Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File:                     o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier:          TzDadZhj4zKKHL9timUZh4aVT+9bY+et9USUM7Yg7nY=
Subject key identifier:   54:08:78:7D:55:42:5E:CA:62:82:93:08:25:0A:7B:40:64:F6:3D:70
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer:       /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number:          39
Signing time:             Fri 31 Jan 2025 06:35:39 +0000
Manifest this update:     Fri 31 Jan 2025 06:35:39 +0000
Manifest next update:     Fri 07 Feb 2025 06:35:39 +0000
Files and hashes:         1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: BRiVBUB756YUf2fZg2f+xIMLFLgKnotJ6q8fk8suv4A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
        Validity
            Not Before: Jan 31 06:35:39 2025 GMT
            Not After : Feb  7 06:35:39 2025 GMT
        Subject: CN=679c6f3b-c9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:6e:a8:17:af:5a:03:ae:28:4d:70:6c:61:
                    cb:6a:01:bd:0c:04:5b:26:fa:7a:a8:15:b1:32:28:
                    f5:66:a2:5d:cf:8f:4d:01:92:1e:c5:4c:c4:2a:11:
                    02:f8:ac:fb:bc:3f:55:e0:00:f6:5e:bc:88:f5:81:
                    41:7a:36:fb:fe:1f:16:49:9f:ec:08:31:04:40:69:
                    1f:e8:a4:21:b8:71:24:fe:7a:4a:1c:cb:3a:d6:90:
                    7a:07:28:ab:03:aa:56:4c:da:26:cd:98:fb:56:ed:
                    4a:6f:d8:b5:06:e9:f8:f7:14:36:1c:49:d6:23:6c:
                    5c:4a:68:0e:c1:8e:f8:df:3b:45:eb:c8:77:5f:d6:
                    00:d6:66:3d:4b:40:ca:33:ec:44:f2:50:53:4d:93:
                    ca:53:d2:04:4e:bf:d7:e6:b7:5e:64:a3:13:95:c3:
                    74:1e:49:70:ef:6e:44:0a:44:2b:26:56:d6:e2:7b:
                    40:e6:6c:82:0e:c7:35:7f:bd:30:2e:f0:0b:e5:75:
                    79:eb:b4:6a:d7:5e:1d:77:73:85:43:c9:91:16:e6:
                    73:49:1e:be:75:17:7a:d7:3b:39:d2:5d:b9:50:12:
                    53:52:dd:84:48:cc:99:ff:52:e9:f2:64:5f:22:78:
                    ef:86:96:85:26:ed:88:57:8e:28:5d:ff:38:86:08:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:08:78:7D:55:42:5E:CA:62:82:93:08:25:0A:7B:40:64:F6:3D:70
            X509v3 Authority Key Identifier:
                keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:76:b8:06:94:f6:07:78:13:94:02:25:a6:7c:f4:ec:3f:b9:
         c5:90:e0:15:ba:27:0b:af:6e:c2:07:3d:65:46:73:81:c1:5f:
         42:3e:0c:12:0f:3d:82:ff:a5:8e:fa:e1:f2:d1:22:24:c6:a4:
         9f:07:a6:44:3c:a9:f1:a8:de:48:42:99:ae:ec:2d:99:13:1c:
         bb:11:0a:ed:19:7a:76:63:73:a4:9b:10:bb:a6:82:4c:ee:a9:
         77:64:67:8d:e6:5e:a4:8a:8d:af:2c:48:d6:23:fa:b1:7d:84:
         da:80:3f:0d:a6:56:65:89:ff:7d:a0:e6:d8:e9:c4:06:0a:24:
         e9:b4:cb:e4:e1:01:63:c7:b2:cf:51:82:17:94:aa:59:78:22:
         3b:d6:4b:cf:b1:b1:f3:e9:a1:80:22:15:2d:6d:29:da:1e:96:
         e0:dc:02:a3:4d:37:22:68:cf:67:c2:43:b8:57:da:1d:3f:80:
         bd:bd:be:62:c7:0c:d0:01:bf:4e:21:ad:7c:af:b0:20:29:84:
         8e:2c:56:e6:39:4e:b0:9f:86:b0:a0:78:60:49:6b:9d:4d:70:
         4e:7a:8c:95:f3:72:31:06:8a:9c:c3:63:e3:78:08:fe:c0:9c:
         7e:87:07:84:76:e0:22:ef:0b:79:76:2d:3b:2a:b9:4b:c6:52:
         d4:b0:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:01 2025 by rpki-client