Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
File:                     UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft (raw, json)
Hash identifier:          2fjQOrTGb882yovlwd/pXCeJVxSIl8Gtbm/JQbKj4b0=
Subject key identifier:   47:CC:BA:64:96:62:EF:3D:29:A6:7B:AC:5A:AF:79:CE:C7:96:7D:A3
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
Manifest number:          89
Signing time:             Fri 31 Jan 2025 05:37:48 +0000
Manifest this update:     Fri 31 Jan 2025 05:37:47 +0000
Manifest next update:     Fri 07 Feb 2025 05:37:47 +0000
Files and hashes:         1: UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl (hash: WnykDdDbQbWZJYvtWupnF2EF2PzfXP5dgoQFKAWb7u0=)
                          2: 18141426114211EFA0FF3956C4F9AE02.roa (hash: wOKkXFecaGXCjByRcpDkGbc7Cdo2VuRpcxeBnTZ+uS0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Validity
            Not Before: Jan 31 05:37:47 2025 GMT
            Not After : Feb  7 05:37:47 2025 GMT
        Subject: CN=679c61ac-788d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:30:01:85:a9:46:80:c0:7b:db:61:48:51:f8:
                    08:ab:a0:b9:6f:7d:05:74:be:6e:f0:ef:6f:cf:d7:
                    36:20:a4:b6:d1:1a:d8:a8:b0:6e:a6:df:04:46:c2:
                    d7:b1:93:08:f4:bc:f6:78:67:64:8e:83:e8:bf:b1:
                    6f:04:be:cc:44:45:17:2c:d0:fa:e9:ec:f9:98:8c:
                    70:4b:58:a6:7b:55:bb:2d:6f:21:69:0a:e6:90:f4:
                    87:27:ff:26:3e:a9:fb:39:ed:5d:7b:f6:75:cc:42:
                    f0:27:ca:67:23:65:ff:91:8d:d3:32:a9:85:e6:bb:
                    89:f7:82:17:07:2e:56:17:1a:8c:54:c9:23:0a:a9:
                    c9:c5:4d:4a:7a:0b:56:00:59:c2:4a:6c:ac:15:9c:
                    04:8e:cf:ba:07:e9:b1:8d:4c:03:c4:47:16:02:56:
                    bd:ea:6b:40:b5:b5:c8:13:2d:02:3b:1d:91:3c:b5:
                    e1:7d:73:a2:ef:ef:f8:72:87:61:61:d3:77:c1:fb:
                    ae:70:52:85:06:9c:31:55:d0:87:dd:cd:f4:93:d9:
                    41:58:15:40:0c:2a:94:fc:3e:61:bc:ab:65:22:4e:
                    dd:03:e4:33:bc:ac:03:2f:79:f1:d6:bb:f8:9c:33:
                    01:6a:6b:61:51:9f:81:1f:26:58:c5:82:ec:85:14:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CC:BA:64:96:62:EF:3D:29:A6:7B:AC:5A:AF:79:CE:C7:96:7D:A3
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:17:f2:77:18:64:8f:89:8d:58:16:88:af:92:4e:f0:f6:
         09:5d:b7:e1:35:16:c5:41:95:70:6e:9d:e3:e7:91:91:e7:a5:
         69:74:da:71:0d:cc:5e:2c:75:6c:c6:5a:10:25:51:a5:ed:f6:
         f6:cf:ab:4a:82:ee:84:ad:c2:40:76:d2:07:a8:a9:c3:b4:be:
         9b:7d:44:f5:98:1b:87:72:d0:9c:0c:d0:8d:0c:e2:4c:71:9f:
         a6:81:49:b4:a8:95:dd:f0:49:2c:e4:73:c5:db:db:f7:51:48:
         83:04:d6:6e:cc:7c:7f:4f:5f:d0:07:04:d5:40:ad:d2:50:69:
         d4:14:63:38:4d:f1:a5:55:b6:da:f2:63:e3:d6:51:90:2e:c4:
         6f:70:a4:cd:36:64:51:17:b8:98:8b:bf:51:f3:20:70:7e:d5:
         8e:ef:0f:04:25:de:cf:0b:3a:7d:39:9c:b9:d6:be:29:fa:7a:
         34:23:33:1f:c1:33:da:c6:1d:98:b4:9e:0b:06:fc:32:01:b8:
         bc:d6:5c:e2:3c:44:a3:5a:0b:4e:64:15:e5:61:d0:42:12:c3:
         69:7d:46:9e:3a:7f:3e:50:99:d1:66:96:a4:44:33:ca:74:53:
         c2:18:f3:6a:b2:71:d6:62:5b:7d:64:c3:6c:4c:54:65:98:39:
         36:4d:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:11 2025 by rpki-client