Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File:                     A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier:          A0JJFL46ygMTUVfCUidK4z8Tz0VRFB144JQoPdwznzo=
Subject key identifier:   0E:46:4A:6E:17:C9:22:6F:69:C2:A9:29:24:D8:FF:44:A5:F9:76:3A
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer:       /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial:       0B99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number:          0B92
Signing time:             Thu 30 Jan 2025 18:58:41 +0000
Manifest this update:     Thu 30 Jan 2025 18:58:41 +0000
Manifest next update:     Thu 06 Feb 2025 18:58:41 +0000
Files and hashes:         1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: vYBLb2S6pG50IQDP6NOdc+Q8z5oA6sjfksLLWZTea0A=)
                          2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: 3kGetLo0/1T2TeuK7e4cz2fvy6XLEBwpuyaFMSSdmUI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2969 (0xb99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
        Validity
            Not Before: Jan 30 18:58:41 2025 GMT
            Not After : Feb  6 18:58:41 2025 GMT
        Subject: CN=679bcbe1-0b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:48:18:d8:f3:9f:21:77:08:03:9e:20:ce:f0:
                    78:6a:c0:94:26:e3:dd:16:37:b1:12:62:e4:ad:e2:
                    17:8c:4c:f5:63:44:ef:65:c4:54:be:27:cc:e0:7c:
                    b4:92:98:63:7e:c6:67:39:fd:9b:a7:bb:47:1d:99:
                    fd:e6:01:08:e9:bf:df:92:e7:3d:38:54:1a:68:f3:
                    e9:ba:19:2a:aa:66:eb:89:ff:37:66:46:0b:ad:a8:
                    03:b5:be:06:41:c1:6f:95:d8:af:1b:c4:0f:73:0f:
                    78:3c:62:d2:61:7b:be:be:d4:59:ac:1d:f8:5f:85:
                    a4:9c:75:28:fd:89:4c:34:be:98:f5:6f:64:80:ce:
                    80:90:23:55:76:3c:f4:94:89:d4:b6:e3:1d:a3:dd:
                    7a:61:dd:b1:55:10:fb:40:bb:4c:70:a2:4f:f5:dd:
                    8b:f8:1a:b9:9e:3c:b6:e5:fb:97:98:0e:d1:9b:88:
                    79:be:6c:ac:80:1a:7e:c8:6b:e4:72:e8:0a:8d:a8:
                    6e:d8:35:28:ff:8b:b5:f0:50:4b:76:85:ce:49:81:
                    84:67:32:36:f8:2d:75:5f:59:4f:46:bb:b2:59:9a:
                    54:bb:c3:b9:89:4d:91:9d:b1:db:9b:d7:5c:36:e5:
                    8c:d7:bd:68:87:72:b5:af:84:2e:ac:83:88:e0:17:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:46:4A:6E:17:C9:22:6F:69:C2:A9:29:24:D8:FF:44:A5:F9:76:3A
            X509v3 Authority Key Identifier:
                keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:00:1c:c8:b5:73:80:df:6a:29:a8:42:9c:62:5c:cb:7b:f3:
         b5:53:a1:c4:95:a5:64:f9:2b:9a:e3:a0:66:bc:8d:9c:77:e3:
         80:bf:ef:7a:33:f6:d6:60:fb:03:ae:5a:f3:60:18:52:92:8a:
         8c:6d:ab:33:e0:28:7d:c5:07:5c:cd:55:5f:fa:e6:fa:5a:63:
         d6:ed:c4:66:fe:25:52:39:19:fa:7b:80:87:c4:96:c8:25:ae:
         3a:9f:d3:37:d2:d5:80:b5:6f:00:8c:70:71:87:66:b2:e4:2c:
         ca:80:a0:3f:f2:2c:b9:de:5e:b9:25:a4:53:cd:3e:98:8a:58:
         15:bd:81:c1:d4:69:a0:20:d6:7d:e1:59:19:d6:50:59:65:6c:
         32:63:79:49:d6:7a:67:f1:ec:63:4a:ff:61:52:fe:80:61:56:
         ed:f1:cf:a3:af:c0:82:95:a1:ad:4b:0d:a4:f2:45:71:2c:e5:
         35:3a:57:da:7f:6b:4e:0b:c6:09:1f:1c:ec:0b:11:b3:13:e3:
         24:a0:cf:fa:96:b0:46:a4:f6:31:95:ee:9b:d2:1c:14:0f:79:
         8a:a9:79:30:7d:be:bd:a5:fd:b5:db:a4:33:0c:c9:68:55:e4:
         18:f3:62:be:8b:a7:8b:17:66:f4:ce:00:39:07:c1:04:0e:2c:
         f4:da:34:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:38 2025 by rpki-client