Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
File:                     1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json)
Hash identifier:          zTmJsfR5is8IMkuAuYXA32WIqdvdyRTZmv01kdTRlME=
Subject key identifier:   7F:50:9F:BD:E3:99:D1:2E:16:33:B6:9A:7B:02:10:97:70:79:48:40
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Certificate issuer:       /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial:       02C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
Manifest number:          02C4
Signing time:             Fri 31 Jan 2025 01:31:22 +0000
Manifest this update:     Fri 31 Jan 2025 01:31:21 +0000
Manifest next update:     Fri 07 Feb 2025 01:31:21 +0000
Files and hashes:         1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: rRbMdU0MtHl/2VLWC56MxDqQNoGkUP7xvnBJ9VE/9gw=)
                          2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
        Validity
            Not Before: Jan 31 01:31:21 2025 GMT
            Not After : Feb  7 01:31:21 2025 GMT
        Subject: CN=679c27e9-a3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:59:c8:41:a8:6f:27:76:8a:69:26:93:2d:
                    b8:3c:cc:89:b3:59:b8:e0:59:34:95:89:d4:c8:44:
                    72:13:29:1e:f1:40:dc:b4:67:cf:ed:a3:87:2b:0d:
                    c8:1f:ba:6b:ba:84:e8:81:ea:55:d5:30:6b:3f:b3:
                    89:e2:db:c9:2e:4c:55:35:8d:3b:eb:c2:67:9c:bf:
                    8a:b6:db:e0:35:4f:5a:d9:85:7a:d9:7b:36:e5:11:
                    95:17:ef:ab:7e:bb:9d:57:6f:ca:c0:9b:e3:55:11:
                    76:a9:e4:94:2b:a0:48:ae:8b:9f:63:92:83:e1:76:
                    72:69:d3:19:75:28:e4:f7:3d:b4:70:aa:20:9f:09:
                    ad:4c:2e:aa:7c:b4:da:fd:50:f7:62:19:d1:f0:96:
                    bf:1f:7d:a2:53:42:c5:16:16:a1:fd:99:ce:cd:44:
                    ed:58:d6:52:55:0c:44:82:75:57:b4:9f:d9:ce:79:
                    97:72:e8:41:6b:05:20:8c:f4:4c:a5:0b:ce:0d:b1:
                    25:57:c4:96:03:30:37:38:d9:0d:58:33:67:1c:64:
                    5a:ca:c4:a6:eb:0d:5f:86:b8:bc:d8:c5:85:32:53:
                    a2:49:39:1f:c5:b4:3a:5a:3e:56:11:db:90:77:69:
                    71:07:83:81:0d:5e:86:c0:0e:86:c2:64:ae:14:9b:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:9F:BD:E3:99:D1:2E:16:33:B6:9A:7B:02:10:97:70:79:48:40
            X509v3 Authority Key Identifier:
                keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9e:13:fc:e2:78:31:f2:d9:b9:03:50:32:31:ea:4d:ae:4e:
         b2:89:59:ea:c8:b7:d3:a0:c6:67:e6:0a:1f:52:ad:d8:f9:ed:
         5b:92:13:ef:22:72:fa:cd:4b:2d:95:f6:3d:4e:fb:9d:24:e3:
         2b:84:98:f0:25:65:de:38:4f:49:80:5e:9d:35:b1:f5:dc:1e:
         ed:66:9b:b6:94:da:85:55:81:59:47:d2:9e:e5:ff:9d:3c:da:
         ff:d2:fd:a4:f8:0f:64:7a:95:a6:b0:64:41:e0:15:1c:64:aa:
         be:1a:fe:a6:fe:f2:59:6a:10:80:d0:94:98:bc:2c:e3:60:5c:
         f4:12:2b:ee:d0:5d:65:72:bf:b9:32:9c:45:c8:89:6c:d0:31:
         3d:bc:9f:6e:88:8e:01:ec:6b:e1:69:50:a0:4d:76:17:08:50:
         c5:b7:03:f3:b8:0a:07:9e:96:45:eb:e7:29:ef:ff:1a:02:27:
         1e:d8:7a:0f:f5:50:e1:01:33:ca:79:c3:03:a1:c9:28:1a:06:
         f7:b2:45:9f:e6:bc:af:5b:25:1c:1b:fb:87:96:44:96:66:c0:
         6e:ff:cf:75:c8:94:d2:4b:c5:67:5c:53:50:c6:f2:45:4a:79:
         1b:87:5e:5b:b7:c4:f3:a0:16:a1:22:36:54:9c:ae:78:73:9b:
         83:78:52:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:07 2025 by rpki-client