Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
File:                     2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json)
Hash identifier:          d3zLmpP1QasJA41k0+NuKabqmbDrwRc97mk5Mh/WG7o=
Subject key identifier:   74:F2:B9:21:0A:70:5B:0F:E5:51:91:0B:75:15:86:E9:93:0A:D0:56
Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4
Certificate issuer:       /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
Certificate serial:       074D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
Manifest number:          0748
Signing time:             Thu 30 Jan 2025 21:33:13 +0000
Manifest this update:     Thu 30 Jan 2025 21:33:12 +0000
Manifest next update:     Thu 06 Feb 2025 21:33:12 +0000
Files and hashes:         1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: I9foRFEhrjTX0NkAPiDQb5EXQtfqPi7EfsNHUyOGbXk=)
                          2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iH4fPRrd7IgPg8RKrkUWfUFk9KGwtBM2lg9Wq+mePiI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
        Validity
            Not Before: Jan 30 21:33:12 2025 GMT
            Not After : Feb  6 21:33:12 2025 GMT
        Subject: CN=679bf018-dac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:1b:95:63:39:ea:75:02:b4:71:f5:88:ab:
                    94:fc:29:8d:43:4e:1d:44:e5:54:10:34:1e:fe:35:
                    cf:27:26:b3:08:7f:cd:7c:5e:0d:d8:95:8e:12:55:
                    9b:6e:c4:9a:35:13:ed:d2:42:2b:78:5a:df:cf:b3:
                    0f:39:60:59:f7:3b:d6:b6:be:00:2b:30:10:9c:73:
                    fa:3a:68:49:a1:25:51:15:e5:99:41:3b:21:7d:b7:
                    df:7a:1e:e6:86:26:3c:84:ec:4e:a6:f0:d6:fa:76:
                    0a:41:d0:0f:fd:89:b9:56:a7:68:b1:2b:30:26:70:
                    d5:d7:20:29:0b:78:50:c0:71:fc:e2:77:d6:c2:d4:
                    23:bc:ab:4a:fd:6a:02:e5:56:56:7b:6c:f9:21:ff:
                    3d:ba:16:b8:20:a6:a9:d7:28:64:73:a3:67:fd:10:
                    02:5c:0a:c9:8d:48:f9:9c:48:47:f4:af:13:aa:b8:
                    de:be:94:36:04:4e:d1:d9:d5:48:c2:79:77:a6:06:
                    34:32:90:74:8d:0e:45:ec:6c:ca:aa:a5:f3:75:2a:
                    5e:a3:46:30:f5:30:cf:81:2e:de:e0:60:d4:1b:7f:
                    be:76:38:d3:c4:07:14:30:e1:8f:7b:f8:6c:f5:af:
                    02:0a:dd:30:56:58:a1:7d:1d:9a:ce:f7:95:79:bd:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:B9:21:0A:70:5B:0F:E5:51:91:0B:75:15:86:E9:93:0A:D0:56
            X509v3 Authority Key Identifier:
                keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:96:6a:af:6d:86:d7:1d:29:8b:c9:f7:e2:79:1d:01:a3:
         9f:34:22:6d:c7:aa:b4:bb:79:b4:08:b7:d7:48:96:54:0a:de:
         1e:fe:1b:19:a1:5a:5e:92:00:61:e9:fc:e2:78:e3:e5:bd:6e:
         d4:6f:d8:1d:b9:7b:0b:55:1f:aa:2f:72:ee:f3:f3:b7:a0:86:
         8a:3b:a0:f6:cd:f1:cd:23:b9:ae:00:d0:7d:0f:82:87:49:4d:
         7d:0b:d1:e7:71:c6:00:aa:c7:ec:fb:09:88:ee:3a:0d:b9:a6:
         fb:22:23:fc:e2:84:8b:97:ee:a8:47:4b:d8:fb:15:68:90:21:
         9c:b9:de:77:9f:36:31:3b:a9:c0:4d:e4:24:16:85:2c:d2:8a:
         49:c5:20:2e:52:4b:07:eb:0f:69:b8:18:63:4a:8a:fb:21:46:
         fd:c7:bb:1c:cc:30:39:08:9a:7d:79:02:b2:45:15:84:d8:87:
         3a:fd:31:49:17:74:c8:fc:97:53:8a:6c:9c:b2:ae:3e:b3:31:
         e9:30:c2:40:d5:e7:8c:70:c7:31:a6:2a:ce:35:a0:98:15:c2:
         76:8e:89:1d:ee:c5:85:07:c9:e4:e0:85:c0:4a:26:39:59:a6:
         9a:f7:37:60:40:3b:5c:1c:4b:7f:fe:50:0d:f4:23:65:49:cc:
         5d:93:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:49 2025 by rpki-client