Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
File:                     ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json)
Hash identifier:          EInnl+qdjwLwxqSk/Ga0HzfL6mwIWMJO/E//dCG/Y8g=
Subject key identifier:   9C:7A:CE:DC:A8:B4:DB:7E:D7:F1:20:9A:DD:13:13:3F:DC:C9:B7:75
Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
Certificate issuer:       /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Certificate serial:       0F74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
Manifest number:          0F63
Signing time:             Fri 31 Jan 2025 17:33:21 +0000
Manifest this update:     Fri 31 Jan 2025 17:33:20 +0000
Manifest next update:     Fri 07 Feb 2025 17:33:20 +0000
Files and hashes:         1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: iAFLVNNUJrpsvMJ0QSGVw5O/DR7fy6QPVn0JiYMqDSQ=)
                          2: 4DF4371066B111E98B2CD954C4F9AE02.roa (hash: wnwOcdr/H0vin2k8D2HczrFn5eNuey06OLgo+xwiEHw=)
                          3: 166760A85CF511E9A1F5EE2BC4F9AE02.roa (hash: F0bzFVB9DpzLQNhx6YUaeBah+c9CsHyAXG1cVMQs+ZU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3956 (0xf74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
        Validity
            Not Before: Jan 31 17:33:20 2025 GMT
            Not After : Feb  7 17:33:20 2025 GMT
        Subject: CN=679d0960-8475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:93:d0:d9:b1:fa:b7:79:4f:d1:ed:77:23:cd:
                    73:82:da:74:14:56:94:dc:38:32:d5:34:6c:83:a5:
                    bb:90:f6:5a:28:d1:fd:e3:e4:3a:a8:ca:88:d4:a5:
                    f5:c0:b1:d8:1c:27:4d:61:1a:b7:af:a8:a9:06:68:
                    a4:d5:05:f5:86:19:a7:5e:b7:4a:7e:bd:ff:5b:e9:
                    44:a7:c4:86:21:01:49:91:d2:f4:36:4f:51:3e:5a:
                    f2:64:42:d6:30:f2:e3:5b:30:de:9e:a6:12:13:18:
                    e3:7d:20:64:d4:06:7a:f7:20:0e:0b:b0:c8:61:38:
                    29:b0:34:8f:e4:04:f0:08:57:07:88:00:25:c8:10:
                    65:61:fb:b5:53:38:43:17:ae:d0:29:21:a5:5c:48:
                    97:30:b1:f3:b2:b1:07:6e:ce:6a:57:7f:54:b6:12:
                    a5:4b:9a:e4:1c:ad:86:08:56:d2:f0:47:03:74:53:
                    9c:a7:9b:12:e7:8c:8d:49:00:b5:51:b1:12:f8:73:
                    29:e3:44:e5:8a:21:f3:48:f6:6d:31:01:38:42:85:
                    d2:53:3e:00:1f:09:01:cd:b1:2e:29:2f:81:99:27:
                    f2:65:ad:80:c0:1c:a0:ca:54:dc:2d:b9:f5:31:99:
                    09:b3:8b:f0:2f:c5:0b:6a:67:de:2f:0d:2b:04:b8:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7A:CE:DC:A8:B4:DB:7E:D7:F1:20:9A:DD:13:13:3F:DC:C9:B7:75
            X509v3 Authority Key Identifier:
                keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:23:48:b7:58:19:6b:1b:d2:f9:ba:80:8f:01:2b:7f:90:3b:
         ef:d5:d8:b3:b4:61:69:db:25:ff:84:c3:39:16:1a:ce:7c:8e:
         c3:3f:2d:13:14:ab:00:ca:e3:a3:71:6a:10:ea:a7:46:68:a2:
         1a:3d:11:c8:5d:8a:2c:45:54:2f:31:f6:6d:b0:16:ca:6e:d7:
         ef:70:89:79:ea:60:0e:6d:cc:22:39:05:1b:0e:35:51:3c:d2:
         98:9e:d7:89:9a:82:c8:6d:34:28:2d:24:04:03:22:1d:82:c0:
         a9:47:d7:e6:3c:8e:d2:fb:15:41:2f:d9:86:3d:88:59:b2:0b:
         54:40:77:f7:34:40:66:8e:ee:4d:44:fc:0c:38:93:3a:1d:f3:
         69:56:cf:c5:80:59:1a:6d:30:f8:be:ed:88:7d:f8:69:37:f1:
         93:cf:92:a7:88:c2:8a:ec:e4:da:57:04:6b:ae:7a:f1:8c:d8:
         26:6d:28:fa:a6:88:b8:e5:3c:07:47:3b:ce:e5:f7:b6:0d:37:
         7b:8b:0b:7b:9c:9f:52:df:ae:10:03:b7:30:ea:91:9c:1f:5d:
         4f:8c:07:6d:1d:22:ae:cb:08:06:fd:6f:17:cb:61:0e:62:ab:
         61:2f:5f:6a:b9:51:89:9e:a9:81:0f:e7:33:4f:c3:6e:2e:a0:
         02:c4:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:54:41 2025 by rpki-client