Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
File:                     e3dUqC3QY6R-jsNdFj72skSNEts.mft (raw, json)
Hash identifier:          sDnZfVRVfno7WVeZNZhORdJlLsof4386aNaZjo8Hy8k=
Subject key identifier:   72:5D:5B:49:52:D2:51:E7:7D:45:8E:80:7D:CD:F4:66:46:FE:02:E4
Authority key identifier: 7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB
Certificate issuer:       /CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
Certificate serial:       2750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
Manifest number:          273D
Signing time:             Fri 31 Jan 2025 15:40:14 +0000
Manifest this update:     Fri 31 Jan 2025 15:40:14 +0000
Manifest next update:     Fri 07 Feb 2025 15:40:14 +0000
Files and hashes:         1: e3dUqC3QY6R-jsNdFj72skSNEts.crl (hash: ACHSKRNJE10Rcr+qFzS4QxDlS3j+BsvvX2ob39uERxY=)
                          2: F5BBEA5AF6A611E7B40C7427C4F9AE02.roa (hash: EeUXim59YsvGI7qIffiR5WtPWhD5kVEeYtKpW1EoALs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10064 (0x2750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
        Validity
            Not Before: Jan 31 15:40:14 2025 GMT
            Not After : Feb  7 15:40:14 2025 GMT
        Subject: CN=679ceede-d19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:de:bc:43:33:db:cb:1b:04:13:da:fc:66:
                    d6:ad:b0:20:5b:8b:d0:8c:87:4b:cf:7f:67:5f:51:
                    2e:f9:8d:30:d5:95:9b:6a:f8:d4:9b:22:38:e5:cf:
                    f3:a6:c7:92:ad:b8:24:37:ad:00:24:ea:1f:56:0d:
                    73:46:0f:04:4d:dd:a0:5a:b3:1b:94:62:dd:a1:0d:
                    68:32:5c:55:a1:ff:72:ad:c7:49:8b:e1:59:a9:cf:
                    46:1c:e4:09:13:b4:45:06:2a:aa:1a:1e:f2:3c:ca:
                    f9:31:cd:1f:dc:39:a1:42:de:e5:d2:bf:8d:7a:f4:
                    cb:c9:96:0f:aa:7a:d9:4c:ed:bb:88:3e:94:af:e9:
                    4d:d2:aa:f5:2c:d5:db:6d:18:f0:56:87:c3:0e:a0:
                    1c:bf:f0:57:8d:58:e4:00:4a:28:e8:e0:f1:6e:33:
                    33:e2:c8:ad:e1:e6:26:45:2d:38:bb:4e:0e:42:0d:
                    6e:79:f8:a9:d6:12:d3:79:aa:58:5e:c5:f3:d3:7e:
                    c1:05:45:40:39:9d:33:77:be:a5:07:b7:2d:a8:7c:
                    48:8e:07:bc:63:f9:3b:b8:e5:46:cf:a7:a7:b1:37:
                    2a:63:b9:32:6f:5e:be:20:03:af:0f:e1:12:3c:0f:
                    99:cf:ac:59:e5:7a:27:77:ea:2f:76:fe:fc:ae:4d:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5D:5B:49:52:D2:51:E7:7D:45:8E:80:7D:CD:F4:66:46:FE:02:E4
            X509v3 Authority Key Identifier:
                keyid:7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2c:de:1e:8b:df:fd:b9:19:98:d5:60:84:25:18:c1:58:f4:
         7a:2a:7f:fb:9d:56:2f:09:62:2d:41:2e:5e:94:92:70:81:eb:
         92:48:7a:3e:90:10:35:1b:9b:d6:e8:de:26:86:29:84:7b:fa:
         d9:a6:72:63:f9:cf:a3:17:d7:e3:54:f0:4a:df:c2:6e:ca:04:
         d9:0c:2f:c8:84:8e:f6:d2:ca:3b:71:e9:f4:a8:63:24:f9:98:
         88:21:8b:2b:8a:2b:80:81:5e:d8:12:4f:e0:93:9b:7a:9f:e7:
         9d:21:60:2d:23:22:ca:2f:f8:da:91:7a:0c:ba:b0:08:ef:68:
         74:18:fb:50:84:5c:9a:d2:7c:05:92:71:67:23:b3:ac:e4:b8:
         09:b0:b9:0f:8f:fd:0e:f4:fa:2a:b3:b1:07:fd:4c:36:4a:f4:
         fa:aa:22:2c:54:e7:1d:60:ab:f2:bc:f2:09:46:4d:e7:63:0f:
         39:3c:1c:c0:60:a9:94:55:36:e9:99:e2:ef:11:54:c2:b0:c8:
         1a:f0:fd:af:71:16:bd:f9:c1:c7:62:74:6b:8d:a9:f3:51:02:
         5a:e6:77:9c:de:aa:f6:02:50:4b:78:c1:88:6e:59:c8:99:a3:
         0e:ce:43:d9:a4:20:f5:f5:41:1e:cf:a7:41:33:18:77:95:05:
         bb:68:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:06 2025 by rpki-client