Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File:                     -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier:          XfXXSbV+98UkpduUGxO1+qcOwkcVhCxzPHjtpnjkWVg=
Subject key identifier:   C0:59:F3:0B:D1:AE:E1:1A:D7:D0:67:34:A4:4C:97:14:78:E4:A6:01
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer:       /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number:          0267
Signing time:             Fri 31 Jan 2025 01:48:12 +0000
Manifest this update:     Fri 31 Jan 2025 01:48:12 +0000
Manifest next update:     Fri 07 Feb 2025 01:48:12 +0000
Files and hashes:         1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: wvp7l6cPO60kNwvmqgh0h9/DwED7/CiRqVg7l2bUfYc=)
                          2: C79B240C249811EFABD23253C4F9AE02.roa (hash: vxN5ELpDSKeuKP/1PWPd9uK2hQBdf3IJCeKh68BuUKw=)
                          3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: 6c0Jw3077JWhUg1z+ONRU+S6jEOJ+qb2QR7rvXgZlpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
        Validity
            Not Before: Jan 31 01:48:12 2025 GMT
            Not After : Feb  7 01:48:12 2025 GMT
        Subject: CN=679c2bdc-ae23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0b:6a:d4:4b:6e:6f:f1:bb:a5:21:af:0f:18:
                    ac:79:1e:9b:d4:0b:d9:bc:62:61:74:00:3a:da:b7:
                    05:ef:b2:96:39:d9:c0:37:59:13:0a:aa:97:3a:8b:
                    44:f0:e6:5a:2a:7c:d1:a0:6e:89:50:cf:96:bd:11:
                    33:a5:41:b7:48:c7:13:51:1b:84:3c:83:b7:02:bf:
                    af:b7:e4:f5:b6:ca:8f:bb:f8:89:5e:fa:1a:97:7b:
                    12:69:ae:63:c2:29:73:63:0c:f5:40:ab:e2:e4:0f:
                    cb:6f:93:72:eb:99:a5:43:0a:02:42:9d:b5:25:49:
                    c5:cb:a4:9e:e8:7b:79:02:cf:ef:95:93:f1:a9:47:
                    cb:52:13:f7:ea:bb:d9:de:67:63:c5:46:cb:2f:d9:
                    42:75:c0:39:08:66:77:61:a2:09:9d:ac:b2:96:b9:
                    15:14:5a:fa:1e:96:bc:19:cd:29:63:b4:86:3a:a9:
                    53:cc:c7:e4:89:9a:68:01:1f:1c:b1:d4:f1:4a:51:
                    e1:8d:c1:78:ad:25:b2:4c:62:13:7a:30:8d:f1:dd:
                    da:e3:b7:99:ff:74:3a:66:68:eb:d3:2d:fb:50:46:
                    df:c0:41:77:1f:31:7c:21:08:76:91:d1:06:ff:5a:
                    09:16:16:d0:6a:72:cc:02:d8:14:0e:4f:cb:30:da:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:F3:0B:D1:AE:E1:1A:D7:D0:67:34:A4:4C:97:14:78:E4:A6:01
            X509v3 Authority Key Identifier:
                keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c1:4d:40:07:20:49:a2:5e:ad:5a:b9:22:c8:8d:fa:ae:9b:
         ee:9b:ce:eb:83:a7:0a:65:71:61:32:5a:85:c6:ae:d9:ac:9d:
         dc:5a:ab:17:cb:76:ec:06:61:79:1b:a8:8e:0a:ef:06:15:53:
         3b:2a:90:d3:87:ca:97:c7:d9:40:80:fc:5d:65:73:a5:b1:07:
         71:a2:2e:c0:28:75:cb:30:ac:9a:26:39:9c:2b:c2:df:40:ff:
         d6:39:14:26:3f:a1:57:00:c1:8d:2d:41:ec:27:55:b2:87:e1:
         5a:91:62:82:19:f5:3a:ba:af:5d:81:be:bb:de:b8:84:79:08:
         e0:ce:cf:83:c2:2a:d8:38:c6:f4:b1:8f:79:fc:2a:69:03:e2:
         2f:b6:fb:b4:a4:41:3e:0a:ff:9f:bb:54:da:14:58:92:75:40:
         0e:22:b5:24:42:0e:fa:2a:45:53:3c:71:b1:63:02:e9:4c:f3:
         06:ca:7c:d5:85:34:e0:0d:33:35:00:60:7d:0f:06:e5:b7:06:
         3c:3c:00:2e:7b:86:be:f7:f1:7d:04:ec:9a:70:60:c0:5c:08:
         4f:5f:2d:3b:a7:11:78:4c:c6:b5:96:8e:63:7e:2e:24:c0:e1:
         f2:68:0a:4f:46:04:78:a9:ed:bc:e6:22:31:33:9a:c3:c0:dc:
         38:be:80:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:39 2025 by rpki-client