Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
File:                     gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json)
Hash identifier:          WXg9/fctz1WtQdgUgyCIG3bqzJ7pQuj8k4jGk2kJovM=
Subject key identifier:   62:5F:56:A1:78:F5:CE:46:27:6C:F8:86:42:1E:CE:36:BB:63:05:D2
Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
Certificate issuer:       /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Certificate serial:       0B02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
Manifest number:          0AEF
Signing time:             Thu 30 Jan 2025 19:22:32 +0000
Manifest this update:     Thu 30 Jan 2025 19:22:31 +0000
Manifest next update:     Thu 06 Feb 2025 19:22:31 +0000
Files and hashes:         1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: lsgTo4SjxLYBwwq4wc2m1YUEHWJmoRn1ksF+xohbUc8=)
                          2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: 1DhhlreUt8zg3cfxMSneWtvTg2HGZV+ffd2QwHY8Xbg=)
                          3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: YABE0cos6VtRV6egJC6YTrl7tEuiiHleDpqVdQV913A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2818 (0xb02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
        Validity
            Not Before: Jan 30 19:22:31 2025 GMT
            Not After : Feb  6 19:22:31 2025 GMT
        Subject: CN=679bd178-98a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:ba:c8:db:48:a5:b4:2e:26:6f:90:1b:be:
                    12:ce:59:de:82:24:e7:7f:ef:5c:da:56:08:c4:9a:
                    d4:36:bf:0f:d6:50:06:34:a7:4a:22:d7:6b:8e:29:
                    8c:3d:cc:e0:2e:57:f7:37:0c:ad:91:2b:3e:15:22:
                    e4:3d:36:34:0c:39:b0:d8:f0:87:f4:34:42:ca:5f:
                    0f:86:dc:4d:a3:01:f1:d3:10:17:22:34:cf:eb:33:
                    8b:3e:c7:67:8b:d0:eb:e3:bf:51:9c:2f:98:b3:43:
                    fb:7d:06:6c:d3:7b:8b:cc:86:3d:e6:e6:93:a1:48:
                    a7:ab:98:7a:b0:9f:ea:e4:87:fe:55:f5:4f:74:fb:
                    43:fe:cb:71:0e:1b:18:47:0d:99:8e:3b:18:4b:3d:
                    72:f8:48:5f:c8:1d:2a:28:99:83:7d:05:56:47:d6:
                    a7:77:dd:3a:fa:06:0b:a0:a4:68:c6:97:2a:f7:a9:
                    62:18:ec:df:2f:27:b4:4b:9e:6c:5f:d6:17:35:8b:
                    a0:6f:6b:c7:9f:ce:3f:59:64:ae:83:95:83:bc:2b:
                    13:2d:f0:be:92:cc:7e:8a:28:1e:03:26:67:5e:e7:
                    f4:f4:eb:b4:65:d5:75:71:63:b5:a4:5b:12:14:0a:
                    37:f7:d8:50:8e:f3:cb:cc:6f:5e:7f:5c:ef:ed:ac:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5F:56:A1:78:F5:CE:46:27:6C:F8:86:42:1E:CE:36:BB:63:05:D2
            X509v3 Authority Key Identifier:
                keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:33:38:56:a3:7f:9b:66:ee:5d:10:22:28:97:54:f3:de:0a:
         9a:21:5e:ae:21:52:d3:53:1c:8f:9d:95:2a:3f:a9:de:95:af:
         f3:46:66:cf:91:d4:70:5f:48:4e:71:24:6f:96:81:e9:07:fa:
         dc:09:37:98:cc:17:8b:fa:9a:ec:78:28:ba:02:87:19:65:48:
         19:fe:33:6a:2b:5a:07:81:12:68:f5:a4:e8:4f:f6:9d:f7:99:
         3f:83:85:01:99:9d:ff:56:90:61:24:7f:f1:4a:c9:ac:51:86:
         20:72:6c:e2:51:a5:eb:fa:f6:02:b9:38:07:54:fd:a9:90:23:
         ad:8e:ba:5c:aa:f3:55:3b:b3:67:55:dd:32:95:cc:23:cb:a9:
         de:0b:fc:60:3c:1d:96:5a:5d:43:82:28:e8:b9:5f:46:61:ce:
         b3:0a:96:d7:4e:31:41:ff:70:c1:d2:1a:67:cd:d5:66:b8:51:
         78:f2:99:d6:ca:46:4d:1c:0e:2a:c0:10:b2:5e:81:1c:3e:94:
         c4:e2:f0:43:ca:4e:22:ba:e8:0d:db:e6:86:21:c7:b9:03:ef:
         52:5b:a7:d6:bb:28:22:88:ae:d2:89:a5:1c:a8:ad:0e:ad:06:
         85:f8:42:28:c8:0a:cd:67:41:79:7c:1b:a2:9e:b3:11:bf:16:
         df:0b:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:42 2025 by rpki-client