Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
File:                     XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json)
Hash identifier:          ZlF6b7iIMMJkMNwoo3dNj544dAJufmRjMF/XJd9mMs0=
Subject key identifier:   C6:FA:71:34:06:27:F0:86:18:41:11:B9:3B:4F:6F:E8:25:2E:FE:37
Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07
Certificate issuer:       /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
Manifest number:          43
Signing time:             Fri 31 Jan 2025 06:27:55 +0000
Manifest this update:     Fri 31 Jan 2025 06:27:54 +0000
Manifest next update:     Fri 07 Feb 2025 06:27:54 +0000
Files and hashes:         1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: PgnxIEbYRljxslFyNQn5UoCFaGJ1LD2ARpMynRNzpdA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
        Validity
            Not Before: Jan 31 06:27:54 2025 GMT
            Not After : Feb  7 06:27:54 2025 GMT
        Subject: CN=679c6d6b-6c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:11:82:8b:5d:3f:0c:c5:15:6f:1f:83:1c:
                    cb:c7:c0:79:15:6b:e8:71:b6:cf:63:12:2c:ec:2e:
                    02:bb:a9:97:80:c9:84:b8:dd:24:8c:ea:69:55:7d:
                    d6:0d:c6:01:73:a6:42:07:68:04:f7:76:34:08:71:
                    fa:d3:93:67:82:8b:f5:20:34:7d:51:ae:e5:21:d9:
                    e6:a5:91:a5:02:4f:19:0b:17:c0:e9:a0:51:5f:52:
                    a7:19:18:43:2b:60:b7:52:8d:d4:e8:0b:aa:fc:d6:
                    65:ee:6c:2e:a8:b7:05:af:12:b3:47:bb:4c:17:d3:
                    15:83:43:aa:01:24:ab:f2:c3:00:ef:99:7f:9d:18:
                    43:4a:41:69:f5:59:33:a6:ff:8f:a4:81:e5:4a:f3:
                    37:9d:31:fb:40:e9:66:2a:19:87:dd:46:d2:71:94:
                    07:46:b2:42:fb:8f:2e:66:3d:0a:5f:68:a8:e3:44:
                    ae:7e:fe:25:57:84:29:85:a7:f4:78:f3:b6:a3:fc:
                    7f:4b:57:49:1c:5f:6d:ab:39:36:5a:10:ce:19:77:
                    57:f2:43:d5:4b:6b:fc:8f:c8:f7:26:7b:64:4b:89:
                    22:65:80:9d:3c:8d:bb:9d:7b:b3:0a:c0:da:a2:16:
                    30:8d:4b:8c:de:2f:a5:39:08:ed:31:06:cd:24:5e:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:71:34:06:27:F0:86:18:41:11:B9:3B:4F:6F:E8:25:2E:FE:37
            X509v3 Authority Key Identifier:
                keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:5a:4c:a4:f2:98:fb:30:23:14:cd:81:15:12:04:5b:c3:
         80:50:c3:15:a5:ce:95:f5:7e:ef:e0:76:c1:53:b7:c6:e1:59:
         44:d4:63:80:95:c3:07:50:45:53:b0:69:eb:9b:d3:f8:98:54:
         a0:7f:74:71:50:eb:20:cf:42:6a:19:1f:82:e1:ed:3d:ee:2a:
         fe:70:6c:1e:68:48:75:43:23:38:0d:ce:ed:94:26:19:3d:93:
         2b:9a:5b:0f:09:5f:9b:0a:7c:d0:37:69:40:ec:89:62:c1:46:
         45:15:63:75:8c:19:26:b9:f2:5d:0a:1b:74:4e:c0:c3:a2:54:
         b4:22:f9:6b:e1:17:e6:14:00:59:0d:9b:15:cd:87:cb:5c:4d:
         7a:e1:15:3b:eb:72:e2:2f:60:1b:3e:19:3e:a0:9d:ce:bb:2b:
         8a:d7:23:c0:89:75:3f:60:bf:63:f6:4d:b0:f2:8a:d0:9d:69:
         52:0c:33:28:5b:53:04:aa:d3:eb:b2:e4:90:e4:f6:5a:a9:e8:
         cc:b9:5f:02:eb:a0:6a:89:7b:3f:7e:7b:82:31:de:d6:d6:f6:
         c8:fa:60:08:95:0d:95:b0:e3:cc:49:1a:33:8f:53:82:0d:97:
         8c:83:16:a9:8e:07:71:4a:ce:12:30:00:8f:54:60:ff:34:3f:
         52:9b:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:02 2025 by rpki-client