Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
File:                     VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json)
Hash identifier:          DLFSKkDG3dWUgwB+RuB9B8BJstJed4otaMEou//+bL4=
Subject key identifier:   84:48:CA:70:67:2C:FB:1A:31:07:D7:FA:7E:2F:D9:D8:53:AE:C6:DB
Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04
Certificate issuer:       /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
Manifest number:          0189
Signing time:             Fri 31 Jan 2025 03:26:34 +0000
Manifest this update:     Fri 31 Jan 2025 03:26:34 +0000
Manifest next update:     Fri 07 Feb 2025 03:26:34 +0000
Files and hashes:         1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: BnnHShnV/MG8WPneVTSvx8SwyOZSopm/cJzfQS5WkBk=)
                          2: 020607A2498711EFBB260663C4F9AE02.roa (hash: nvNzzZq+Ecqxgr++TobaSpU0AIRI4UzjKN1i1sjHamI=)
                          3: D13FCAEAA62E11EFBC284C42C4F9AE02.roa (hash: 6hgdKa35Z/wgme43twsAUwJcx1mczDKYn29trz55Beo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
        Validity
            Not Before: Jan 31 03:26:34 2025 GMT
            Not After : Feb  7 03:26:34 2025 GMT
        Subject: CN=679c42ea-7f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2f:b1:08:e0:e0:34:c0:50:3d:05:b5:29:99:
                    27:1a:86:5c:a2:91:73:a7:4c:1f:b2:f2:5a:22:e9:
                    73:ac:8d:79:f5:45:01:99:e5:b5:f7:16:0a:17:45:
                    c6:53:90:8f:8c:50:8d:d4:1f:3e:62:f6:98:8a:15:
                    cd:2f:3e:df:de:7b:90:f3:f6:13:98:78:5c:4a:c0:
                    f8:6e:6e:13:cb:b0:ac:71:d9:91:1e:18:ff:1c:ad:
                    45:bf:21:dc:47:50:53:f3:a4:e6:5b:f6:1e:b5:fc:
                    13:f2:e6:45:ca:4c:24:45:bb:99:e2:18:8b:1a:95:
                    31:6e:f0:2f:5e:2a:fd:5f:f8:b3:b3:d3:45:4d:46:
                    5c:f5:7c:d6:91:b9:df:72:61:d8:ae:f1:32:15:cb:
                    56:b4:ba:b9:55:0e:ff:b2:f6:7d:38:31:5a:64:82:
                    0b:31:d6:4c:72:39:41:9c:56:01:cf:bc:8d:a6:f9:
                    3a:5c:d8:1d:81:6e:57:85:a2:ff:7c:a9:81:53:13:
                    a9:27:9f:c8:a5:37:5f:80:a5:1a:13:6a:14:9e:d3:
                    cd:4b:d5:d6:cb:cf:c2:f2:f3:3d:1a:1b:ad:58:bb:
                    02:f9:2b:e8:2e:76:05:b7:c2:55:ae:9c:15:b9:ed:
                    fd:bb:fb:61:bd:89:19:7b:0e:eb:30:77:84:73:06:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:48:CA:70:67:2C:FB:1A:31:07:D7:FA:7E:2F:D9:D8:53:AE:C6:DB
            X509v3 Authority Key Identifier:
                keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:ea:0f:a6:f3:71:94:30:e9:11:02:63:aa:46:f1:73:b2:
         f4:b9:b5:36:8a:c3:a8:be:cb:fc:43:26:1f:31:33:35:c2:f8:
         70:00:49:ab:81:a7:6c:63:e8:8f:52:95:7d:38:ee:7f:df:54:
         64:33:c3:58:80:c8:56:7e:93:5d:6a:9d:da:94:87:5c:73:b5:
         da:3a:59:e6:e2:e4:04:2d:69:01:c5:5a:e8:cb:49:ee:c5:5a:
         ad:be:03:71:d6:a2:5a:4f:e2:55:f9:84:6d:f4:20:42:76:b7:
         c3:8f:8a:40:a1:41:ed:dd:e1:00:d5:f5:1c:c4:43:37:e7:2b:
         c9:d0:d3:fe:b6:3b:87:ab:5e:ae:60:f8:62:34:e0:4f:f4:67:
         b5:23:7f:8d:38:2b:1b:c8:68:bb:97:43:ba:49:4f:d6:29:98:
         78:92:bb:01:ce:6a:f3:27:97:52:3f:41:55:bd:ba:e6:c8:b2:
         58:52:a0:ff:6f:f9:e4:cb:4b:66:9f:ec:28:95:9c:e1:47:b6:
         32:43:90:db:38:66:15:c5:a6:20:a8:21:55:87:8e:45:68:db:
         92:b9:c6:23:01:cf:7e:5d:b0:64:85:b0:2d:15:a6:cb:94:10:
         32:9d:2c:07:38:8f:81:9e:3f:70:ef:e6:8b:2f:8a:95:35:de:
         08:30:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:00 2025 by rpki-client