Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
File:                     mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json)
Hash identifier:          qyDtBtYhmBMqQeS7t0jYcA4sxCidO1/HKKO0bj0kPvU=
Subject key identifier:   8B:78:99:FA:14:21:19:73:95:48:2B:D1:D3:B3:FC:3F:FA:91:C3:0B
Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
Certificate issuer:       /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
Certificate serial:       074D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
Manifest number:          0745
Signing time:             Thu 30 Jan 2025 21:37:09 +0000
Manifest this update:     Thu 30 Jan 2025 21:37:08 +0000
Manifest next update:     Thu 06 Feb 2025 21:37:08 +0000
Files and hashes:         1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: lF8CZQoLCclOXnFICOFiEGXMDKs80ck+KQ+QbNQVvUo=)
                          2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: 2MLqNLG1c5f9W1Oa6laD6D4M2hQ2BaRHZstB1sfOGMM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
        Validity
            Not Before: Jan 30 21:37:08 2025 GMT
            Not After : Feb  6 21:37:08 2025 GMT
        Subject: CN=679bf105-70d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:6d:ef:6e:df:11:91:f5:46:68:7b:35:c5:
                    09:d5:2a:9f:c7:bd:a3:b9:c8:96:c3:c1:78:a4:c0:
                    b9:05:01:55:2a:66:43:1d:fd:84:53:ef:ea:30:25:
                    3c:4c:19:52:50:03:17:25:da:75:9f:2b:6c:8e:62:
                    6c:a5:39:e0:60:6f:ed:77:6b:d6:d6:b9:83:86:35:
                    4d:b1:81:8e:cb:1a:cd:0b:0b:d0:9d:91:2b:f3:7c:
                    27:88:27:da:63:21:d2:19:24:1f:6a:c2:a5:37:22:
                    aa:20:ad:41:13:fe:55:23:2c:bf:0b:35:f7:0b:5c:
                    29:fa:5f:bc:5b:01:00:e5:69:2d:b4:0a:e9:92:2e:
                    46:f0:76:f3:5e:fe:74:a6:d3:4c:af:9d:67:ba:2c:
                    12:ab:50:73:dd:39:ba:c5:69:bc:f9:84:90:9a:6b:
                    5b:28:a8:b9:d4:f1:58:7f:0e:2a:1d:74:3a:5d:e3:
                    89:66:5e:9c:51:3a:df:95:4d:3f:95:c2:80:a0:2d:
                    30:1a:22:d1:7b:ef:e7:1b:ef:b7:be:56:64:4c:8c:
                    f5:14:47:cc:68:09:c8:3a:e0:bf:15:fc:d9:6a:95:
                    0f:01:c5:4e:fe:9e:4e:d3:ed:77:45:50:bd:83:83:
                    7a:be:5e:8e:2d:8b:d6:0a:45:08:aa:dd:cd:0d:be:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:78:99:FA:14:21:19:73:95:48:2B:D1:D3:B3:FC:3F:FA:91:C3:0B
            X509v3 Authority Key Identifier:
                keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:60:d0:44:5f:c5:a1:42:2f:4d:05:c3:b5:77:01:fd:13:
         9c:56:f4:d3:dd:3a:15:fd:e9:1c:62:e5:00:0a:c0:fe:b2:7e:
         47:c0:1c:4b:e1:8e:4f:7e:c9:df:c3:1b:92:11:6d:a2:d5:9e:
         e1:a2:af:1a:4f:11:9b:dc:05:92:52:ca:55:27:de:23:2a:e4:
         75:7b:a1:64:2e:cf:c6:9d:bd:e4:a9:3f:fc:35:80:43:bf:08:
         b3:e3:83:d5:c6:1c:1f:ca:b1:7e:2a:9c:58:3f:17:5d:29:a3:
         5c:94:19:e0:4e:da:06:70:ba:7a:50:86:eb:89:17:8b:93:93:
         63:02:e3:94:55:36:52:96:34:62:0b:ee:14:5a:50:2f:65:85:
         95:d4:c5:f2:b7:cd:22:2c:60:46:17:ea:b2:da:b0:7c:1f:42:
         11:8d:d2:b5:10:91:e7:67:d6:c2:a8:0f:77:fe:df:ca:4f:29:
         ca:fe:bc:ba:27:41:fc:ff:8e:2d:df:64:ee:0a:19:ef:92:49:
         35:17:ae:ee:9e:52:6b:f1:d7:86:ad:b4:b3:4c:fa:d8:6e:77:
         c9:11:20:99:df:60:a4:33:e0:5d:d4:0f:a9:cf:c6:0d:03:5a:
         aa:b5:2c:c9:ac:dc:76:3e:63:c9:09:ae:f3:95:7a:9b:cd:58:
         73:21:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:47:36 2025 by rpki-client