Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
File:                     X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json)
Hash identifier:          AefPX8YSu53rVunrSMvS1ufu/CgHK4bkCTW2ghfcyGY=
Subject key identifier:   D1:17:13:1D:9E:31:B2:FB:E5:DA:E2:77:E0:1E:E7:54:41:8F:56:CE
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Certificate issuer:       /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
Manifest number:          0178
Signing time:             Fri 31 Jan 2025 03:01:58 +0000
Manifest this update:     Fri 31 Jan 2025 03:01:58 +0000
Manifest next update:     Fri 07 Feb 2025 03:01:58 +0000
Files and hashes:         1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: D9YWgWNHZJrRK4wHoZHtBWYh9tC2ovUJn9UynhWeIvU=)
                          2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: 9FynllD8H+NI8HSEXg9Jjmq002CiTaGo7ZssucPUw/c=)
                          3: 6A9D79ECD6E311EE94842842C4F9AE02.roa (hash: pf/aq5LQ2SyN9nQK//wVXk1HeFtnOQFOhE/br9mZqh4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
        Validity
            Not Before: Jan 31 03:01:58 2025 GMT
            Not After : Feb  7 03:01:58 2025 GMT
        Subject: CN=679c3d26-3a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:12:fb:6c:ea:2e:2b:06:81:4e:50:27:72:
                    4d:9f:5f:73:5a:83:46:f0:bb:a3:f4:8f:8a:57:11:
                    f3:80:54:4c:13:4a:ea:7f:87:bd:cd:cd:5a:fe:90:
                    12:d9:fb:6e:1d:7d:16:37:57:41:9d:fa:7d:84:aa:
                    9d:9b:db:f0:ec:ea:23:f9:9d:0c:a5:4e:d4:04:8d:
                    57:23:cc:9a:f2:5b:98:f4:7b:c5:d2:b9:bb:c1:e7:
                    db:15:8c:a8:70:80:70:59:55:43:15:77:a1:af:07:
                    68:09:57:d2:6b:22:e8:d0:a4:89:a3:04:d9:0a:c2:
                    20:37:2b:f5:23:99:3a:87:e4:0a:17:04:a2:7f:b8:
                    24:d2:39:6b:1b:e5:93:6c:43:cb:16:47:20:64:6f:
                    e6:ce:ce:e8:41:b7:d6:6a:c5:d6:8b:2a:93:bd:af:
                    4c:7b:49:99:5d:0e:73:2d:af:78:17:f1:58:6e:fc:
                    a2:ae:4a:62:37:fc:85:c2:a2:0b:74:57:a6:d6:65:
                    cc:fe:a4:33:84:3d:d4:41:df:b9:3c:dc:12:24:5e:
                    e6:01:94:50:c9:2c:16:8f:6f:ca:b7:96:2d:f3:21:
                    a7:af:e3:45:d0:15:c5:38:62:9e:aa:b5:e6:d6:b9:
                    28:1d:45:6f:aa:17:36:15:e8:f6:57:fc:4b:54:e8:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:17:13:1D:9E:31:B2:FB:E5:DA:E2:77:E0:1E:E7:54:41:8F:56:CE
            X509v3 Authority Key Identifier:
                keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8c:c0:9f:a4:98:88:b6:eb:c1:f2:41:7f:00:fd:5f:44:49:
         27:13:5f:df:ca:be:84:9d:a9:f7:94:61:44:0b:b1:f1:23:a4:
         e0:7b:1d:01:ec:71:66:82:ac:95:37:61:4e:f7:e9:b0:03:3b:
         ec:0f:ac:47:12:aa:4a:98:a0:50:f5:99:75:11:88:e6:ed:3b:
         e3:5d:ee:6f:ea:b8:5b:5e:7e:27:ce:64:10:69:a1:2d:ba:4f:
         72:b5:f2:51:cc:40:cc:ff:58:2c:a9:dc:5b:ad:70:e7:16:2e:
         0d:4c:e6:4b:38:77:d9:e4:8e:52:56:8c:12:6a:e0:39:be:7f:
         9e:cf:21:02:df:70:8f:51:d9:0d:bf:dc:7d:f0:93:f0:ed:ca:
         cb:5f:a2:33:c2:04:96:92:93:da:42:b7:d6:99:84:68:15:e0:
         8a:86:32:cc:14:f3:c6:30:e5:cb:63:2d:34:34:b4:b5:8e:54:
         6d:d1:e2:95:a2:94:2e:56:1e:50:32:29:24:1d:0d:0d:f7:71:
         f8:8e:9a:9b:1b:09:40:02:50:aa:ad:88:d0:b8:98:ee:84:1c:
         75:73:ee:09:de:15:20:ce:4e:91:b0:91:d9:d4:b2:d0:a9:33:
         fc:e3:d7:38:a0:e7:41:0b:a8:ee:3e:15:55:59:bb:1e:c2:59:
         34:6a:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:09 2025 by rpki-client