Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
File:                     r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json)
Hash identifier:          FTl2vM5cgS/jNCiwgxzOYy9EyG21OofcKcfcgLWv9X4=
Subject key identifier:   44:F2:BF:94:DA:BF:2B:D4:AB:49:29:38:75:49:E8:70:2E:C7:8E:FB
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Certificate issuer:       /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial:       03AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
Manifest number:          039D
Signing time:             Fri 31 Jan 2025 00:54:06 +0000
Manifest this update:     Fri 31 Jan 2025 00:54:06 +0000
Manifest next update:     Fri 07 Feb 2025 00:54:06 +0000
Files and hashes:         1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: GxTjfB55gGO5MsX8tQE7FV8jUv3T3iQbYv0aUybEcRQ=)
                          2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: K3rDHWPEAJEer2ozScBARYUC6OZeQAKfAz9YzKjyZUE=)
                          3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: SQTlYtZWBprTsXZg4y/agCbXu15OoonPVSUB6W+3pMo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Validity
            Not Before: Jan 31 00:54:06 2025 GMT
            Not After : Feb  7 00:54:06 2025 GMT
        Subject: CN=679c1f2e-5634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:04:51:fb:28:92:21:8b:d6:a1:91:6e:21:bd:
                    d9:67:af:68:b9:b4:12:60:3b:ab:db:05:2d:c0:d6:
                    ab:e4:59:f8:93:9d:a0:b8:60:ca:15:17:47:b2:8a:
                    6d:94:10:18:b7:76:78:4b:8b:2c:01:fd:08:82:c4:
                    75:06:93:22:d7:2e:ae:2d:0b:17:1d:71:02:62:19:
                    f9:40:ba:2f:8e:0f:f7:49:4b:05:8b:2d:86:35:24:
                    b1:f0:80:6d:d2:12:51:12:81:92:f6:c8:8c:89:56:
                    b6:16:98:dc:14:b5:ea:fc:94:c6:dd:40:33:60:20:
                    26:f1:da:cf:52:f4:97:4d:e0:e2:92:95:44:7e:23:
                    36:96:e2:64:d9:ef:df:3f:5e:4e:ad:71:63:e0:31:
                    53:e1:fb:ea:e5:5a:75:0a:ef:60:86:0e:34:6e:83:
                    cd:b0:b6:8f:1d:80:b8:bf:a4:d2:e8:52:0c:92:de:
                    1d:37:97:eb:68:33:bf:85:72:51:11:8c:66:24:a2:
                    f4:58:0b:5f:31:5d:f2:b9:83:66:ce:e7:a3:02:df:
                    3d:b2:cb:e5:04:7d:ed:9b:16:b9:54:88:9f:56:98:
                    0e:1b:89:12:a1:a9:0c:6d:8d:24:ef:cc:0b:27:c8:
                    78:97:d8:aa:2b:8e:fe:ff:eb:fc:c6:ad:93:66:ec:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F2:BF:94:DA:BF:2B:D4:AB:49:29:38:75:49:E8:70:2E:C7:8E:FB
            X509v3 Authority Key Identifier:
                keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:04:15:59:0f:29:98:02:2d:04:5c:3d:a2:87:6a:ee:17:
         fc:4e:59:9e:38:9a:16:3f:50:53:5f:89:9f:4b:13:5c:a6:dc:
         6f:36:49:32:aa:23:f9:ed:f4:da:1f:3f:88:77:12:eb:97:38:
         e9:e1:0d:2a:33:a3:49:f4:fc:26:61:dd:7f:94:58:73:ee:ec:
         38:6b:c8:7a:89:5e:fc:80:8d:a8:96:08:61:b9:47:4e:52:cb:
         22:ca:0d:3a:f8:b0:2a:b6:4b:67:db:0a:a9:8a:27:5a:5b:ac:
         70:18:57:10:35:69:2e:19:86:b3:bf:8e:4b:06:9b:77:c5:b5:
         26:b7:0a:6b:20:3f:35:d5:77:e8:f4:29:91:cb:8d:22:2d:51:
         28:b2:c6:a1:78:75:1b:71:90:33:ae:24:c7:9e:45:2f:a4:9d:
         a9:ca:e1:2a:64:12:a9:bd:bd:84:2e:49:71:d8:2b:7d:5b:08:
         ef:be:70:16:c6:51:23:87:82:0f:24:74:92:a7:1b:15:e4:2d:
         b4:79:a7:cf:69:71:38:1a:ff:00:09:e2:94:c3:f3:5a:b7:c5:
         61:19:cd:45:0a:be:05:b2:e3:f3:5a:18:30:44:83:71:94:3e:
         3f:1c:96:6f:93:4b:21:dd:91:20:74:26:1a:68:f6:18:b4:b6:
         47:d4:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:51:55 2025 by rpki-client