Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
File:                     nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json)
Hash identifier:          A3fEieejZOfYSEam5E0PjrKvCo/7VR0u9CrTKbA/suI=
Subject key identifier:   B8:FE:00:50:2B:28:28:05:E4:44:9B:18:89:E7:77:E4:69:91:2C:A9
Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
Certificate issuer:       /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
Certificate serial:       06F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
Manifest number:          06E7
Signing time:             Thu 30 Jan 2025 21:58:34 +0000
Manifest this update:     Thu 30 Jan 2025 21:58:33 +0000
Manifest next update:     Thu 06 Feb 2025 21:58:33 +0000
Files and hashes:         1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: oZy/nF+4LZFQS+RVUR9HQQUvMR41SWTBOVtpEKFwpzE=)
                          2: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (hash: qiBZQI2a1Ynnwr8NZC+JZxXJpm/2uK+g5xqt3jGkNKM=)
                          3: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: CD2XZGcer+kAB85rmOAMuyU4/KGzzo0Ink+wv2m7taY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
        Validity
            Not Before: Jan 30 21:58:33 2025 GMT
            Not After : Feb  6 21:58:33 2025 GMT
        Subject: CN=679bf60a-9805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:9b:66:5b:26:83:2a:aa:97:fe:fa:d8:b4:
                    65:2a:00:01:b1:42:1a:2a:21:82:64:d4:f4:4e:ea:
                    8c:00:17:e3:80:c3:75:02:b0:7f:40:b6:92:6c:70:
                    12:65:c4:3a:14:65:2e:5a:ef:b7:61:fb:fa:e7:a2:
                    d8:dc:f1:fd:37:96:86:3f:c5:ac:f8:c1:fc:43:22:
                    68:2a:38:9a:27:5e:10:b9:5a:46:d0:78:19:1a:45:
                    36:dc:eb:65:5c:e3:e5:58:3d:c7:ca:ed:96:9d:5a:
                    74:4a:ec:30:b6:4e:24:eb:b6:8c:72:17:0d:71:cf:
                    d5:e5:9f:fe:35:92:0a:76:af:cb:98:7e:92:d9:81:
                    b5:ae:e8:4a:2d:f5:a5:ad:94:82:c5:d5:1b:0c:d7:
                    d1:e9:51:61:17:63:ad:59:69:98:cf:3c:45:9f:a0:
                    f7:02:2b:2c:bd:4c:53:01:2e:69:32:25:d2:fa:24:
                    1a:da:3b:58:a5:49:51:6f:14:69:b2:26:68:71:87:
                    c2:43:d4:5b:9e:ac:a8:29:22:e5:a8:8f:d7:60:cd:
                    f0:10:f4:da:ca:b5:74:c5:1c:e6:0f:6d:bc:01:2b:
                    dd:6a:48:bf:1a:f0:b4:53:60:d0:6b:bf:f2:50:6a:
                    8f:18:12:e4:11:91:b1:09:0b:b9:68:78:59:ce:8e:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FE:00:50:2B:28:28:05:E4:44:9B:18:89:E7:77:E4:69:91:2C:A9
            X509v3 Authority Key Identifier:
                keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:22:80:bc:de:32:23:15:ad:a0:f0:be:3d:12:08:4c:ee:6f:
         5b:91:8a:64:8a:46:bd:1d:af:f0:18:f4:74:15:ec:cf:73:58:
         15:4e:75:09:87:a8:02:5c:93:ae:14:89:b3:fa:37:f5:ad:c9:
         77:c6:05:9d:2f:f8:b0:f1:7e:6f:54:5a:3e:9a:95:8f:71:9f:
         8f:e3:ad:3b:b0:09:4c:a2:2d:4e:43:01:c1:71:9c:b7:c4:49:
         3f:63:9e:eb:1b:2e:58:1c:17:b8:2a:fb:61:db:48:2b:ae:66:
         35:1a:d3:15:ac:3b:cd:90:63:c1:9c:4a:50:7b:c8:01:db:59:
         33:6b:93:a0:39:23:18:c7:2f:45:37:81:8d:bd:0f:d0:d8:24:
         e9:b3:99:8d:6e:2a:0d:47:26:69:96:d0:44:30:78:59:35:c2:
         74:a6:70:1a:0b:bb:6e:86:9f:e1:1b:44:7d:90:93:17:5a:83:
         13:b9:d9:7b:b2:37:26:74:c1:b6:b7:1c:d3:c9:01:6f:82:00:
         b3:15:9c:45:18:19:6f:0e:07:4a:37:25:aa:00:10:5b:e3:30:
         fc:b5:3d:26:d5:b0:54:4a:5e:f7:9e:57:e3:bc:d8:89:19:f2:
         47:69:c1:56:fe:cf:ca:29:d0:17:f4:f6:97:18:e6:97:ee:b2:
         5e:c7:49:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:50:44 2025 by rpki-client