Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File:                     Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier:          euVrSqkUz3MmFZwImTOinH93d22O3rI3iQdrOKc7UTk=
Subject key identifier:   71:D5:56:3F:DC:1A:BC:AA:88:56:09:99:B3:3F:E1:AE:82:AD:29:D4
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer:       /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial:       09FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number:          09F6
Signing time:             Thu 30 Jan 2025 19:59:13 +0000
Manifest this update:     Thu 30 Jan 2025 19:59:12 +0000
Manifest next update:     Thu 06 Feb 2025 19:59:12 +0000
Files and hashes:         1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: IKBT6kI6MrEfpbjqQ83IEK5Ij5SqsVwHnobvxWJQ2/k=)
                          2: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: 1XQOV4wSru0rmXvpwZfW5uyJwqkmGZ4/nFxMyl/NDpA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2559 (0x9ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
        Validity
            Not Before: Jan 30 19:59:12 2025 GMT
            Not After : Feb  6 19:59:12 2025 GMT
        Subject: CN=679bda11-011f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:b8:28:3c:7a:02:6b:6c:3d:3c:47:45:09:
                    3f:65:cd:b3:04:41:95:e3:76:2c:f4:e4:1a:19:c5:
                    8c:13:a8:74:a4:72:84:02:4b:17:e7:5b:78:42:db:
                    95:f5:e6:46:bd:7a:5d:e2:94:1e:ed:94:c6:bd:b0:
                    97:be:e6:e2:53:c4:5e:0c:8d:1a:f1:d5:b8:28:84:
                    b3:66:d0:a2:40:96:0c:6e:c3:2c:dd:e8:a9:09:08:
                    08:b5:61:54:20:7d:51:42:65:0a:08:52:cb:62:8a:
                    d6:ec:e0:54:98:17:82:62:33:be:d1:d2:71:d4:4f:
                    33:fa:b0:72:e7:b3:3b:e2:14:70:65:41:5e:80:80:
                    b3:43:d7:81:0f:13:cb:06:50:45:7f:c6:af:a4:72:
                    a9:e6:3c:1f:38:ad:5f:21:e2:89:66:7e:66:34:28:
                    0f:17:a4:de:80:a2:c1:7c:9b:fb:30:09:13:18:37:
                    1f:1f:e3:bd:69:a5:bc:28:fa:83:9c:75:97:e9:40:
                    a9:e9:6d:32:11:0b:9f:5f:a2:0c:fb:a3:6c:49:c6:
                    cd:24:c3:24:aa:7f:ad:6d:a9:7a:1b:b3:f7:23:93:
                    54:c0:69:5c:b7:ea:0d:b9:6c:cc:81:8b:98:99:81:
                    0d:6f:a9:48:24:63:08:03:43:5a:b7:12:6b:c1:be:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D5:56:3F:DC:1A:BC:AA:88:56:09:99:B3:3F:E1:AE:82:AD:29:D4
            X509v3 Authority Key Identifier:
                keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:20:e4:f2:96:73:c3:63:cf:62:75:cc:a3:80:e1:72:2e:81:
         aa:c7:b3:3a:bb:dc:2a:20:b6:ca:36:8e:78:1b:70:27:c5:4c:
         6b:c4:29:01:68:40:ca:00:16:d7:49:b6:56:57:7d:8f:42:5c:
         ec:67:de:d6:93:d9:25:5d:ad:67:22:28:cd:a1:16:b2:6c:d6:
         f5:46:e1:5a:79:26:50:7b:34:bf:87:b7:e8:7e:5b:c6:27:28:
         f0:76:da:d7:c6:b7:52:91:33:b2:c1:59:a9:bd:d5:f3:ae:47:
         14:a8:3b:20:37:b4:9c:12:50:c8:15:c4:e0:a4:7e:0f:da:b9:
         e0:9f:ed:73:f1:b6:c1:4b:11:01:e7:29:44:a0:ea:c3:b7:f0:
         a6:cf:40:0a:f2:5d:5d:88:ac:72:b5:b2:59:fe:79:a2:b3:cf:
         38:c3:f3:97:7e:bd:8a:e3:f6:8a:5e:ab:57:3b:9a:29:0e:ce:
         ab:d4:1f:00:48:55:c4:bb:d1:03:90:81:f5:ec:7e:32:b7:93:
         20:ba:ec:54:77:ff:56:15:48:15:c6:22:51:57:4b:f0:22:88:
         5c:f1:f0:ba:bc:02:6d:3f:19:fe:ba:71:76:0d:45:fb:09:41:
         ea:f7:90:0f:fd:55:f0:a4:6d:db:8c:10:39:15:8b:06:cc:ac:
         56:96:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:17:57 2025 by rpki-client