Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
File:                     hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json)
Hash identifier:          Ii7MOML8AU2CXULa6yXq0s1p04huFdH0S0LVO7LE5bY=
Subject key identifier:   39:E2:3E:18:16:24:CB:31:5B:10:19:8E:53:9A:7D:F2:F0:E8:05:AA
Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
Certificate issuer:       /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
Manifest number:          0E
Signing time:             Fri 31 Jan 2025 07:08:34 +0000
Manifest this update:     Fri 31 Jan 2025 07:08:34 +0000
Manifest next update:     Fri 07 Feb 2025 07:08:34 +0000
Files and hashes:         1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: qswzbc/NLEmiLb7SGRs0/1v67cGbONwrXgPoLHvXjR8=)
                          2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: JjAbZf5k619HY4BxA5a3XYqwkE4mZ8Dpr0cRyMIFTZI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07
        Validity
            Not Before: Jan 31 07:08:34 2025 GMT
            Not After : Feb  7 07:08:34 2025 GMT
        Subject: CN=679c76f2-336f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:23:71:0e:6c:7b:ba:d7:2c:12:91:d8:65:
                    90:9b:5b:f2:7b:26:94:d3:d4:fd:16:98:47:19:a4:
                    2f:d3:1a:5a:06:f4:f5:e4:62:f3:43:89:96:8a:42:
                    bf:0c:59:8f:94:a6:91:bc:38:91:53:37:4a:82:c4:
                    07:bc:98:8f:a4:76:0c:0b:a8:e9:b8:a8:ef:66:49:
                    f2:9c:3b:e8:7a:c1:04:57:ed:7a:09:50:db:22:93:
                    b5:a4:4c:0b:ed:91:e3:da:cf:99:c9:da:b3:48:34:
                    a1:9e:1a:00:60:65:8e:38:6a:0b:02:ea:cb:81:96:
                    7e:d2:41:a6:53:eb:b0:dd:04:fd:53:05:65:ad:41:
                    75:19:a1:d0:e7:8b:14:98:fa:c7:cb:3a:bf:42:fe:
                    8b:7f:c8:c7:9d:1a:61:72:46:da:97:7a:2c:cc:99:
                    ee:89:e8:be:fd:7c:65:c0:d4:99:d7:69:2e:23:64:
                    70:da:96:68:a1:89:54:89:b9:8e:e8:dd:58:d0:b4:
                    f1:f6:8f:bb:57:d7:4b:8e:9a:50:a8:47:78:b4:d2:
                    97:35:37:f2:95:61:41:b5:72:f2:e4:39:a1:c8:aa:
                    e0:01:41:97:30:78:f2:2c:f0:91:ad:3a:aa:e7:e7:
                    b6:f1:db:76:40:f6:12:02:5a:f0:83:df:1a:51:ee:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E2:3E:18:16:24:CB:31:5B:10:19:8E:53:9A:7D:F2:F0:E8:05:AA
            X509v3 Authority Key Identifier:
                keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:14:51:d2:4c:96:fa:48:ca:1a:d4:20:62:52:e1:89:61:22:
         78:9a:c6:79:52:4e:38:7a:74:da:ca:7d:98:5c:82:0c:98:58:
         4a:52:95:49:91:bb:10:f4:0f:89:f4:37:7a:bf:b0:2b:f4:28:
         05:fb:1f:12:fc:ee:f9:56:40:2e:c7:38:e6:8a:72:d5:89:6a:
         b0:1e:18:6e:e9:0b:b3:6e:ee:d2:00:fd:2f:41:ab:4c:c0:c5:
         d4:28:05:1c:68:29:60:cd:30:d2:07:c9:86:9c:21:fb:43:73:
         c3:e2:40:fb:6a:68:a5:3b:06:99:b8:e7:9b:bb:09:5b:a7:54:
         b9:c6:98:6d:c3:6d:d5:8b:ef:4f:03:6c:56:93:22:8b:be:12:
         65:59:45:51:74:89:02:4a:b3:a3:b0:6d:33:4f:01:04:4f:e5:
         a9:e6:f9:90:d3:3c:b2:4f:5f:95:2e:44:3c:1f:ef:9b:49:93:
         e5:46:7b:9a:fe:e8:6d:8a:cb:c8:54:e3:ce:f1:3e:2c:f7:d5:
         0f:57:d9:a0:e3:f1:ce:0b:5e:55:02:4f:fd:79:2b:91:ed:11:
         c9:b4:99:92:df:0b:d7:3a:30:58:97:f6:19:be:f6:b2:ea:ce:
         e2:ec:07:b0:6f:7b:f2:2f:b6:4d:4f:8e:f1:fe:3d:b2:37:32:
         cf:d5:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:47 2025 by rpki-client