Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
File:                     ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json)
Hash identifier:          X92IEiEUENGGa6Swr66qJUiuxthVpsd5pG54uf7Da6E=
Subject key identifier:   4B:5F:5C:58:1D:93:25:35:09:EB:35:C6:8D:EC:1B:5F:DE:95:5C:48
Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Certificate issuer:       /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Certificate serial:       06CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
Manifest number:          06C5
Signing time:             Thu 30 Jan 2025 22:03:53 +0000
Manifest this update:     Thu 30 Jan 2025 22:03:53 +0000
Manifest next update:     Thu 06 Feb 2025 22:03:53 +0000
Files and hashes:         1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: csXN4jP/krwjJVfTsgeSNeFXyT9A+yg0fw3gZFuPoxk=)
                          2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: 4rISf9Z0gDtlAylgqmkLRj4oHpOaisWHbdYvnEyJBHI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738 (0x6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
        Validity
            Not Before: Jan 30 22:03:53 2025 GMT
            Not After : Feb  6 22:03:53 2025 GMT
        Subject: CN=679bf749-d0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:af:85:e9:0e:6c:f2:be:80:9a:98:80:c9:
                    96:f9:a9:3b:c0:8b:3e:fa:27:81:b1:9c:35:ab:33:
                    4e:2d:7e:28:e8:ed:03:40:02:f0:69:8b:00:a4:98:
                    2b:49:08:1c:0f:13:9e:e5:f4:8b:06:fb:2a:1a:b2:
                    bf:39:ff:fa:4b:d4:90:a4:14:c4:d2:d0:37:01:92:
                    c7:7e:80:0c:99:6a:b9:20:3a:d6:32:7a:13:31:b4:
                    db:8c:1d:f5:90:37:5a:96:33:3c:73:64:b1:70:92:
                    6b:cd:07:ac:1e:9d:07:a9:45:45:a2:48:ac:0a:24:
                    7a:6e:6b:c5:f1:e6:82:78:d2:4c:ea:84:0d:41:36:
                    4a:96:9e:76:02:05:57:53:ee:c4:61:84:a7:be:f0:
                    9e:bd:76:eb:f2:42:a5:48:71:55:7b:7b:da:b9:60:
                    ec:8d:61:60:aa:b8:b2:d1:72:12:c9:08:60:52:e9:
                    e9:0c:bb:d5:0d:c6:fd:7f:57:9e:31:e2:33:db:8a:
                    9e:15:89:5f:80:b6:fd:f6:f2:df:76:25:16:ff:fd:
                    86:81:c0:0d:ef:5f:cd:50:48:16:12:51:03:a4:33:
                    d0:1d:38:9f:fe:c7:c1:2a:21:8a:8e:cb:8a:96:81:
                    e1:52:1b:57:ab:25:b0:50:08:0d:b0:f5:33:f3:23:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5F:5C:58:1D:93:25:35:09:EB:35:C6:8D:EC:1B:5F:DE:95:5C:48
            X509v3 Authority Key Identifier:
                keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:63:b5:8c:e9:3f:19:cb:eb:75:31:ff:d7:44:6a:25:58:9f:
         e7:dd:7f:70:25:d9:5d:20:dc:2e:04:63:2d:50:7c:64:e1:13:
         c3:3d:33:b4:e6:a5:72:db:a6:00:0e:45:ee:17:45:3f:fb:bb:
         63:3c:68:1a:d7:ed:8b:75:08:cf:8c:04:da:84:25:67:20:53:
         bb:88:c9:f2:e9:0d:ca:d5:7c:8f:77:6c:01:b0:56:b5:5d:33:
         e2:b2:7a:54:6e:e5:34:a6:8c:59:d7:75:57:43:c6:1e:d3:1b:
         a8:1e:d8:dd:50:f0:be:20:d3:07:51:17:c3:cc:8d:b3:6e:b4:
         7e:89:fe:26:1f:15:1b:db:b9:6a:42:e1:1c:7a:e8:96:ee:7b:
         c1:51:29:44:15:d6:f5:f8:7a:69:1c:0c:1a:5f:90:da:e8:c5:
         83:5b:3f:33:22:2e:44:0f:d1:c7:7e:cd:48:ef:1e:b6:fa:b0:
         3a:0b:6b:2b:63:e6:7d:07:c9:60:a8:a2:09:10:17:a8:28:f9:
         c4:4d:b5:7d:e5:4a:fb:95:21:35:39:79:ab:37:95:d8:8f:c2:
         38:2f:be:d8:12:c7:9c:f4:bf:0a:8a:1b:b8:47:7f:a7:9a:81:
         29:04:f0:65:86:3f:7e:db:1b:de:d6:28:e1:94:90:1b:83:07:
         4e:a9:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:56 2025 by rpki-client