Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File:                     fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier:          esVYdR2hJyh00rlJXAfJlkdYd1ahz5TSxd4HQ29Pn+I=
Subject key identifier:   BA:43:31:78:71:E2:A7:74:02:B6:1B:53:47:71:2F:0A:3F:FF:ED:27
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       099E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number:          0979
Signing time:             Thu 30 Jan 2025 20:13:36 +0000
Manifest this update:     Thu 30 Jan 2025 20:13:36 +0000
Manifest next update:     Thu 06 Feb 2025 20:13:36 +0000
Files and hashes:         1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: 5wZcXX4KPYzaL53hNiA2/f82afkR0MmOQOh3hzitCqI=)
                          2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: lxvvRyia+dYG/RTAnw/MyHDAYp9brSQqhqi6+EJeU3U=)
                          3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: u0fp80nox7dAn7Yiu1ux22mPDrzXc3m+LvRefa9Vt4o=)
                          4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: aB1LCPCRJW8naYfEVIp9CRNODKyzFCft7X+l6mgKlac=)
                          5: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: kihUyOia/OlzOx1JrMGlIb7lrdnflQKggA5rPkjNfOc=)
                          6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: N0OOA+uslC7QKkvKNK3g9YnyrlYLfa1CA2I9hSYLybA=)
                          7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: iZ1z0mVjP4+uINPpX+HQ1Uw4sB1ID9JJcxPvuUt2mzU=)
                          8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: EBnXmNp6pTupj85+HC37Errz7xWTGrLIfMOv4d/yBFo=)
                          9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: yyOa9qz2Dgiu3gqe2eGxvnA2Ngdvk1mfPpR1RzH8q1M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2462 (0x99e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Jan 30 20:13:36 2025 GMT
            Not After : Feb  6 20:13:36 2025 GMT
        Subject: CN=679bdd70-13c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:8a:10:32:36:b7:45:61:9e:98:12:61:d5:
                    b8:22:d8:10:fd:90:45:cc:ae:3a:2c:22:4b:7d:9a:
                    4e:89:f9:0d:ec:ba:db:18:66:60:8e:b8:23:ec:3a:
                    a2:9c:2b:aa:a2:d7:ba:3b:ae:c6:b7:d7:05:63:ae:
                    5d:7e:84:13:e1:4d:01:0c:fe:43:8e:86:3b:d7:df:
                    96:5e:c5:6c:72:4e:a0:af:03:cf:67:76:ee:e4:b2:
                    99:6b:c2:4c:e1:47:28:12:5d:7e:f6:ee:89:12:10:
                    84:96:08:2b:48:68:b8:65:3e:49:b7:7b:b7:7e:75:
                    00:c3:5f:4e:43:e2:9e:12:62:1b:27:3b:a2:b4:1e:
                    37:22:b0:7b:bc:ea:f3:5f:91:00:29:82:11:aa:54:
                    1b:16:e1:c3:af:6e:fc:e8:50:ae:80:bf:30:46:68:
                    f2:be:82:94:68:8f:c3:bb:c2:c2:27:81:63:c8:8d:
                    61:c2:e1:1e:65:e9:94:68:29:57:d2:58:6d:74:5e:
                    3c:d9:c3:3a:b6:f2:06:a9:ee:a3:f6:d2:34:47:19:
                    b1:3f:0b:6e:44:e0:5e:a0:70:9a:6a:08:b5:0e:15:
                    bb:6e:b5:68:87:30:52:70:a5:fa:43:a9:6b:0d:b8:
                    eb:89:ca:d2:53:cc:2c:a4:eb:f0:dc:58:21:5e:6e:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:43:31:78:71:E2:A7:74:02:B6:1B:53:47:71:2F:0A:3F:FF:ED:27
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cf:df:f4:29:fe:78:77:c3:b8:50:7e:c5:ba:7c:2f:99:fe:
         96:c6:3d:38:e6:4d:b4:dc:6d:e5:3c:af:94:27:64:2b:80:25:
         36:ab:21:4d:ef:ed:92:74:d8:6f:14:cb:c1:0c:80:8d:18:59:
         08:c1:0b:b8:bd:07:26:9d:98:3c:7d:2f:88:45:64:58:b6:f4:
         a9:af:af:5a:2e:04:83:a3:68:65:8b:37:95:a7:5a:14:d5:fd:
         d6:26:fa:a6:4c:35:4f:30:58:41:43:3e:0d:33:61:56:ec:6f:
         b2:32:99:a3:49:2d:a3:75:0a:39:11:a1:55:13:0c:3b:6b:64:
         e6:34:ee:7f:58:57:db:36:14:6a:6a:02:a4:c7:cb:32:80:4a:
         6e:70:1b:c5:2f:52:4e:64:21:fe:50:5f:47:b0:f0:af:8a:8e:
         92:de:59:4b:bb:9b:5f:93:08:ee:bd:de:b5:1c:92:76:9c:41:
         cf:f1:fe:ac:d3:3a:78:16:f2:5c:ad:97:37:92:5d:3e:85:8b:
         a5:24:11:8d:96:5a:57:21:a9:25:49:76:9f:f5:4d:91:11:38:
         fb:8f:48:e9:2d:73:b5:78:67:b8:53:3e:ce:83:fd:29:09:87:
         43:2f:94:77:52:c3:82:ec:80:8d:5c:56:25:3c:ba:1d:89:ec:
         9a:13:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:35 2025 by rpki-client