Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
File:                     IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json)
Hash identifier:          CoRkVW9uY37NIcHTZJLzAJX3f0YocD8DGLSEFJnkNk8=
Subject key identifier:   98:6F:23:6D:5D:92:8A:41:24:C7:5E:B9:E0:9C:21:A5:5D:99:2C:54
Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
Certificate issuer:       /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Certificate serial:       036F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
Manifest number:          0369
Signing time:             Fri 31 Jan 2025 00:59:47 +0000
Manifest this update:     Fri 31 Jan 2025 00:59:46 +0000
Manifest next update:     Fri 07 Feb 2025 00:59:46 +0000
Files and hashes:         1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: CW8VXkic4t0bTOGAufqJz8+5HGcrZtPD5TmB998I5Xk=)
                          2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: 0Kz75Ec+aiyaTgQW5w9kydRmf1vsulhgyrIgS2fmNao=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
        Validity
            Not Before: Jan 31 00:59:46 2025 GMT
            Not After : Feb  7 00:59:46 2025 GMT
        Subject: CN=679c2082-0ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:89:4e:05:e1:80:88:27:63:aa:19:32:ae:
                    b5:1c:ea:6d:1d:9d:77:16:f6:92:e8:08:4d:78:2c:
                    4d:48:e1:5a:80:3c:d6:49:44:62:c9:50:58:7c:85:
                    9a:88:c5:33:42:81:2b:4f:af:4b:f6:be:bf:dc:8a:
                    a5:09:20:51:06:c6:f5:04:c8:b2:89:b0:cb:e0:61:
                    40:75:e2:77:0e:a4:a5:cf:cf:eb:96:6e:5d:ce:6c:
                    32:80:68:1e:84:42:6c:49:28:67:83:97:af:9d:08:
                    ae:0f:c4:94:c7:d8:2e:c8:21:23:b1:40:ab:4e:7f:
                    ba:d9:3d:a7:f2:a3:0f:e3:ce:7e:32:e3:ae:23:f3:
                    5a:09:36:a1:9a:48:3e:88:44:5c:e0:42:81:b9:41:
                    44:e7:7b:fd:1d:05:95:ee:9d:06:bc:26:f2:8e:5e:
                    28:03:54:b1:83:bb:61:12:09:4e:5e:2c:af:b8:1c:
                    7e:82:50:6e:59:3b:28:55:6b:f3:a0:4d:4a:fa:0e:
                    f7:c1:a5:d5:1a:71:22:c7:2a:ad:b2:9c:4a:cf:ea:
                    e6:92:0a:89:d5:0a:44:b9:c3:53:a6:32:ef:16:8a:
                    b1:9e:48:28:6d:4b:2c:cb:f7:19:c4:48:8c:c0:46:
                    78:cb:70:10:90:45:81:b0:9f:f9:03:94:89:3b:9c:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6F:23:6D:5D:92:8A:41:24:C7:5E:B9:E0:9C:21:A5:5D:99:2C:54
            X509v3 Authority Key Identifier:
                keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ff:7c:f4:9b:02:ec:cf:8c:a1:2b:90:a7:4d:60:55:7b:91:
         ac:3f:33:16:3b:b1:d6:fb:4c:df:78:7f:8a:58:4c:74:e9:89:
         91:b0:a5:f2:cc:b7:98:8e:b5:f1:1d:a4:2e:4f:a7:96:85:b4:
         1c:b5:f4:0a:d5:f2:06:53:ea:53:1c:ed:bd:ac:b7:38:16:99:
         e2:0d:c3:b0:de:60:27:8f:ae:09:43:08:3e:e1:26:a0:67:84:
         ed:b7:fc:a7:06:0d:46:32:85:24:8b:30:fb:44:3a:e1:db:8b:
         98:03:87:32:a3:6f:33:b4:da:26:65:a0:d1:b2:51:c9:c3:c0:
         e5:f3:3a:54:b6:97:42:88:98:12:16:4c:5e:f4:30:b1:88:18:
         72:fb:d1:d2:cb:4a:ef:d7:c4:20:9e:54:f0:a9:b9:b1:38:be:
         54:2e:e1:d3:6a:22:b5:9f:74:ff:eb:18:fd:3a:d6:7b:14:d5:
         d1:af:6a:d8:0b:13:da:fe:5d:b6:1d:df:0e:81:b5:ec:39:20:
         0d:a6:8e:87:c4:84:fc:0d:c1:55:9b:97:fc:44:11:ec:ea:63:
         50:23:ac:aa:de:05:0d:c8:2f:1b:9d:0d:aa:ec:55:33:e5:93:
         5a:ec:e5:f4:02:83:6d:cb:b1:a2:92:c3:26:45:61:e6:2c:7a:
         c6:43:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:56 2025 by rpki-client