Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File:                     jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier:          Xrr758CcB06nf4JfsHzzySQVqr68Rx7iriWMDYdj5uM=
Subject key identifier:   29:37:57:B8:60:F8:38:B6:E9:7A:48:4B:52:D5:12:B0:C2:85:48:15
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer:       /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial:       09F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number:          09F0
Signing time:             Thu 30 Jan 2025 19:59:34 +0000
Manifest this update:     Thu 30 Jan 2025 19:59:34 +0000
Manifest next update:     Thu 06 Feb 2025 19:59:34 +0000
Files and hashes:         1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: JL6McmXNV+q6VKh3QsF5ZcnmM94p6PC+UJbknqejsd4=)
                          2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: EkYTFmKjanasajMVGUVTZ322q1F+k60qJOC2SSq8q9Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553 (0x9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
        Validity
            Not Before: Jan 30 19:59:34 2025 GMT
            Not After : Feb  6 19:59:34 2025 GMT
        Subject: CN=679bda26-ce10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:04:f6:64:b6:bd:70:e8:57:ed:ea:df:f6:
                    82:04:f6:6b:37:57:fb:ca:a9:18:b9:d0:9e:97:3a:
                    bd:25:b9:1b:09:c7:4d:6c:03:85:5a:a4:a5:e8:0c:
                    7c:61:37:9d:90:c8:72:bd:a6:33:27:4e:b6:3b:85:
                    65:10:38:d0:20:27:e0:8e:e4:29:e3:95:25:32:e2:
                    6a:44:25:be:0c:63:88:93:60:fa:d2:0a:d8:37:8a:
                    c5:53:b4:fb:24:7a:16:ca:a3:e0:4c:b7:bb:c7:71:
                    88:a2:ab:94:40:fd:19:62:14:b7:b1:a4:95:13:bb:
                    f9:ac:5a:70:a6:38:28:aa:9c:22:ef:a8:02:ba:d5:
                    d9:d6:ca:2c:61:0f:30:8e:4e:18:11:28:b6:33:de:
                    5b:ed:58:e8:ae:a3:5f:39:af:74:e0:27:fe:32:62:
                    a2:4f:15:95:92:03:54:f8:ad:1d:6d:a6:2e:f7:a0:
                    78:3a:05:c5:5c:76:4a:38:62:f1:5a:f4:dd:ce:7d:
                    a4:81:95:36:a2:9b:fe:0b:99:21:13:7b:f4:f3:ac:
                    39:2e:35:79:21:c1:0c:f4:cb:2b:3c:36:68:23:9e:
                    ab:b3:a7:ec:ad:5c:12:29:e9:9f:a9:0c:cd:80:9a:
                    91:1c:24:d6:d9:be:f4:bc:35:b5:3e:e0:e5:91:89:
                    f6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:37:57:B8:60:F8:38:B6:E9:7A:48:4B:52:D5:12:B0:C2:85:48:15
            X509v3 Authority Key Identifier:
                keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:e2:14:b0:6d:fc:0d:33:30:d6:f7:6d:14:59:0e:6f:c4:66:
         7c:c8:fd:62:c5:90:67:66:a6:cb:9d:41:6b:30:e1:b5:e5:a7:
         d4:63:dd:20:f9:79:ba:de:07:c1:90:11:e7:7a:2b:c9:b3:1b:
         63:50:07:85:f0:7f:db:89:71:22:cd:5e:22:24:f7:49:9f:4d:
         c3:e9:cc:b3:6a:ae:63:af:8a:f4:66:06:34:15:f3:ea:ec:a5:
         c9:2d:fd:50:ba:eb:25:64:4e:94:f6:8c:a0:30:ce:a5:39:3d:
         f6:8b:81:3d:7f:33:87:87:cd:ef:48:b7:7d:e1:b9:8f:d1:89:
         ca:cc:1d:16:67:8a:77:d5:a5:bb:11:4f:07:35:3f:15:60:e6:
         1f:cf:3b:ce:8b:ad:0a:f8:f1:76:67:52:ae:fe:d6:47:c4:6a:
         68:bf:b4:1e:06:f2:70:0a:88:02:4c:46:41:19:7e:e3:3d:4a:
         46:88:da:96:fa:78:02:49:bf:b0:b2:d7:ff:cc:50:ae:63:b0:
         a0:a2:36:79:93:7a:ba:d7:87:d9:ef:f8:75:76:71:c7:b6:2e:
         10:08:b6:a6:5c:f6:63:90:06:d6:20:92:58:21:88:a3:03:77:
         da:3b:a3:65:42:42:8f:86:c4:1e:f6:e1:dd:06:54:3b:50:49:
         60:6a:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:58 2025 by rpki-client