Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
File:                     9wpgFV53FUM_JUSW4nuAimPIyXQ.mft (raw, json)
Hash identifier:          suwFCwZ286mhna+Qglv8UrWzC01LLqpB6p2Qh/9mc+E=
Subject key identifier:   5B:B9:80:C7:95:9A:D3:A4:DC:D4:67:03:98:5A:9D:02:78:23:BE:82
Authority key identifier: F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74
Certificate issuer:       /CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974
Certificate serial:       0E20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
Manifest number:          0E11
Signing time:             Fri 31 Jan 2025 17:44:47 +0000
Manifest this update:     Fri 31 Jan 2025 17:44:47 +0000
Manifest next update:     Fri 07 Feb 2025 17:44:46 +0000
Files and hashes:         1: 9wpgFV53FUM_JUSW4nuAimPIyXQ.crl (hash: oRA+ZB5lpLcRYUHhmoq4U0B4SkY0VsUCxhX+67O7RSw=)
                          2: A4DF63AA9E1B11E9AE66905DC4F9AE02.roa (hash: 4WHPjB+m4yRCXMy3983Y9jSkNEd4vDiMQ+e+khb3JCk=)
                          3: A44F5CE29E1B11E9AE66905DC4F9AE02.roa (hash: v/1JOuF1wbI90UcR7urzQr8Y5tNoqPwF+BDce/tPjb8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3616 (0xe20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974
        Validity
            Not Before: Jan 31 17:44:47 2025 GMT
            Not After : Feb  7 17:44:46 2025 GMT
        Subject: CN=679d0c0f-99ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:ec:8b:08:1c:17:ea:be:12:1e:fb:94:a5:
                    b5:f4:fa:48:70:8a:0e:42:b0:dd:55:8b:c7:38:ef:
                    c9:8e:aa:e1:02:08:c2:1b:7a:ab:fd:f8:a5:90:55:
                    63:b0:0d:18:c7:37:fe:5e:87:9e:5e:57:0e:13:c5:
                    ba:3a:3c:fb:cb:9e:c4:7a:e0:90:7f:4c:2f:ac:86:
                    c7:07:71:a2:14:6d:cd:08:c9:d7:3d:95:ce:ce:78:
                    39:d6:94:27:3f:d8:96:5f:31:e3:47:18:dc:b8:b1:
                    b5:51:ae:ae:99:81:46:ff:e7:89:83:7c:4b:14:24:
                    5f:55:50:87:50:ba:d7:e0:20:1f:56:22:2a:43:56:
                    24:d6:29:e2:9f:83:51:fc:90:4d:9a:8b:d0:86:76:
                    16:ab:d5:23:fb:76:27:30:c1:13:8f:e3:14:0b:40:
                    ed:a3:db:8c:4b:ce:7a:72:05:03:66:15:da:d4:8a:
                    f2:0b:a3:54:a2:b1:55:a8:e6:f4:28:07:e3:bc:c2:
                    27:c5:b9:4e:ee:90:28:49:ac:45:16:b2:7a:82:61:
                    e8:93:d3:3c:08:2e:52:66:dd:ab:32:24:d2:43:9e:
                    0f:ac:b4:d8:b3:a4:21:14:37:09:54:f3:80:b3:61:
                    50:85:88:61:6a:58:c2:a5:34:85:b1:03:95:88:a5:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:80:C7:95:9A:D3:A4:DC:D4:67:03:98:5A:9D:02:78:23:BE:82
            X509v3 Authority Key Identifier:
                keyid:F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:10:4e:eb:45:65:64:4c:88:a9:cc:ae:3a:47:78:1e:a4:2f:
         03:65:46:92:02:c5:2d:97:05:69:93:d1:fa:0a:e6:c9:b7:31:
         b5:4b:12:e0:60:3d:c2:0f:09:19:4e:7f:36:51:55:09:ca:a1:
         ee:ff:a9:c9:38:85:7b:a4:f8:7a:f5:6f:1d:f9:f9:0b:e8:39:
         42:c2:d4:92:ad:60:2c:a1:53:d2:72:77:eb:96:6e:4a:04:d4:
         8c:4c:0e:43:49:21:a8:98:19:42:57:07:8a:36:53:74:84:c9:
         26:db:3e:65:6d:00:fb:eb:b7:57:c3:eb:32:6e:2c:22:82:e2:
         f4:cf:33:7c:1b:4b:e0:76:3f:84:0c:1f:c1:db:da:40:f1:0c:
         c4:c3:d1:3a:a2:ef:78:23:1d:60:42:e9:fd:d5:1a:36:d2:17:
         6c:89:06:5b:7d:83:b2:de:ac:01:9a:9a:02:25:22:e1:c1:59:
         ef:d4:da:b8:0b:19:61:5f:b6:e8:61:b0:19:fc:6a:2d:7b:63:
         ca:de:52:5a:5b:92:c6:67:73:a5:88:10:f8:51:82:95:51:98:
         d1:bb:c4:cc:34:91:55:e9:39:25:67:57:42:95:31:de:84:46:
         40:c8:47:29:43:af:ce:fc:6f:97:ca:b6:46:53:53:47:9a:8f:
         27:8d:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:40 2025 by rpki-client