Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
File:                     zFYVfHLcxpczY2dD21AIdZMtpB8.mft (raw, json)
Hash identifier:          a9zR+MlyY4hxa7lCXrc/Z/ItoXCY14P8tRCUNo2+DSk=
Subject key identifier:   26:FC:D3:55:30:03:32:C8:84:96:67:3B:2A:9E:CC:11:64:EC:7F:E3
Authority key identifier: CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F
Certificate issuer:       /CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F
Certificate serial:       05E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
Manifest number:          05E3
Signing time:             Thu 30 Jan 2025 22:58:39 +0000
Manifest this update:     Thu 30 Jan 2025 22:58:38 +0000
Manifest next update:     Thu 06 Feb 2025 22:58:38 +0000
Files and hashes:         1: zFYVfHLcxpczY2dD21AIdZMtpB8.crl (hash: Z9LSzYG9o6a1l+KGeU9PT2WCKMSJG3zU8h91dOociJg=)
                          2: A210E7309CAB11EBAB87D43AC4F9AE02.roa (hash: G4Iff29ujs2wSeu37iPDIUnNuvGFMJft5LK0116SXEs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F
        Validity
            Not Before: Jan 30 22:58:38 2025 GMT
            Not After : Feb  6 22:58:38 2025 GMT
        Subject: CN=679c041e-dcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:96:6c:99:ce:01:bf:d4:86:b8:76:05:fe:
                    77:1f:d5:42:4d:05:7d:bd:07:8e:ad:a2:bf:33:c4:
                    a5:88:e7:60:29:07:a1:da:e6:02:fa:a9:95:7f:c5:
                    13:df:b0:fc:7b:e3:96:e1:45:d3:e9:bf:82:f9:9c:
                    c4:df:fe:15:02:c0:53:7b:1d:4c:8d:2a:77:2a:60:
                    42:fa:f9:4a:38:d3:e0:56:91:28:10:e0:1a:64:a2:
                    4b:f8:0f:b7:9e:e2:00:60:67:e2:85:f1:1a:1d:bf:
                    3d:98:69:52:ab:53:ee:95:53:52:34:59:fd:44:aa:
                    4b:b9:6c:2e:fa:3d:b5:cf:04:c4:91:4d:1f:7f:9e:
                    68:11:fe:6d:1d:04:fa:8f:da:1a:39:a2:e7:a2:ea:
                    7f:ac:3c:c6:4e:ab:86:02:00:99:3b:60:0c:f0:db:
                    f8:2b:81:00:8f:b7:d5:b2:5d:06:cc:d4:e9:15:05:
                    10:7b:80:10:bf:eb:eb:55:76:e9:bc:3b:76:df:da:
                    82:ef:f5:00:63:5e:86:fe:a6:9d:8b:61:fe:3c:c8:
                    10:4e:b2:47:69:1b:9a:2e:16:d1:fc:d4:89:b1:66:
                    d8:22:e1:08:12:ab:9b:e1:db:d3:5a:3b:98:a0:44:
                    28:12:84:bc:64:08:01:de:c5:a9:8a:17:c3:1c:19:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FC:D3:55:30:03:32:C8:84:96:67:3B:2A:9E:CC:11:64:EC:7F:E3
            X509v3 Authority Key Identifier:
                keyid:CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:ec:31:83:32:c3:8d:20:9d:14:ac:95:0a:aa:cf:04:c8:
         92:11:f4:ec:18:c7:99:99:69:8e:bf:6d:7e:30:f8:e6:21:f6:
         56:b5:f4:16:98:6c:e2:66:6f:f5:5c:0e:7a:22:86:e4:31:69:
         91:5c:90:aa:e1:e0:86:64:f5:a7:04:c2:b7:fb:c6:af:4e:fe:
         8d:bf:e8:02:03:b3:58:d1:31:7a:0a:9e:0f:0b:61:42:4e:0e:
         9d:44:17:75:8a:56:5f:1d:7c:d4:84:af:90:02:cb:5b:ed:52:
         4b:8f:bf:b7:15:da:f8:25:16:b9:57:cc:ac:9b:b8:0f:64:67:
         b3:38:33:52:50:3e:ed:d5:fa:45:ad:af:18:75:38:2f:5c:3d:
         27:de:85:98:12:02:b2:b8:87:79:b2:a9:7a:0b:ef:ba:d7:28:
         c7:f7:67:a2:23:ff:b9:20:17:cf:fa:bc:92:59:5b:1d:62:4f:
         f2:39:d7:30:14:70:1a:2e:1d:5b:37:ba:4a:e6:07:be:01:68:
         fc:65:74:04:7a:41:ee:e9:f4:28:bf:60:44:3b:92:55:37:5d:
         bc:4e:44:2b:25:04:5c:7d:92:fd:82:0c:2b:d1:2e:93:06:40:
         7f:e0:7c:88:45:43:21:a1:0d:ef:52:19:c5:b5:fb:de:0d:7c:
         a3:07:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:55 2025 by rpki-client