Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
File:                     uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json)
Hash identifier:          3DaSEQQFbg+xVBzuP2+mP1i8JNqGoWuHuNVyvmpzjk8=
Subject key identifier:   E8:00:C4:0D:01:89:8B:5E:84:81:4E:5B:E3:B3:49:BD:9D:7C:43:C5
Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34
Certificate issuer:       /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
Manifest number:          3C
Signing time:             Fri 31 Jan 2025 06:33:44 +0000
Manifest this update:     Fri 31 Jan 2025 06:33:43 +0000
Manifest next update:     Fri 07 Feb 2025 06:33:43 +0000
Files and hashes:         1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: A/x/mHcFMmJKC+uhpwyTNiMp6as0kicfjKoO+NVwusI=)
                          2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: YiOcP7W7AOtNltDYNBm9P2k2HnzTcQ0cTjwg3ge15m4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734
        Validity
            Not Before: Jan 31 06:33:43 2025 GMT
            Not After : Feb  7 06:33:43 2025 GMT
        Subject: CN=679c6ec8-17bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:2c:0b:2a:e1:af:66:e2:0d:f6:4f:76:a3:
                    22:b9:90:94:c0:40:27:7e:6a:fc:bc:9c:92:c4:92:
                    d9:72:53:8e:0d:b7:e9:c9:35:4b:d2:0c:54:a1:4a:
                    a3:13:ab:bb:4e:34:16:cb:29:3f:08:71:fe:cb:b0:
                    1b:55:de:c9:d3:81:4f:84:65:19:31:b6:07:6f:92:
                    7c:ad:ea:30:d1:ee:0d:03:25:3e:c8:45:1f:58:91:
                    87:e0:41:72:db:a2:f4:89:71:40:5d:90:8e:3c:ef:
                    a0:bd:56:db:b0:9c:e3:b6:92:17:d2:ae:3a:37:0c:
                    07:52:77:c4:f8:8a:7a:a0:b1:69:4d:f6:32:12:0f:
                    c2:82:46:69:5b:69:25:78:3b:ed:15:60:f9:46:01:
                    87:ba:62:72:92:d5:dc:fd:82:fc:28:92:a9:a0:3e:
                    a9:7b:6a:4c:c2:5b:20:69:19:49:2a:f2:73:ad:46:
                    fd:c3:90:43:25:b6:c1:c6:a4:03:02:5f:f2:44:0a:
                    a5:3a:0f:f6:a6:da:8b:45:e0:05:c6:11:18:a7:59:
                    c1:1f:1b:fb:d8:1f:cd:e9:9d:83:7f:c0:ab:22:d3:
                    08:b1:50:85:39:02:50:6f:de:bd:e1:bc:d3:09:92:
                    9c:21:7c:b8:c9:51:12:1e:ba:68:1b:f6:a4:fc:e8:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:00:C4:0D:01:89:8B:5E:84:81:4E:5B:E3:B3:49:BD:9D:7C:43:C5
            X509v3 Authority Key Identifier:
                keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b1:e5:23:7c:36:a6:3e:3b:21:05:71:fd:11:d3:a8:d4:b4:
         56:f0:4e:59:9d:62:9c:8b:2e:fb:9e:c6:06:6f:0b:51:cf:02:
         6a:05:e2:7d:16:67:b5:d9:6a:63:58:21:fc:19:4c:ff:d2:9f:
         2b:29:ac:d0:7b:c6:c4:ad:27:af:46:e1:f6:ca:21:e2:8c:46:
         21:d7:aa:ba:b4:1a:8f:94:f8:85:70:c0:fc:48:6d:3a:5c:c7:
         1f:f2:2e:91:8a:19:c1:bf:c2:20:5d:be:89:69:32:b5:97:39:
         a6:91:04:bf:8f:9c:41:1b:d5:5b:76:f0:0a:14:fb:30:f6:f6:
         b5:e2:e1:a2:fd:3b:92:b6:be:34:de:b1:f6:93:ad:44:67:d8:
         8d:2e:43:f4:fe:ab:ba:29:00:0a:78:e3:0e:ef:f2:84:ee:18:
         60:e5:4c:c1:48:0f:06:f6:95:ca:91:83:ae:79:2e:59:f3:1d:
         a3:19:7f:18:29:bf:63:85:02:7b:1f:91:55:93:c9:3a:16:d1:
         3c:ff:ab:a5:c6:2b:95:8c:c6:10:69:9c:83:a6:24:73:d0:e0:
         40:d0:7d:e3:25:00:86:0b:a0:30:bc:21:24:09:15:00:f8:fa:
         49:99:16:76:a2:0b:41:97:d9:31:42:6a:1c:d5:1c:6a:67:34:
         9a:1b:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:27 2025 by rpki-client