Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
File:                     bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json)
Hash identifier:          O+GVtkPFusY3CBQvBtapXcg5+9XewtJLLcRtI2xHbLI=
Subject key identifier:   A9:BA:0F:39:E1:B6:A3:7F:B5:A8:5D:F7:67:60:DB:02:96:2E:72:0F
Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
Certificate issuer:       /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
Manifest number:          012A
Signing time:             Fri 31 Jan 2025 03:45:53 +0000
Manifest this update:     Fri 31 Jan 2025 03:45:52 +0000
Manifest next update:     Fri 07 Feb 2025 03:45:52 +0000
Files and hashes:         1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: 4UjPu3v22NCrRZYK+UVtiDAS16gaLsY0WxxPBS7eG2k=)
                          2: 6001781C1A6411EE8DCBF20BC4F9AE02.roa (hash: ZseofxVBmk1oHOZeOfz67oZDHtFAev5piCEWlzQMVS4=)
                          3: 608D76E61A6411EE8DCBF20BC4F9AE02.roa (hash: euvqXX/ht0bd6COd/tt0UFecv29A1PLRz8kYzYfkuMo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
        Validity
            Not Before: Jan 31 03:45:52 2025 GMT
            Not After : Feb  7 03:45:52 2025 GMT
        Subject: CN=679c4771-4d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:18:86:ad:1c:bc:20:3a:50:38:03:49:1f:
                    33:3a:28:2e:38:c5:b3:01:37:05:72:36:fe:89:05:
                    e7:63:35:52:fd:93:bc:95:69:c4:08:c9:a2:1f:b9:
                    30:7b:be:79:4e:7f:c2:ba:91:1c:05:4e:6a:05:2e:
                    33:fc:76:69:a1:95:b7:ee:98:84:9c:ca:54:19:d6:
                    5c:25:3b:39:d4:72:40:30:f7:e4:d4:79:62:cf:f4:
                    81:f7:f0:89:96:bb:70:f7:2a:2f:b7:eb:a4:19:4a:
                    1d:62:2a:8f:38:51:d2:bd:54:5d:b6:0d:47:a8:7b:
                    da:28:3f:73:23:fe:84:8f:b5:e0:ce:aa:c2:23:2a:
                    18:00:31:f8:6d:fd:d5:1b:67:75:56:d5:b1:ca:b8:
                    d2:ea:09:65:ca:56:a4:ee:c7:9a:86:31:82:f7:ac:
                    34:3a:b6:06:76:71:35:fd:6e:aa:ad:83:0e:7c:02:
                    e3:82:0d:72:da:03:ea:2a:fe:0e:33:28:56:65:bb:
                    8a:6b:c2:63:c6:52:8e:29:03:46:7f:2e:62:94:32:
                    db:04:72:5a:cb:d1:c7:c3:f2:60:3e:25:16:9a:b2:
                    bf:9a:09:d3:e9:a3:ae:dd:4c:c0:ce:75:12:af:6f:
                    c6:c8:5d:58:fc:4b:92:de:bf:a7:7a:a4:c9:a3:29:
                    b1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:0F:39:E1:B6:A3:7F:B5:A8:5D:F7:67:60:DB:02:96:2E:72:0F
            X509v3 Authority Key Identifier:
                keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:b9:8f:0c:60:e4:d2:99:b9:7e:88:05:f8:77:8b:b4:9e:
         f5:9e:78:d5:da:28:bb:96:ee:f7:c9:fe:c2:f5:d8:52:4b:03:
         07:a7:b1:a3:9f:26:4d:66:5f:09:60:8e:81:de:5d:1c:34:98:
         65:2e:4f:5f:66:b1:6e:82:2d:8f:c2:9c:62:3e:7e:7c:7e:e3:
         e8:53:1c:ad:a0:d8:7a:db:99:77:ba:56:d1:d5:67:36:5b:3f:
         4f:db:4d:20:03:7c:51:f8:0b:6f:da:7e:63:83:87:16:6c:1d:
         7d:a0:79:b9:a2:7d:e2:cf:72:12:cd:ab:c3:02:1c:54:28:db:
         52:cb:ae:a6:c8:2a:20:4a:ea:1a:a3:8f:e4:91:43:7f:68:9d:
         2e:f5:b9:f5:ed:35:b7:09:04:80:83:66:31:97:0b:60:4e:70:
         16:3a:8b:74:82:63:7b:93:c6:87:5a:2b:aa:5a:60:9f:c3:fd:
         06:f0:d2:1d:69:79:5f:f9:6b:83:89:d9:c5:4c:25:f8:21:54:
         40:ce:fd:53:7f:89:c6:cb:4d:f9:00:5e:38:dc:86:28:37:c3:
         fa:95:7c:71:a7:c0:e4:0d:46:5b:c9:33:c2:fa:92:80:ea:9f:
         52:b0:3b:56:d7:4a:1f:4a:45:c4:c0:dd:a4:9a:48:1e:64:e1:
         14:31:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:14:58 2025 by rpki-client