e0:dd:f6:9a:7d:d2:5e:cf:8a:e1:53:d1:9c:
                    3c:57:2c:ae:be:ab:5f:82:56:a5:9c:08:56:38:fb:
                    47:06:8b:86:4f:1d:0b:64:08:75:da:f9:12:ae:03:
                    62:ac:fd:f5:7b:64:70:79:10:f3:2f:bd:37:88:b9:
                    05:70:7e:b7:da:d9:91:dd:34:fe:c1:83:8c:a4:b2:
                    b0:9e:8f:1e:4f:e0:05:6f:1f:dc:ff:bd:dd:82:af:
                    50:39:ca:d1:a5:f5:87:61:26:cc:15:54:c0:c3:a1:
                    0a:92:57:fa:3b:6e:5b:28:e0:fb:d4:50:d0:6b:91:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E2:27:36:27:35:DD:B7:D7:DB:DA:68:42:E1:0C:89:C1:76:C6:A6
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:92:e6:78:c1:d3:a3:49:8f:95:79:c4:01:36:51:a7:28:25:
         5a:71:23:96:80:0a:46:3d:22:0f:72:37:2d:b7:de:72:42:c1:
         79:e7:8f:5f:53:d7:94:f9:a3:cf:43:b9:b4:a8:7b:19:99:e1:
         38:26:f1:69:16:02:19:83:43:0d:b5:9d:02:42:94:32:a4:94:
         a8:a5:31:6d:a1:34:b7:ec:1a:c6:a3:81:79:61:a0:77:37:da:
         55:3c:ea:cb:cd:b2:dc:3d:75:85:d9:ac:ba:80:ec:26:7e:53:
         ba:93:be:1f:97:dc:15:ff:be:97:8e:95:7d:73:29:46:28:ce:
         75:76:8d:41:4e:29:26:07:41:3b:90:eb:b4:be:dd:74:f7:8b:
         7b:7e:e4:bc:d0:3b:69:d5:57:3d:5c:ff:9f:35:a6:81:d9:fa:
         19:ae:83:e3:e5:ca:95:e6:82:54:85:30:1f:0a:6f:38:f8:72:
         b3:11:89:bc:d6:01:24:a4:58:34:94:ab:b3:66:b1:6f:e7:b5:
         f5:c1:df:36:4d:5e:71:3b:f7:36:21:68:3a:ba:57:3e:4b:06:
         fc:a3:06:63:ab:09:9d:bf:4e:b7:a1:3f:60:8d:41:d5:34:67:
         f2:20:24:7c:83:93:9d:7e:d4:3a:82:5e:bd:b2:68:ee:5b:28:
         70:8e:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:02 2025 by rpki-client