Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
File:                     rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json)
Hash identifier:          zwO5hy2WUvYUeFBsWDOiH53FkHTal6XIKionlDqsR/s=
Subject key identifier:   53:7D:CE:E3:9E:E9:C4:53:63:62:0B:E4:7B:ED:EF:D7:A5:AA:21:F8
Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B
Certificate issuer:       /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
Manifest number:          0243
Signing time:             Fri 31 Jan 2025 01:57:21 +0000
Manifest this update:     Fri 31 Jan 2025 01:57:20 +0000
Manifest next update:     Fri 07 Feb 2025 01:57:20 +0000
Files and hashes:         1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: /2HlBpRTvCwdYCf5jIfKFopt81nUnEK+V3vDG30dSkA=)
                          2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: tjanCdEnU91WZWuNneW5uPLOhcdnMX5ORciFEmcFL7c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
        Validity
            Not Before: Jan 31 01:57:20 2025 GMT
            Not After : Feb  7 01:57:20 2025 GMT
        Subject: CN=679c2e01-0dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:78:17:52:17:cf:99:b5:af:fc:4c:e5:14:
                    da:02:62:2c:f1:60:1b:42:64:d4:75:13:2c:dc:5f:
                    4c:27:22:e1:09:e0:3a:88:39:ad:04:2b:6c:f1:90:
                    0f:33:8f:58:c3:66:3a:e4:2b:df:5c:88:64:92:bb:
                    eb:43:fd:63:b3:3d:1d:93:e9:47:c2:fa:8a:e8:78:
                    41:8e:14:3c:4a:99:88:1f:88:48:91:18:94:12:42:
                    15:36:75:be:97:fa:ba:11:31:84:d7:13:59:6c:5b:
                    3e:f9:0c:95:66:b4:b9:88:7c:e6:71:6d:d6:a0:37:
                    38:f4:ec:ba:5a:c3:b8:88:6a:16:7d:f3:77:f4:a6:
                    9a:fb:81:02:d6:b8:28:a1:a7:94:2a:05:63:49:f2:
                    d8:db:86:60:38:f2:67:f4:a5:02:a2:2f:ac:61:f2:
                    8b:1d:f6:da:36:b8:7a:22:fb:97:b7:cd:22:65:5d:
                    c3:fb:79:ab:a7:3e:b9:15:ed:87:15:07:92:d6:dc:
                    33:f9:62:bf:ca:ef:94:6c:ab:70:f0:f9:42:c9:9d:
                    52:3c:16:b1:56:f6:5b:6c:49:72:f4:e3:b2:50:c5:
                    c7:52:fd:b5:16:81:d4:5c:c1:17:ac:02:6e:06:e9:
                    68:c7:11:22:64:1f:e2:bc:8f:72:44:3f:e9:dd:1b:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7D:CE:E3:9E:E9:C4:53:63:62:0B:E4:7B:ED:EF:D7:A5:AA:21:F8
            X509v3 Authority Key Identifier:
                keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:24:d0:c0:e6:12:37:a2:01:03:99:b6:e9:e5:3b:16:09:46:
         8f:61:39:3e:c8:00:8e:20:32:2b:f8:de:6f:ae:6b:ed:3c:b1:
         de:62:f8:74:e3:ca:37:e1:95:df:eb:3c:df:78:e3:b6:13:72:
         4c:f7:4c:e1:80:39:1f:b8:e6:82:f4:0e:74:6f:dc:e6:0e:b0:
         ae:58:0f:c1:b4:47:c9:2e:bb:fe:09:9f:e4:bd:a4:0c:6b:6e:
         5a:7a:0e:ce:b9:cd:43:be:6d:12:a3:54:44:e9:e7:03:7f:37:
         fd:7a:ac:c7:4f:52:27:ec:38:ee:d4:32:ca:d0:25:98:5c:6b:
         44:a0:96:04:2c:23:da:5a:6a:3a:1f:30:21:87:93:08:60:13:
         45:a4:9c:05:2b:d1:10:50:17:34:5a:d2:de:8a:b5:88:c1:ab:
         7e:f9:ff:c7:a7:c8:9a:58:e5:b4:4c:be:56:99:18:65:41:2f:
         ec:d5:32:6c:ce:1a:e9:88:26:24:bb:7e:ae:d7:22:d6:66:4c:
         a0:16:cb:53:a9:03:95:00:ef:5d:90:43:4e:31:51:5d:60:3d:
         22:ef:3e:46:94:42:7d:24:8d:61:23:70:f6:20:9c:20:f1:30:
         1a:16:07:1d:19:9f:d8:34:e9:3b:d8:dc:cf:1a:b2:38:3f:6e:
         a8:ce:05:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:23 2025 by rpki-client