Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
File:                     y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json)
Hash identifier:          5rtSdiOQeAh12cu7oGfPGJYSq1Vj8C7vGdQKcC0PPo8=
Subject key identifier:   36:D1:7C:F2:D7:01:9C:C3:E8:F9:2E:F3:16:5A:A0:37:E0:32:92:3A
Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E
Certificate issuer:       /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
Manifest number:          D7
Signing time:             Fri 31 Jan 2025 04:48:30 +0000
Manifest this update:     Fri 31 Jan 2025 04:48:30 +0000
Manifest next update:     Fri 07 Feb 2025 04:48:30 +0000
Files and hashes:         1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: 6wehK5NycV/S7MTIlonHS1leefmZN8EvEJqz3Q41pzg=)
                          2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: IW3Bfd+rgSMou5rI1BSeIMiI4ri0dwNjsPZefW1j9aA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
        Validity
            Not Before: Jan 31 04:48:30 2025 GMT
            Not After : Feb  7 04:48:30 2025 GMT
        Subject: CN=679c561e-2754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4a:82:e1:81:44:66:21:0f:09:85:4e:98:51:
                    6e:db:90:a1:96:f7:8d:85:73:45:aa:2e:25:4f:df:
                    ba:b0:42:ea:43:63:36:a1:58:48:97:65:e3:9b:2c:
                    23:c9:db:5f:19:93:3e:99:2b:c6:c6:88:15:d3:fd:
                    7b:f0:e5:df:5b:8a:9b:5f:b2:8c:61:5b:5e:2e:99:
                    41:cd:f7:43:ac:c2:d3:10:a7:c7:06:45:0a:d0:a8:
                    c4:5d:ec:af:eb:5d:48:1f:50:96:85:ee:b1:45:09:
                    aa:5a:9b:a1:b4:49:a3:a0:d9:ee:78:3a:0a:8e:aa:
                    29:0a:d5:6d:af:43:4d:e6:00:87:3d:94:5d:15:84:
                    d7:97:ad:ca:6a:bd:da:19:f8:df:64:bc:0e:a2:c6:
                    50:35:d0:5f:37:31:c0:75:52:de:ee:77:df:73:fc:
                    0f:6d:ea:13:a4:43:75:b6:8f:52:b9:08:03:ac:63:
                    73:25:a5:f3:57:70:2a:a3:5f:ee:53:4f:d8:1f:d9:
                    2c:02:44:10:b4:05:7d:46:51:ee:da:4a:d9:9a:6b:
                    a0:85:57:f3:79:ba:42:97:51:55:e7:5d:b3:ec:a1:
                    3d:aa:af:5f:b4:9f:39:ab:23:3f:27:69:ef:cd:a5:
                    20:93:36:57:1f:fd:05:bd:33:b5:f6:95:f2:d8:31:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D1:7C:F2:D7:01:9C:C3:E8:F9:2E:F3:16:5A:A0:37:E0:32:92:3A
            X509v3 Authority Key Identifier:
                keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:0f:5a:c8:64:1b:d0:10:b8:fa:9f:b3:93:99:bc:eb:5f:62:
         ec:69:30:e1:f3:8c:2e:23:fc:0c:1e:0d:5d:bc:44:df:f6:fa:
         6f:3a:3b:b3:cc:f1:6f:73:47:89:50:12:46:52:a6:8f:e9:11:
         46:81:07:c2:69:a6:c7:8f:30:e8:91:38:64:28:29:28:03:04:
         ff:11:15:40:03:88:16:5a:eb:38:36:c3:69:02:2e:cc:60:6a:
         91:1b:03:fb:2a:0c:c4:ed:33:0f:ee:29:83:99:07:18:d9:6a:
         ea:c7:49:a4:2f:46:ba:07:dd:1f:97:d9:90:d2:58:b1:28:c4:
         8b:c0:1b:f5:d6:fb:c2:d9:1a:7d:d4:ba:43:ac:ac:cb:5f:40:
         0b:6f:ec:ab:67:e8:db:9a:1b:88:43:d5:50:29:1a:44:87:a6:
         66:b3:2e:a9:55:2b:9e:2d:ff:5b:96:e8:69:15:78:70:15:02:
         fa:c6:72:07:13:b5:8d:a3:77:73:7d:35:2e:cb:93:c7:07:54:
         ab:55:67:d2:5d:06:c5:0e:d8:b0:dd:6a:e5:92:00:47:2a:2b:
         bd:8b:57:9d:82:0b:22:a8:a5:4b:36:ca:8a:a9:f6:15:ba:d6:
         48:4d:33:a5:64:c9:5d:22:c3:19:5f:96:8e:e5:f2:78:e9:a4:
         61:61:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:52 2025 by rpki-client