Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
File:                     E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json)
Hash identifier:          4pVNorMyHrkK/SGRPsFGpLm41vO1xSzV1WOW8YVHlas=
Subject key identifier:   A2:F3:6B:BD:B8:C7:BC:8C:D4:BF:9D:2D:6C:46:A7:0B:D6:F9:E0:D2
Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38
Certificate issuer:       /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638
Certificate serial:       052B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
Manifest number:          0526
Signing time:             Thu 30 Jan 2025 23:35:03 +0000
Manifest this update:     Thu 30 Jan 2025 23:35:02 +0000
Manifest next update:     Thu 06 Feb 2025 23:35:02 +0000
Files and hashes:         1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: I10SuTTV7NUfzBUhxkRcBp/IkS1yxoLSKpIVKXHkMXg=)
                          2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: weE5Vxa+vgD5J5vHyy3fH69Amz9pD8FlnRPiDR0K214=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638
        Validity
            Not Before: Jan 30 23:35:02 2025 GMT
            Not After : Feb  6 23:35:02 2025 GMT
        Subject: CN=679c0ca6-4643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:99:a0:ed:a4:ab:31:2c:66:d8:51:bd:e6:
                    f1:0e:fa:e3:0d:71:8c:0e:22:5c:f0:b2:63:2d:f0:
                    aa:49:b3:6d:b4:b3:47:9b:35:ef:d6:bf:01:51:37:
                    3b:81:20:34:51:49:35:cf:74:dd:84:88:87:0c:39:
                    b8:1d:cd:e0:ba:0b:be:78:49:88:c5:aa:de:52:90:
                    91:1b:0d:19:87:4c:6d:0d:29:2a:c9:34:7a:a3:26:
                    aa:1d:57:e8:ac:ea:da:7e:bd:05:e2:c3:1d:ee:a0:
                    20:94:a7:88:6c:f0:12:cf:03:64:bd:35:06:f7:97:
                    6b:d3:f1:07:5d:db:5b:b7:b5:ee:3c:b2:d5:1b:27:
                    4b:9d:ee:d2:8e:b5:31:fc:7a:a2:28:7b:be:d2:72:
                    eb:26:68:b8:e2:f2:32:75:12:0b:b1:2f:13:b3:45:
                    da:8e:71:57:68:e0:27:8b:dc:ce:cd:5b:54:80:f7:
                    c9:9b:c3:e2:4f:bd:59:04:33:d2:b9:25:94:bf:40:
                    e9:3f:6b:17:c0:ee:06:22:15:96:5a:f2:a4:c3:a5:
                    cf:57:f2:60:a6:cd:c3:13:fe:37:60:82:e2:b0:4c:
                    9e:aa:fa:e2:64:4b:a6:bc:27:11:4c:78:b5:86:5a:
                    32:49:e5:9c:f2:45:c7:ce:6b:64:d4:6c:8a:f3:d6:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F3:6B:BD:B8:C7:BC:8C:D4:BF:9D:2D:6C:46:A7:0B:D6:F9:E0:D2
            X509v3 Authority Key Identifier:
                keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4f:82:a1:e2:17:b9:43:2b:c8:a1:35:ae:a7:31:d0:03:95:
         15:42:91:d5:de:2a:19:86:a2:a1:34:e0:fa:9d:47:da:2a:36:
         bc:1f:aa:ae:5d:76:8b:18:55:ab:49:00:00:85:84:ae:a9:0c:
         eb:8c:e1:55:7a:b4:27:6f:00:83:43:1d:54:ab:02:30:9b:f6:
         26:81:5a:74:b9:42:f8:be:b7:73:74:6e:c8:0c:dc:ea:14:e5:
         d7:ae:0c:f5:f3:41:49:c7:e0:dd:88:2f:5f:a3:4e:5f:8b:8f:
         d6:42:1b:c6:2e:81:30:f8:85:a5:76:b2:9c:7f:bd:bf:3b:a8:
         db:38:8e:52:45:f2:ae:02:21:28:0e:8b:e7:73:c6:6b:b6:46:
         a9:ec:74:a8:7e:ff:e9:39:7a:36:06:c5:a4:0a:de:25:c8:10:
         ad:1f:0c:82:8d:6c:52:24:72:d4:fd:25:ef:16:13:f0:a2:58:
         71:93:ad:c3:98:45:3b:39:95:8c:86:02:2f:8a:1f:0f:2e:1a:
         be:31:41:98:69:8d:1c:33:6d:8e:69:ee:a3:61:0b:ae:80:98:
         1a:e6:b7:70:c0:02:60:6f:60:92:02:12:7d:36:58:22:33:6a:
         db:b3:3b:54:bb:4a:31:51:85:05:38:a5:8a:e4:fd:7e:4b:fd:
         da:c8:58:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:43:09 2025 by rpki-client