Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
File:                     U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft (raw, json)
Hash identifier:          8yFoKqlcNRS2hS835AXyRZR2S42Tyn0fL9jIhATP3kI=
Subject key identifier:   87:85:D9:FC:DC:A3:A5:0D:E1:05:79:AF:CD:F0:2C:8D:8B:E1:93:7A
Authority key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92
Certificate issuer:       /CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
Manifest number:          24
Signing time:             Fri 31 Jan 2025 06:52:40 +0000
Manifest this update:     Fri 31 Jan 2025 06:52:39 +0000
Manifest next update:     Fri 07 Feb 2025 06:52:39 +0000
Files and hashes:         1: U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl (hash: hDyFRl2B7CpWnWSO7tQp+P4lKniQKpskBR3vGG57roI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
        Validity
            Not Before: Jan 31 06:52:39 2025 GMT
            Not After : Feb  7 06:52:39 2025 GMT
        Subject: CN=679c7338-891c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:9b:d3:93:09:73:03:af:af:c6:75:1a:f2:
                    3d:70:80:d9:2a:50:75:b5:6f:bc:89:5f:8f:62:6c:
                    95:78:9f:85:1f:17:ac:5a:95:5a:1e:6d:f7:87:48:
                    55:99:1d:a7:9b:2a:84:c0:83:dd:cf:d5:64:9d:88:
                    1e:8e:80:20:b2:d3:16:75:46:6e:3e:c6:51:71:cd:
                    c1:d2:33:ca:99:c3:f0:0f:86:0f:12:41:5a:a6:66:
                    9a:7c:5e:a4:db:81:22:28:5b:fa:b1:f2:36:01:91:
                    f9:5f:34:f2:72:02:04:a5:0f:2d:7d:09:f9:e7:03:
                    68:f1:8e:fb:d6:8a:72:6e:d9:e6:30:1f:1e:a8:3e:
                    aa:9e:b5:b1:e4:de:e8:29:ca:01:5b:66:1c:4a:04:
                    cf:6b:a2:7f:64:61:7a:37:be:87:15:d2:a9:fb:d1:
                    5a:18:1e:9f:c9:0e:3e:de:d3:06:b0:b5:5b:cb:bc:
                    25:b3:5d:ad:6d:98:45:c5:be:84:f6:bd:bb:5f:e2:
                    ac:ce:db:d8:ad:f3:7c:7a:eb:26:8a:b5:51:c9:21:
                    62:77:df:8b:36:d1:4c:3a:16:51:be:f2:b9:99:cf:
                    6f:d4:61:0f:c2:81:3b:d6:d3:3b:85:6c:17:81:9b:
                    f7:4c:ad:77:2a:9d:85:5f:99:e7:5c:87:6c:d0:05:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:85:D9:FC:DC:A3:A5:0D:E1:05:79:AF:CD:F0:2C:8D:8B:E1:93:7A
            X509v3 Authority Key Identifier:
                keyid:53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:14:93:89:37:3e:50:e1:84:ba:82:89:41:67:60:bd:5d:
         4e:ab:fb:ef:a4:e1:67:79:2a:28:9d:16:c9:cf:ba:6d:1e:7f:
         73:fa:37:d6:3c:22:36:df:36:8b:a5:6d:9f:52:70:92:ba:ae:
         14:a6:82:b2:12:03:b9:05:a4:7f:ae:74:fa:af:69:8b:56:7e:
         d1:af:0c:b6:96:35:4b:c1:2a:d4:5e:9c:ed:33:9e:ae:31:ce:
         d1:6e:f8:f0:db:86:db:3d:32:57:b6:97:a0:f7:67:9e:14:71:
         d5:25:c2:c5:64:c4:06:3d:72:5b:05:74:85:d7:00:e2:ce:75:
         e8:31:1c:2a:51:5b:c5:d1:02:a0:7c:6c:d7:84:a6:18:1c:92:
         2e:8f:87:d8:29:51:26:4e:e3:71:51:54:2b:fd:5c:df:25:f8:
         bd:45:5e:9a:f4:ef:b2:0a:d1:eb:59:e8:6a:d7:74:c7:c9:bc:
         a5:7d:11:de:3d:df:65:1e:ee:4c:cb:bb:26:f9:25:de:cd:8a:
         76:67:85:61:1b:e4:44:7c:b9:e8:34:30:a8:90:69:92:d6:32:
         32:69:8b:c3:43:51:4d:2a:36:05:9f:b6:9d:37:83:92:ae:2d:
         82:c8:da:51:f7:fc:f4:5f:a5:c4:c6:af:91:aa:c1:e2:a8:24:
         71:a0:20:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:42:35 2025 by rpki-client