Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
File:                     Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json)
Hash identifier:          Hqf15LIeJ6hDLxCRB3NFkGsVxy36UTODkiLEhlV0bcY=
Subject key identifier:   F5:3B:A5:50:CA:D6:BB:69:E9:C1:2E:1E:64:9A:E9:ED:BF:5B:52:C9
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Certificate issuer:       /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial:       0484
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
Manifest number:          047A
Signing time:             Fri 31 Jan 2025 00:07:41 +0000
Manifest this update:     Fri 31 Jan 2025 00:07:40 +0000
Manifest next update:     Fri 07 Feb 2025 00:07:40 +0000
Files and hashes:         1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: Wy/vm1YzzHuxT8g/En17nEHIsLc+H61MGbUxWnuIXX4=)
                          2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: mu1mKwNxbL7+Qz6oyXzuFah+meolf6goLYumQsj+R3w=)
                          3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: piiG9QvMfLvduFL/aWOQ0VapC6DoQwecA1GtDw7CHzI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
        Validity
            Not Before: Jan 31 00:07:40 2025 GMT
            Not After : Feb  7 00:07:40 2025 GMT
        Subject: CN=679c144d-183e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:f6:f2:38:56:61:c4:f1:8d:c5:da:64:11:
                    ec:45:0c:29:08:4a:df:f6:c5:c7:8c:2f:80:37:44:
                    70:96:99:f5:86:40:e9:b3:e5:21:a8:71:0c:8d:20:
                    93:1d:99:53:23:0d:27:a8:1e:83:24:99:53:68:d0:
                    ac:10:ba:d8:3b:9b:dc:42:91:b4:47:81:5d:8b:e6:
                    9a:f1:4c:8a:cb:72:1e:63:7c:69:d8:ba:20:8b:eb:
                    35:26:b9:95:01:5d:9c:b4:b4:e2:9e:0e:56:37:f2:
                    4c:37:ad:b7:e7:07:af:fa:a8:39:32:aa:0d:23:4f:
                    7c:c8:03:17:45:14:05:59:64:af:15:49:f9:f9:8d:
                    70:3a:50:f3:8f:d9:78:23:0b:eb:64:0f:9a:d2:bc:
                    b3:81:7f:f1:9d:3d:ca:70:6d:79:46:2b:b0:b9:b4:
                    27:c6:d8:47:64:bc:29:16:68:2a:6f:6b:68:88:59:
                    6b:26:1a:1c:f5:8a:9e:f4:48:f4:3e:51:3d:56:8e:
                    9b:0e:17:26:e3:a3:dd:bf:88:21:a3:fd:2a:a2:40:
                    14:45:3c:11:99:fb:20:04:6e:0a:26:6f:17:db:f0:
                    9b:c8:91:d2:19:95:5e:9c:ca:15:c1:3c:84:a2:4b:
                    0a:91:d5:dc:c1:26:cb:a1:d7:4b:17:26:98:23:25:
                    35:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3B:A5:50:CA:D6:BB:69:E9:C1:2E:1E:64:9A:E9:ED:BF:5B:52:C9
            X509v3 Authority Key Identifier:
                keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f7:06:84:3a:74:d7:41:73:53:67:2f:17:fc:e0:85:0f:f1:
         4d:2e:77:84:79:34:de:e0:6c:9f:ec:d2:17:9d:87:62:ea:7c:
         bf:3b:60:d6:33:0b:08:ee:8b:0c:20:3a:ec:91:df:d0:35:f0:
         63:d4:52:f8:0f:06:58:fb:63:5f:da:38:d1:b9:cc:14:d6:72:
         9f:b7:09:b2:c6:10:1b:ef:df:96:cf:af:d6:17:91:70:8a:fc:
         e0:c8:bc:df:a4:14:ed:3a:66:d6:7f:08:34:e3:50:67:b7:03:
         75:bd:a3:36:0f:73:a8:33:24:fd:3a:84:ae:a4:6e:0b:4e:02:
         95:ee:e7:ee:a7:a4:c8:72:5d:29:6b:63:45:49:e8:a9:10:a8:
         ba:0a:e3:72:70:8d:30:40:61:b0:c5:95:f7:81:de:d1:ec:1e:
         0e:3e:41:20:29:dd:52:7a:69:36:b3:62:01:87:1e:1d:d6:59:
         4c:56:3d:6a:8e:b7:81:ff:4c:f4:dc:51:b9:d7:0a:8f:85:6d:
         49:f2:c1:f2:47:79:af:69:b0:01:28:a4:e4:95:5b:f4:3f:27:
         d6:97:61:ff:61:b7:78:a8:90:99:d0:af:03:71:b7:9e:cb:74:
         f9:b7:65:a5:02:90:41:7b:66:94:14:d6:87:67:fa:86:c7:13:
         61:69:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:14 2025 by rpki-client