Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
File:                     Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json)
Hash identifier:          rxtPQlU4aP4KDzuHQblHOmF5alQVKnLT0E3HRIfFBtQ=
Subject key identifier:   8F:1A:0A:6F:85:01:AA:D3:22:6D:5D:FB:42:8C:2C:E8:3A:63:2B:35
Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4
Certificate issuer:       /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4
Certificate serial:       0D11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
Manifest number:          0D08
Signing time:             Fri 31 Jan 2025 18:01:09 +0000
Manifest this update:     Fri 31 Jan 2025 18:01:08 +0000
Manifest next update:     Fri 07 Feb 2025 18:01:08 +0000
Files and hashes:         1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: TrV0exyn2QY9VylQ1yvE4gbZE/G5hoQzdRyyxKB/kMY=)
                          2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: 3lfdylanDHmeBtco3xOY3EFynIvyeVsjRU7spFbzglc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3345 (0xd11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4
        Validity
            Not Before: Jan 31 18:01:08 2025 GMT
            Not After : Feb  7 18:01:08 2025 GMT
        Subject: CN=679d0fe5-5a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:33:da:fa:27:1f:8c:18:03:7b:cd:9f:ab:
                    1c:a6:1d:3f:0c:83:61:ef:c4:4c:27:cc:8c:cf:ad:
                    4c:19:a4:98:bb:1f:5c:18:f0:98:24:57:60:10:72:
                    64:52:bb:04:69:b1:58:ca:21:44:22:54:1a:dc:90:
                    69:3c:0e:68:c0:46:88:45:09:33:56:9f:51:ef:b4:
                    b1:8f:1d:95:25:35:7d:4f:c0:5b:3d:dc:39:6a:10:
                    5c:f6:9d:3c:dc:71:82:ea:85:83:a9:85:9a:6f:61:
                    c1:aa:24:ec:08:04:c5:31:ff:5a:ca:4a:06:4f:04:
                    fc:88:be:22:5e:80:5b:c2:cc:79:a6:3a:b4:5f:e3:
                    5d:36:a2:36:6e:d1:e6:f9:f5:07:b5:d6:9d:84:c6:
                    79:9e:85:20:35:24:5b:5d:d3:e5:80:af:df:58:08:
                    59:3a:fb:58:50:d6:e6:c3:83:12:81:e9:0d:57:41:
                    66:b0:3b:ee:dd:aa:42:ac:ca:5a:94:5d:ad:6c:f3:
                    e8:28:80:ea:67:f3:63:85:75:f6:21:b2:1f:af:fd:
                    d4:41:71:f4:bb:be:a7:e1:02:9c:21:ec:52:fc:bb:
                    42:78:00:71:a1:e5:ce:06:2b:12:9c:ea:2a:8b:94:
                    3b:67:20:a0:1f:64:ab:fb:cc:3f:c1:1d:e0:64:1f:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1A:0A:6F:85:01:AA:D3:22:6D:5D:FB:42:8C:2C:E8:3A:63:2B:35
            X509v3 Authority Key Identifier:
                keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2b:cb:91:b6:d4:92:d9:2b:0d:b7:52:78:b2:a5:69:12:d1:
         9f:4d:cb:5f:13:84:6a:ff:9f:6b:a1:0e:03:fe:67:1e:2b:06:
         47:de:80:33:27:dd:16:34:87:35:b8:7c:c7:95:2b:55:76:46:
         dc:1b:f2:1f:e7:ae:01:d6:74:96:dc:b4:38:3f:f4:d1:9c:6f:
         53:08:b8:32:6e:7f:5b:3e:f9:e1:57:a3:1c:12:71:e2:dd:fc:
         0c:e2:20:93:19:d8:76:91:36:5a:d4:8a:33:39:ab:3a:30:db:
         ec:4b:98:42:d8:eb:3d:48:bd:53:63:9b:8b:22:57:74:23:ad:
         b4:f6:b2:f0:f0:e5:2b:da:3e:32:44:7f:b7:23:b4:4c:3d:32:
         a1:6e:68:ac:89:60:85:6a:a1:99:e8:f3:27:3a:94:6a:92:53:
         ca:94:90:08:15:a7:87:94:0d:20:0f:45:61:0d:62:c9:f5:5c:
         e6:42:1e:54:68:27:28:58:32:6b:35:c9:4f:a5:25:5e:fe:fc:
         70:90:ff:3f:09:9c:6b:9a:dc:94:a0:24:b5:ba:fe:23:14:5e:
         8d:7d:d7:98:3f:01:14:6c:f7:c8:e1:63:b0:74:70:29:df:e5:
         59:f2:06:cb:ab:3c:dd:e5:8d:c0:e2:c9:88:d2:43:84:0f:4c:
         98:a1:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:56 2025 by rpki-client