Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
File:                     rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json)
Hash identifier:          uJ14Ca6JSAPujBj1INLB8StLWLGbuNbuP0Cj3VY7DPg=
Subject key identifier:   29:83:62:D5:E5:5C:01:59:6C:CD:B9:27:98:3A:ED:C6:00:F4:82:27
Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C
Certificate issuer:       /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
Certificate serial:       08C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
Manifest number:          08B8
Signing time:             Thu 30 Jan 2025 20:33:29 +0000
Manifest this update:     Thu 30 Jan 2025 20:33:28 +0000
Manifest next update:     Thu 06 Feb 2025 20:33:28 +0000
Files and hashes:         1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: ywB46rzJqoOMhyw/dZFJIy6M7A6AshnOT9Crzzl9MZQ=)
                          2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: 1cgPVh8WdtKfjeGj/rrD5cxiCucmJ6j+98VBK0Krq4o=)
                          3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: DfbRrZ2co3f9GeR9Q8AQK2kJs9OcFCrj3LQOWU/ZriY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245 (0x8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
        Validity
            Not Before: Jan 30 20:33:28 2025 GMT
            Not After : Feb  6 20:33:28 2025 GMT
        Subject: CN=679be219-5c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:aa:88:f5:bf:62:f9:98:21:37:24:f5:45:
                    4f:06:ec:0f:f7:ea:b1:fb:21:2e:cb:a1:53:fb:36:
                    4c:f2:39:5d:13:5c:27:64:57:ca:0f:d8:8d:15:71:
                    e7:3f:28:25:e5:5a:30:c9:03:e2:23:38:9d:39:1b:
                    82:31:55:32:85:f5:0c:29:c6:75:20:a9:02:92:0f:
                    18:1a:3e:a3:e3:1c:5c:2b:a2:13:a2:49:f1:1b:3f:
                    69:dd:a6:0a:4a:08:0f:61:88:80:ca:c6:e5:b5:a9:
                    a8:de:e1:01:f4:df:86:f5:30:28:bf:ac:72:95:5e:
                    68:9b:4d:cf:69:63:26:bb:34:b3:46:af:ea:b0:45:
                    2d:f9:0f:70:64:88:26:b3:c6:53:a2:bd:6c:b7:44:
                    42:be:0d:90:84:db:b5:b2:56:5c:bf:db:dd:30:eb:
                    50:65:a0:c6:43:2b:04:ae:5e:ce:0e:8e:b4:33:b0:
                    c9:4c:b7:03:4b:25:d7:cf:49:cc:d6:d2:b9:b4:af:
                    40:64:a4:d7:a1:29:2c:b0:f3:89:91:8c:c8:09:bb:
                    e4:20:69:c4:91:a9:c2:87:6b:24:86:bd:80:7a:fb:
                    29:59:04:bb:0f:cb:a7:b6:31:e9:9e:97:cb:5a:02:
                    58:f7:47:70:3a:28:a2:f6:69:94:66:eb:75:a7:7c:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:83:62:D5:E5:5C:01:59:6C:CD:B9:27:98:3A:ED:C6:00:F4:82:27
            X509v3 Authority Key Identifier:
                keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:09:27:1d:90:2e:ec:41:b1:70:7e:27:ee:4e:a4:01:37:
         c9:fc:ac:4c:c3:8a:82:f6:91:64:a2:be:72:df:e6:b5:d8:f9:
         3e:a7:f4:6f:01:01:45:97:39:26:bc:ff:69:a4:e1:9b:99:f7:
         c3:f3:9a:df:68:af:33:59:84:2e:81:73:56:47:4f:62:d5:4f:
         88:3c:cd:51:c0:0d:73:1d:b2:08:ad:fb:b0:83:c2:f2:78:9f:
         63:77:a7:41:87:38:6c:0a:4b:e7:e8:69:46:11:7b:76:a8:e5:
         db:b9:e4:f0:3f:4c:e1:4a:b8:d0:08:dc:b9:75:69:6d:70:38:
         8f:35:f8:b1:0a:a0:ea:6c:0b:d5:a8:b1:11:4a:a0:36:a4:3b:
         ed:45:e0:87:d8:2d:a0:d1:77:a4:c8:34:21:1d:d2:1a:b8:ba:
         7b:a2:fb:56:a8:cd:c5:a1:69:af:67:13:8e:fd:14:c3:d2:3e:
         57:b8:e2:11:66:ed:50:29:5c:cd:3e:06:4c:fe:1e:da:d5:c7:
         6c:b0:26:fe:d0:83:fe:02:03:e3:31:63:f5:a9:2a:32:d9:eb:
         52:6e:b1:41:02:24:3d:f7:b9:c3:93:e7:2c:2f:53:35:f6:d8:
         67:35:eb:5c:b6:ad:45:ae:30:f3:fb:55:fe:8b:38:bd:6f:3f:
         ef:04:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:40 2025 by rpki-client