Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File:                     e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier:          FJwGDh3IDuU1tKsJnqLHBOEq2uU575imSYxSYcjOuXM=
Subject key identifier:   4B:D0:81:1A:B5:48:D1:5E:A7:E8:DA:F2:9D:FF:3E:A3:23:46:CB:4E
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer:       /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial:       0C8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number:          0C6F
Signing time:             Fri 31 Jan 2025 18:12:02 +0000
Manifest this update:     Fri 31 Jan 2025 18:12:01 +0000
Manifest next update:     Fri 07 Feb 2025 18:12:01 +0000
Files and hashes:         1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: Iwj6ylz4NYf8nMolvF9tIpKOOQjOUjXJw94PInZUvHM=)
                          2: CD5B717E8AB811EDA3D4ED68C4F9AE02.roa (hash: cc4xEkzmPplrvuvQVB8ipaoQWHBomyeNauJ9KbdVDzY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3210 (0xc8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
        Validity
            Not Before: Jan 31 18:12:01 2025 GMT
            Not After : Feb  7 18:12:01 2025 GMT
        Subject: CN=679d1271-5766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:c3:d1:4f:93:7c:e8:c6:f7:a5:58:24:29:
                    81:84:8b:a2:d5:17:26:80:d3:62:10:6c:45:b2:3e:
                    f0:01:a4:29:a5:95:e9:4a:0b:c2:f5:13:a6:af:3b:
                    ae:fd:80:eb:fc:83:f4:b2:e9:f8:d2:a6:61:a2:37:
                    59:3c:10:58:c1:82:b8:7d:0d:27:ff:d5:86:fe:7d:
                    e1:e0:52:78:c4:7f:7d:e3:d8:02:ee:55:d5:d8:3e:
                    07:00:37:12:c2:e5:9d:b0:09:e2:c8:0d:ff:e3:f4:
                    08:c0:1f:f7:77:c7:84:e7:34:c1:19:01:c7:9c:d5:
                    d1:89:1d:cc:41:38:de:ca:e4:e2:29:e1:74:98:3a:
                    fc:3e:cb:c5:bf:4c:4b:c7:cd:81:64:2b:73:89:d8:
                    11:ec:e1:0f:7a:76:cd:42:9d:18:5e:11:71:a5:29:
                    53:e1:5e:e7:2d:4e:f9:04:c1:b4:c4:ae:b5:76:a4:
                    4e:9e:38:8a:a2:60:99:d9:a5:0a:a1:18:ec:56:18:
                    58:ce:2e:d4:c1:d4:b9:3e:9b:ec:6e:e1:43:f8:1a:
                    72:82:60:f9:9e:91:1c:6a:8a:f9:0b:51:34:2b:cd:
                    52:57:bc:e9:f2:62:b2:af:6b:d7:95:73:2f:8a:23:
                    9c:9e:5f:25:33:c2:b2:dc:74:64:52:40:91:df:0d:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D0:81:1A:B5:48:D1:5E:A7:E8:DA:F2:9D:FF:3E:A3:23:46:CB:4E
            X509v3 Authority Key Identifier:
                keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7e:b0:0f:c8:84:ab:16:86:38:21:af:34:51:97:0e:e5:45:
         6b:27:e8:4c:88:7e:07:00:0a:af:b6:3a:f8:c4:b8:31:24:c4:
         70:7a:d6:14:ec:36:45:f8:d4:75:26:af:4a:84:30:9d:e5:2f:
         76:01:79:58:a6:80:1d:ec:1d:16:3f:a5:cd:32:25:4f:3b:cd:
         49:1d:2e:f2:65:d6:33:eb:c9:ee:c1:3c:83:c0:69:b2:50:1d:
         e6:23:83:34:36:bd:9a:b2:78:8b:8d:16:12:f7:b5:83:53:eb:
         7c:6b:8b:6b:19:51:1f:80:91:47:f4:4e:1c:28:d8:76:b9:36:
         df:08:98:17:26:d4:b2:6c:97:c4:05:af:9d:17:45:d0:66:be:
         40:ac:2d:6c:59:1a:81:25:e8:99:39:b7:51:51:b2:3f:0c:20:
         dc:65:a1:67:1a:63:59:72:ee:6f:e7:af:62:e4:8d:6c:d6:0a:
         93:a4:17:fb:c1:83:bf:ce:cf:c9:2f:e1:2b:77:c0:4d:82:5a:
         1d:90:ad:7f:16:a4:49:6b:9c:7d:48:33:2d:94:98:64:cd:1f:
         45:63:b0:18:56:cb:ab:53:ed:30:6e:c0:6b:de:96:ee:ea:42:
         49:c3:08:62:9e:90:bc:19:09:58:fb:92:11:25:90:90:f8:48:
         1f:8e:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:54 2025 by rpki-client