Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File:                     gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier:          GQpPP72FofaqAmiAmXDXAPAY7fDNGbzyo2FE7Y/kDis=
Subject key identifier:   CE:DE:C4:E2:1A:2B:27:13:CE:AB:8B:E9:95:01:0C:1B:FB:95:F6:CF
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3F21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number:          3AB4
Signing time:             Fri 31 Jan 2025 14:19:54 +0000
Manifest this update:     Fri 31 Jan 2025 14:19:53 +0000
Manifest next update:     Fri 07 Feb 2025 14:19:53 +0000
Files and hashes:         1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: vwoqA/M2IJq+1XprewuE2a7VEYMCNoPr9Wy1w0JfRf0=)
                          2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: PALIyVWAsvtscgbg+sm73eiiYRuD68MSbPN0evXTaxE=)
                          3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: XIkS3fiVeDxNk75oObZc/USCn6ndycSaKmVzL41B8c0=)
                          4: CB608BD0D13311EE8B61C185C4F9AE02.roa (hash: GhiisK+xkE915yTtyPUFYsaGYRY3S2Kd3NQqsg2cf3U=)
                          5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: YU4YZ74T7xW8XI8cuLhtjNp6mdFgmcLPCumM3sCTd+o=)
                          6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: 4LrbAymfyErsiUGk8ioJ8VeDxysNk9CIt+uac7LIaSg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16161 (0x3f21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Jan 31 14:19:53 2025 GMT
            Not After : Feb  7 14:19:53 2025 GMT
        Subject: CN=679cdc0a-6490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:f0:39:1d:c5:1b:ad:95:5e:e6:e2:1c:73:
                    83:55:04:b6:29:fc:ce:10:51:60:a7:5a:e1:e3:86:
                    b3:ac:84:bc:92:81:d8:3e:f1:16:00:b8:cb:fa:55:
                    da:99:74:b3:34:3f:53:10:56:5f:06:6f:e2:c4:12:
                    7e:a7:4e:04:fd:41:68:ae:7a:1e:e8:3c:6e:04:a8:
                    fa:26:d7:91:dd:ec:2f:60:d8:4a:b3:6c:e4:b0:16:
                    5e:8c:59:97:21:3a:f9:7b:a5:38:8b:49:ec:67:4f:
                    e6:d3:94:58:f7:78:98:18:25:85:31:cd:3e:f7:aa:
                    82:88:49:7f:db:0c:3b:f2:aa:3b:1d:bf:a1:95:dc:
                    5b:c5:44:65:22:ce:10:3e:ac:67:2f:a3:93:d1:b9:
                    cd:65:bc:2b:e8:f7:b8:66:db:2b:79:d0:e2:4b:5b:
                    37:92:18:d4:1f:4f:b3:fc:b9:5d:22:b2:9c:17:b0:
                    c8:78:ab:48:43:f5:28:bd:c9:a4:f9:a9:08:9e:aa:
                    24:cb:cc:e2:5c:51:3f:21:4c:fc:81:ba:3b:fe:7f:
                    3d:0b:1a:ca:41:1f:c0:b4:02:2e:cc:c5:60:d7:31:
                    c9:99:0c:e9:85:64:19:f2:36:31:8f:c4:56:20:f3:
                    af:60:92:2c:88:f7:3f:9d:20:ba:f5:47:24:7f:90:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DE:C4:E2:1A:2B:27:13:CE:AB:8B:E9:95:01:0C:1B:FB:95:F6:CF
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:2a:43:ee:e7:19:01:21:7c:f4:29:22:d0:87:eb:0d:5f:
         91:3e:86:1c:41:e0:e5:45:32:a8:a7:c0:3a:48:7b:9f:cc:41:
         15:1d:f8:44:73:ca:90:10:ca:e0:ea:ff:ee:4d:1d:f2:5a:e7:
         4a:e6:a8:e9:4b:79:23:69:81:b9:63:4c:67:8c:f2:3a:d5:bf:
         56:a6:25:13:1a:b9:13:0e:90:38:8e:2e:e7:87:d0:23:fc:89:
         4d:a6:a3:81:80:af:f6:1b:5b:75:6f:79:56:37:f0:33:7d:84:
         87:9d:63:52:11:4e:23:48:85:4e:1f:2a:7a:09:d5:da:97:d2:
         ad:35:13:04:8c:bc:15:72:5f:12:97:b5:eb:da:78:07:ba:d8:
         71:67:de:30:a0:a1:66:0c:2c:22:bc:05:f8:42:97:8e:ec:10:
         69:c7:51:55:b5:5c:05:f1:87:ec:0b:88:59:82:5f:c9:8f:3e:
         85:70:88:54:32:f7:0a:5f:56:8c:2d:ae:c7:df:61:a9:78:41:
         c1:d6:6f:c5:6b:c3:de:85:85:db:4a:2c:e0:d8:70:0d:9e:9d:
         8d:2e:05:b0:f9:df:ee:e1:6c:8b:84:5b:8d:77:36:c6:b8:bb:
         79:df:75:19:88:e2:02:c6:1a:2d:29:a4:8e:c0:b2:1c:2f:9f:
         97:a5:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:16 2025 by rpki-client