Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
File:                     TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json)
Hash identifier:          oqib/iZ+Awm3zOcriBlc38ZIFyb3tTcslFBDJH0W9LM=
Subject key identifier:   0E:9A:69:12:02:20:37:63:9D:08:05:70:D7:81:27:44:62:9D:B8:3F
Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7
Certificate issuer:       /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7
Certificate serial:       0665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
Manifest number:          065F
Signing time:             Thu 30 Jan 2025 22:24:43 +0000
Manifest this update:     Thu 30 Jan 2025 22:24:43 +0000
Manifest next update:     Thu 06 Feb 2025 22:24:43 +0000
Files and hashes:         1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: 5DbSxA2tnafaaBIhXTeR16GPdFIpFooV0Jx/i1OTfT8=)
                          2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: XuD/dJtjIFCcLvDlNEI5r0Ri7UyViz+739sGCWSc5XQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7
        Validity
            Not Before: Jan 30 22:24:43 2025 GMT
            Not After : Feb  6 22:24:43 2025 GMT
        Subject: CN=679bfc2b-b6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:56:0d:96:94:80:8c:57:02:9b:43:0f:b5:d3:
                    54:49:13:0b:33:0d:82:57:ba:a2:41:25:36:6a:19:
                    ab:cc:fe:c5:4f:c6:fa:e1:34:4a:f1:78:92:a3:35:
                    b3:dc:56:da:62:53:42:62:51:a5:a8:f9:6a:7b:5a:
                    ff:bb:cc:d8:26:60:2d:28:47:31:98:93:fc:1b:70:
                    c9:2d:4e:1e:71:e5:7a:18:34:42:08:13:ef:43:9e:
                    b6:e6:17:1f:d2:e8:a3:bd:1f:1d:39:dd:32:17:c7:
                    65:6f:56:cc:b0:5e:c3:2f:0f:41:83:5e:51:eb:81:
                    96:d2:35:2a:ed:18:28:6b:9a:67:ef:80:9e:cf:7e:
                    aa:2c:ef:1b:cb:b4:87:75:05:bb:c9:90:43:8e:8b:
                    5f:ac:c9:32:3c:15:dd:af:bc:89:a7:f0:fc:79:72:
                    eb:5f:ef:c7:48:c5:05:6b:d6:c1:30:f0:7e:ba:b2:
                    7e:c2:a7:ba:5e:78:9f:6d:c4:45:f7:ae:0b:4c:d3:
                    1d:62:0a:91:31:0f:bd:47:b5:11:0f:47:41:6d:f6:
                    c5:70:f4:06:56:b6:fc:b3:83:a5:59:39:fb:17:1f:
                    36:32:98:a9:d6:31:70:79:00:9d:54:32:71:34:5d:
                    97:e4:a9:24:f7:10:bb:eb:84:2a:3a:4c:16:e1:78:
                    8a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:69:12:02:20:37:63:9D:08:05:70:D7:81:27:44:62:9D:B8:3F
            X509v3 Authority Key Identifier:
                keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7b:c7:ab:1a:0a:d2:e1:8c:fd:01:b4:a0:37:b3:85:27:ad:
         4b:53:2b:23:92:82:8b:5b:c0:50:ba:7a:bb:40:1b:92:b4:24:
         c6:0e:a5:96:ca:2f:14:08:86:81:f0:01:be:62:58:73:ef:8f:
         65:ec:f2:02:3d:a7:e2:b8:24:9c:de:4a:be:16:90:16:5b:1e:
         e5:5f:cd:77:0b:a4:ee:47:b7:9b:2f:e1:53:92:ca:88:ed:1c:
         8d:d9:bf:77:29:86:4c:7c:13:62:cd:12:5f:83:48:25:e5:2d:
         c8:7c:3d:ad:7d:5b:54:63:b8:37:01:60:4c:a3:67:34:6d:69:
         a6:52:5e:ed:61:0b:7d:a0:e9:14:e0:d9:22:1a:01:53:82:7e:
         30:c9:0c:6e:81:00:06:e0:1f:3b:cf:57:23:ff:31:2f:a2:a0:
         ce:d6:c8:71:68:59:08:52:cc:e7:98:01:6c:4a:3d:d6:03:c8:
         a5:b4:03:d8:a7:5a:04:33:e2:df:b6:1b:cf:a1:4b:81:fe:c7:
         aa:1b:19:7e:90:9a:d4:9c:9c:34:04:96:3b:0f:53:85:33:09:
         68:fa:ad:b2:3c:3b:b8:94:bb:84:c5:df:03:bd:1d:bb:2e:76:
         a1:ff:e3:63:23:59:08:ea:d2:d8:6d:be:a1:e7:06:d7:76:2f:
         a0:53:49:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:41:56 2025 by rpki-client