Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
File:                     UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json)
Hash identifier:          iS7wrJq9IE7oF73T55+kBKzBwLRqAt5bBce+5sCHdIU=
Subject key identifier:   8D:FB:E5:CF:2B:3C:4E:20:D8:A5:BE:11:4F:CC:D3:A7:A4:A2:CF:2A
Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B
Certificate issuer:       /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
Certificate serial:       0578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
Manifest number:          0573
Signing time:             Thu 30 Jan 2025 23:20:15 +0000
Manifest this update:     Thu 30 Jan 2025 23:20:15 +0000
Manifest next update:     Thu 06 Feb 2025 23:20:15 +0000
Files and hashes:         1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: FBG773966HPljNZgIY6GwFmdEPOM2QLiUgs792qdMcs=)
                          2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: iMlOmr2fNq87x6S0R4H0l10i8IQao1B6aqgg50klXMo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
        Validity
            Not Before: Jan 30 23:20:15 2025 GMT
            Not After : Feb  6 23:20:15 2025 GMT
        Subject: CN=679c092f-2964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:c1:b7:85:6c:24:a8:c9:2f:1b:c1:24:f7:
                    cd:56:74:aa:40:4d:6a:31:9f:56:cf:37:46:e2:a0:
                    83:8d:4b:83:54:d9:95:12:8a:3b:23:30:49:f1:7c:
                    d6:7a:81:7d:36:38:5a:23:ec:7e:3f:b9:27:d2:f5:
                    91:01:a4:e8:03:d4:8b:99:1e:e5:83:46:f8:00:69:
                    9c:fb:66:71:81:fc:10:74:2b:98:9d:92:ff:1e:8a:
                    0b:a3:02:33:63:53:7a:9b:38:7c:db:03:2c:77:e2:
                    e2:b6:dd:b2:3d:67:4e:42:00:43:73:1c:79:8b:36:
                    69:a8:48:e9:0e:e5:8c:66:59:c4:e6:9a:c8:9a:88:
                    3d:d2:03:f3:34:cf:b2:76:41:96:80:8c:ed:08:4b:
                    83:7b:17:49:35:77:99:69:c8:a9:34:2e:43:45:a2:
                    54:5e:46:a6:fc:d8:a9:b9:d5:eb:0f:db:20:b0:84:
                    c1:07:39:27:9d:33:fb:13:00:d6:5f:c9:7a:77:6e:
                    a2:9c:49:7f:1b:93:34:8f:16:bc:01:64:58:f9:70:
                    68:51:54:31:25:bb:7e:54:67:e1:59:6c:9d:2f:1c:
                    3c:28:5a:28:ee:a9:fd:4a:15:6b:9d:3a:15:e9:15:
                    73:56:d9:78:b3:59:c0:71:59:3d:95:71:36:9c:7e:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FB:E5:CF:2B:3C:4E:20:D8:A5:BE:11:4F:CC:D3:A7:A4:A2:CF:2A
            X509v3 Authority Key Identifier:
                keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:b0:e9:06:2e:70:35:da:b6:09:4c:b7:a9:e8:c7:02:ce:
         94:39:d1:cf:2c:9a:5f:c9:06:a4:c2:f1:af:ff:fc:32:87:a4:
         36:ff:4e:ce:fd:7e:d3:5f:cb:4e:51:2c:b6:b2:66:67:e2:d0:
         d2:79:0e:ad:bb:6a:7b:d6:5e:7c:dc:02:ed:a6:80:2c:75:bb:
         f8:f0:50:cb:6b:43:78:5a:cf:0c:ca:a6:3c:9c:ba:e6:ba:63:
         5d:f4:4e:cc:45:ef:58:dc:d7:e4:d9:df:16:18:85:c4:1f:cc:
         a2:05:d4:b3:38:79:66:bf:a5:76:1e:92:f1:bb:83:9c:1f:ad:
         a1:22:b4:65:dc:d3:db:3e:97:a4:0f:5c:ec:c5:72:d4:dc:f0:
         23:e9:3e:c3:52:9a:a0:2f:11:0b:0b:65:47:22:94:be:e8:85:
         0c:13:55:05:0d:1e:72:b6:22:99:e7:8c:3e:6b:ab:38:73:8b:
         5c:b6:ff:33:0f:4a:ea:f0:30:b1:c8:e9:af:ff:4f:4c:53:df:
         3f:60:82:52:4b:42:9e:e9:3c:e5:20:16:76:c0:1b:20:5f:26:
         8f:c2:e2:28:b7:60:ef:9f:0c:3d:b3:63:0a:8f:c1:f0:ac:cf:
         7e:f1:d9:04:c9:d2:64:f7:a1:a1:0e:95:1d:2c:d4:9f:81:c0:
         0d:f6:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:00 2025 by rpki-client