Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
File:                     0NDWzWh3DDh4O764QbES0FYBdKI.mft (raw, json)
Hash identifier:          q142HlfdEdtdcdNIixmDM8p2FoeER4PdcQ9g359H5M0=
Subject key identifier:   F3:11:39:B3:C1:E5:D7:C9:FB:71:5A:DA:60:96:C8:DB:09:C9:6D:B4
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Certificate issuer:       /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial:       084D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
Manifest number:          081B
Signing time:             Thu 30 Jan 2025 20:55:51 +0000
Manifest this update:     Thu 30 Jan 2025 20:55:51 +0000
Manifest next update:     Thu 06 Feb 2025 20:55:51 +0000
Files and hashes:         1: 0NDWzWh3DDh4O764QbES0FYBdKI.crl (hash: XVMFvlYhymFtcmyITbfD7xdh87+/EVWQoueB0fhEvwM=)
                          2: 577FD5BE067C11ED882FC127C4F9AE02.roa (hash: FZgwTWzQksQtmk/Nfe/JqxwRHSDF1+BlazvC8MqkPtA=)
                          3: 4EF79184489411ED86987260C4F9AE02.roa (hash: a8Efs0GAW5Tg39h9an5o87GfSDA70jqZExOy2QFYQOc=)
                          4: 12FD08CAC88411ECAAB5BD09C4F9AE02.roa (hash: Rk9fezvR7MLf0U22xpSZ4jUyV+Jwv2bIeNDcvnRfGXA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
        Validity
            Not Before: Jan 30 20:55:51 2025 GMT
            Not After : Feb  6 20:55:51 2025 GMT
        Subject: CN=679be757-7599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:d9:4e:01:46:aa:6b:95:ab:67:21:e7:d9:
                    6f:77:f5:56:db:48:56:da:13:43:d3:45:c2:3a:c8:
                    30:61:1e:75:a4:fd:37:aa:82:63:95:48:ac:b6:de:
                    2e:8c:83:eb:c8:33:85:1d:f3:4e:4c:2d:cd:17:e7:
                    aa:fe:ad:94:ae:66:55:f8:dc:9b:ae:52:93:a0:56:
                    06:a5:e6:40:a2:46:ea:ed:67:ca:85:17:04:47:d4:
                    2c:87:fa:d0:a6:69:ed:6c:b1:eb:8d:48:3d:9d:bf:
                    66:9d:43:04:11:97:7e:9f:55:79:08:29:c7:7d:ed:
                    e2:50:95:eb:af:f7:80:85:eb:d3:df:20:26:36:6f:
                    49:dd:a2:f7:74:7d:fa:b6:c8:e8:dc:51:2c:52:cd:
                    dc:6a:90:4e:5e:50:b3:fa:9d:9f:0c:57:3f:24:c5:
                    d4:2b:b1:56:0b:89:25:e9:64:34:36:fa:01:1b:9f:
                    d2:f2:71:cb:6e:d6:10:c7:a7:f1:fd:ed:b8:24:81:
                    a6:35:27:e0:cf:2d:1f:c8:de:bd:90:71:cc:fd:f7:
                    de:e3:51:bf:15:6d:27:bb:bc:03:c7:b4:a0:aa:4c:
                    95:bb:d0:0e:ff:8d:e0:16:11:50:90:0e:7b:04:91:
                    65:f5:72:bd:d7:73:1d:bd:a5:d8:fb:dd:d3:e2:69:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:11:39:B3:C1:E5:D7:C9:FB:71:5A:DA:60:96:C8:DB:09:C9:6D:B4
            X509v3 Authority Key Identifier:
                keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c8:54:6d:7d:db:ef:8a:fa:b7:c2:29:8b:0d:90:c3:83:b8:
         a6:7a:d0:cf:69:52:20:25:77:90:97:f7:6b:fc:0e:97:11:f5:
         c7:bb:0d:65:86:b2:b9:7a:cc:0a:4a:00:a9:2b:62:48:07:5a:
         f1:85:34:dd:8b:89:d9:6f:70:d8:f9:50:34:b2:7f:4b:f3:56:
         41:c2:fb:61:9f:88:84:a2:4d:f6:4f:8d:fc:89:35:c3:00:47:
         c7:b9:16:de:5c:97:bb:c5:a8:6e:b2:3f:75:3f:f4:e4:5b:58:
         e9:dc:97:38:1e:9f:2a:12:1d:15:18:b2:77:aa:c3:84:f1:8a:
         ae:ea:a3:1f:ab:f6:ef:98:95:62:25:f7:76:9b:c8:b6:5d:ec:
         4e:dc:e0:eb:88:f2:ad:72:36:f9:aa:c2:d1:21:83:1b:35:21:
         18:ab:2b:4c:b8:05:7b:83:e0:30:0b:24:9b:db:90:13:7c:b6:
         ac:5b:fb:73:e8:01:91:70:af:ec:7a:53:6a:06:21:f4:49:8a:
         a0:c0:ac:96:fe:3e:75:c9:60:a3:77:ab:ac:b1:a1:53:71:2d:
         2d:c9:1f:c5:d1:a1:e6:a4:9c:da:c7:d0:00:12:90:8b:a1:13:
         ea:a5:15:0e:82:e9:9e:a1:f7:03:7b:62:4c:08:17:ed:00:ca:
         2d:96:d1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:03:25 2025 by rpki-client