Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
File:                     e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json)
Hash identifier:          XQmmDydF2Y7iZZqLGxJiHrfFMVTeSZSp0O5z4IUq5Ag=
Subject key identifier:   6A:80:54:23:E4:BC:15:1C:A7:40:5D:9E:C1:19:CE:31:1F:15:C4:B6
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Certificate issuer:       /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
Manifest number:          12
Signing time:             Fri 31 Jan 2025 07:10:22 +0000
Manifest this update:     Fri 31 Jan 2025 07:10:21 +0000
Manifest next update:     Fri 07 Feb 2025 07:10:21 +0000
Files and hashes:         1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: mSSqPh8IKlsMF3FPx1M7Nfa9hEpZXHD5Hj6ozIejDXQ=)
                          2: A820DC30D29811EFBEF3795BC4F9AE02.roa (hash: 43KJEtvV4hfXvCmybyTUtWVgtTE0vpH8H17YgxHvO3E=)
                          3: 6BD3578AD26611EFA344CE41C4F9AE02.roa (hash: dSll1ip+XHFYmq7I1J8Fez/v6/+VDAfP/s7BBVZh5Cg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
        Validity
            Not Before: Jan 31 07:10:21 2025 GMT
            Not After : Feb  7 07:10:21 2025 GMT
        Subject: CN=679c775d-c982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:40:54:56:4f:76:91:78:03:ab:a3:99:d4:1b:
                    4b:af:cc:c9:f4:97:da:7c:55:09:2a:6c:7d:e5:00:
                    7d:50:17:c2:31:76:1e:60:9b:62:96:b5:93:a3:9a:
                    9e:18:26:77:bd:40:33:f6:b9:77:59:e7:eb:5d:31:
                    22:7f:bd:d3:2c:a5:2e:8a:5d:15:94:28:5e:1a:50:
                    91:4a:6e:55:4b:8c:05:c4:55:82:4c:ce:31:3a:19:
                    38:f3:df:14:33:d9:39:27:71:7b:b6:fb:08:67:65:
                    4e:9a:12:44:7c:2b:73:8e:08:aa:9c:3e:a2:b8:c1:
                    04:b2:e6:64:b3:ff:4d:08:aa:81:80:75:99:5b:a9:
                    b1:9b:63:6a:33:09:6d:8c:0d:7f:92:b4:48:da:79:
                    40:be:f3:ab:a2:56:a5:52:27:23:b1:d9:68:e1:7f:
                    aa:08:48:7e:0c:7c:05:93:88:c5:7b:ee:6c:e4:1f:
                    43:b8:28:93:14:08:3c:05:77:d4:47:5c:4a:1c:13:
                    40:92:a4:9a:f6:36:a1:e8:e4:af:e6:ff:76:0f:dd:
                    1c:78:d1:41:8c:e3:bf:77:a9:56:46:b2:4e:74:d2:
                    1c:0f:92:5b:e5:6c:f3:5a:cc:de:6f:ff:c9:01:df:
                    09:06:61:94:43:1e:7f:ac:ab:0b:e5:af:62:3a:f2:
                    e7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:80:54:23:E4:BC:15:1C:A7:40:5D:9E:C1:19:CE:31:1F:15:C4:B6
            X509v3 Authority Key Identifier:
                keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4e:b8:9e:b8:7d:13:d6:08:97:ac:e8:da:54:10:78:86:e8:
         68:05:5e:c6:6f:e5:f0:5f:90:39:d2:2f:25:ee:c0:3d:ac:d8:
         54:23:ed:90:83:b7:41:e5:ef:ff:e9:74:24:79:ae:0d:ca:8f:
         05:58:4f:08:8a:76:f8:95:44:7c:63:87:12:4a:60:c2:5f:25:
         5a:f9:4c:02:4a:92:5e:56:8d:e4:be:ea:b9:b8:d7:32:08:b4:
         a6:66:20:77:4f:fb:21:7b:76:01:55:2d:de:7b:24:18:c3:e9:
         dd:4f:f3:d6:d0:7f:eb:93:a3:a4:67:79:43:3c:44:4d:09:90:
         b4:67:dd:cc:40:66:90:e3:41:e8:e8:48:99:33:8d:4d:3c:bc:
         ae:a6:73:65:97:38:72:89:96:db:40:3f:e1:df:62:52:53:91:
         94:ee:25:e4:f5:e4:19:55:11:d9:2b:3c:3b:ca:31:0b:08:08:
         fa:30:15:b2:de:dc:28:68:47:54:46:9c:e7:33:95:6f:54:d5:
         2f:aa:42:22:80:5c:02:e6:98:a9:c3:d1:7c:d0:22:92:67:b7:
         47:95:3c:8f:9f:53:67:6c:5c:31:e6:10:a4:e5:b1:b9:9d:1d:
         d8:d8:f2:86:44:b7:29:2c:56:04:8a:68:c1:79:75:1d:98:66:
         f2:20:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:54:40 2025 by rpki-client