Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
File:                     VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json)
Hash identifier:          fXia02JExm6XkYzUBSsimt9yZb6wP8IGw2bPyaGbeiM=
Subject key identifier:   48:41:3C:F2:6C:84:45:30:DE:1B:DA:C7:45:77:96:6F:6B:2A:5A:57
Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72
Certificate issuer:       /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
Certificate serial:       0BB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
Manifest number:          0BAB
Signing time:             Thu 30 Jan 2025 18:54:54 +0000
Manifest this update:     Thu 30 Jan 2025 18:54:53 +0000
Manifest next update:     Thu 06 Feb 2025 18:54:53 +0000
Files and hashes:         1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: a6fWkuycFEotsqxEtRHWN0PBiExxRjrsfpeqNnczA4w=)
                          2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 29yqRgflWjw/V78Nb1MTmLxw9ept1pEu77NRsVFXw6E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2997 (0xbb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
        Validity
            Not Before: Jan 30 18:54:53 2025 GMT
            Not After : Feb  6 18:54:53 2025 GMT
        Subject: CN=679bcafd-81ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:08:b5:af:d0:f8:96:b6:f6:7e:4a:ea:f8:d7:
                    f7:32:0c:15:70:4d:22:c4:5e:a2:3f:5d:ae:48:8f:
                    db:45:a0:9e:2f:54:21:ce:d6:20:7a:25:c4:e1:fa:
                    f8:5e:48:4f:b5:c0:f5:c5:35:2a:02:87:73:d2:30:
                    bb:27:d3:ec:84:dc:68:03:3d:4b:ab:26:47:92:c4:
                    e7:1e:b7:31:12:10:f9:22:ed:9c:bf:22:13:f5:da:
                    6c:08:41:4f:91:92:0e:79:30:3a:eb:3b:61:b7:ad:
                    2a:34:e8:ff:8b:36:7d:13:9b:4e:cd:1c:cb:09:9c:
                    a9:b7:23:e4:8a:49:9c:b2:25:37:97:f8:71:fb:b6:
                    a3:3b:03:fa:df:c3:96:46:b3:54:14:72:7d:68:1e:
                    53:4d:ea:19:f2:38:df:14:0b:55:58:4d:93:c0:1a:
                    39:54:92:b4:bd:77:39:6e:a9:4b:fb:bd:2e:01:88:
                    86:b6:fc:4f:de:82:1b:18:de:47:1a:fb:5d:08:42:
                    4b:4c:3e:62:08:80:20:d8:62:21:b6:69:5a:51:7a:
                    13:99:5a:0a:25:bb:32:bb:4a:f5:cc:a3:d3:17:c9:
                    b7:ad:83:ea:fc:b1:3f:e7:8f:f1:f5:b8:30:4d:ca:
                    8b:1d:ee:eb:76:69:b3:06:67:20:f7:a9:93:a4:39:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:3C:F2:6C:84:45:30:DE:1B:DA:C7:45:77:96:6F:6B:2A:5A:57
            X509v3 Authority Key Identifier:
                keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:cb:e9:44:e8:41:9e:8b:10:6d:95:5a:f3:2a:50:b2:81:45:
         76:73:38:f1:cc:dc:a9:3f:44:bc:ec:f3:b7:82:af:55:d3:ad:
         9c:90:3d:37:6c:69:73:05:28:36:bd:4e:d3:31:ba:c2:5d:94:
         ec:c3:f2:ba:e3:ba:8b:5b:ef:91:40:e3:68:98:c4:c3:38:d6:
         fd:5d:79:bf:9d:83:94:f3:cc:9d:99:81:6b:ce:43:f2:e8:c1:
         51:31:ba:47:cd:0e:5a:e4:ee:52:70:9c:7d:f8:ad:c7:0c:3d:
         95:b7:7d:8f:ae:7c:2b:11:e7:b3:60:62:d2:c5:3a:2d:47:b2:
         ec:20:85:86:bf:17:15:40:4e:3f:e6:c0:59:33:53:a5:fd:0b:
         19:5e:13:a2:73:74:03:1a:b1:b3:f5:78:41:2f:6b:1e:89:ef:
         f4:4c:a0:b9:60:7b:81:87:21:d3:5f:82:e6:bf:1c:17:0e:99:
         a3:39:99:13:48:84:02:10:84:f2:9d:22:50:37:7f:42:c7:54:
         8b:0a:13:51:2f:ba:60:99:bf:70:f1:e0:44:93:72:d9:3b:59:
         6d:85:3c:6a:a6:71:c4:5f:06:df:5c:90:e6:97:1f:2f:ed:91:
         19:06:0d:08:44:f0:ae:a8:fa:cd:98:72:7c:0b:d3:f8:6d:60:
         6a:5b:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:38 2025 by rpki-client