Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
File:                     _6CVovSifKRjG8I55X56QFtFa_8.mft (raw, json)
Hash identifier:          qsS4clUSyUqv525VQ2jod0Uhow7X3iidNA+BlHZ/AOc=
Subject key identifier:   2B:82:70:DC:4A:CB:11:84:35:C9:AB:85:A1:01:4E:74:CD:24:1B:42
Authority key identifier: FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF
Certificate issuer:       /CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
Certificate serial:       056C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
Manifest number:          0564
Signing time:             Thu 30 Jan 2025 23:22:45 +0000
Manifest this update:     Thu 30 Jan 2025 23:22:44 +0000
Manifest next update:     Thu 06 Feb 2025 23:22:44 +0000
Files and hashes:         1: _6CVovSifKRjG8I55X56QFtFa_8.crl (hash: t0+K7OW4uC9SQqsMcLkT5al/KbdTi9eZEgtQHzy4dd4=)
                          2: 2F7C5A70968A11EEB50D1D33C4F9AE02.roa (hash: w8uHs5p9jLQdD4AxHv8UufSXKAGqIGZXa4ok5sdSVqc=)
                          3: C708809CD06E11EBBBC4C43DC4F9AE02.roa (hash: pZZRucXea/Bi1z2KjphqV9FqwANOK9zrGxvef1TPkDI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
        Validity
            Not Before: Jan 30 23:22:44 2025 GMT
            Not After : Feb  6 23:22:44 2025 GMT
        Subject: CN=679c09c4-02bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:71:e5:54:10:56:50:e8:e2:ee:40:ca:5e:
                    68:25:be:5b:41:f9:2a:d0:eb:99:9f:3c:17:5d:91:
                    66:d6:78:85:79:99:d1:44:aa:83:18:24:61:3c:bb:
                    2b:4c:1f:78:0d:90:18:36:b6:f7:30:da:41:f7:9f:
                    25:a7:f1:b2:c5:90:33:cd:28:ac:ba:9d:e5:39:c0:
                    11:57:f7:90:3c:a2:10:76:b2:47:f1:c6:23:35:4e:
                    42:98:0b:10:4c:f7:f0:6f:86:fa:f7:5f:aa:4d:62:
                    11:44:c0:1f:29:b6:72:28:47:e2:b7:85:bc:0d:e5:
                    3f:dd:3c:ca:0b:65:3a:ad:98:3c:c3:92:f2:be:74:
                    4c:c3:9b:3f:f7:55:bc:06:9e:79:a0:01:71:d5:0c:
                    8d:33:1c:85:f0:8c:66:5d:69:2f:a6:a1:cc:84:96:
                    7f:28:6d:cd:28:ce:68:a5:c5:97:7b:95:ec:62:7e:
                    b7:61:77:94:c7:07:54:e8:ee:35:6b:58:fd:df:03:
                    fa:d6:75:3b:98:58:e7:30:08:1d:d1:f9:39:1b:5d:
                    8c:f5:ce:ca:83:0d:58:33:c4:7e:ea:9f:56:89:6a:
                    4e:25:35:55:13:b5:dd:32:0a:9e:84:6c:ae:6e:89:
                    44:8c:3f:00:83:33:b0:c5:18:55:68:f5:49:74:b7:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:82:70:DC:4A:CB:11:84:35:C9:AB:85:A1:01:4E:74:CD:24:1B:42
            X509v3 Authority Key Identifier:
                keyid:FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3e:5a:d5:c7:a6:6d:e4:48:54:e0:7d:ba:f2:73:bb:8a:7b:
         10:a0:7c:c7:9e:80:b8:6b:74:de:e3:7a:27:af:60:92:91:a1:
         c7:77:fd:e0:6b:13:79:d5:84:fc:4d:57:0c:23:ea:35:0f:41:
         4f:8f:81:a5:9c:83:e2:f4:02:35:00:df:0f:9d:72:4c:50:75:
         5c:69:6f:db:d9:bc:df:65:d0:58:07:95:49:f4:9d:77:66:05:
         3c:ad:9c:45:75:d3:36:ee:66:d6:e9:68:85:e4:05:26:bb:f5:
         9e:94:be:81:55:fd:c8:d0:9b:58:bb:95:77:6b:d3:b1:f4:0e:
         52:9e:80:0b:35:fa:e6:d7:3b:3e:00:f4:86:e0:2d:4b:cf:7c:
         43:b7:08:b0:55:37:f5:d1:0c:08:95:c2:be:3a:d6:4f:92:39:
         9d:76:f5:e5:31:70:fa:19:aa:c2:43:b1:2d:e0:71:ba:d5:9e:
         f5:a1:f8:34:69:55:77:23:73:a6:84:0b:c3:63:39:f9:d0:29:
         9a:34:37:61:fb:d2:4c:7d:14:5f:86:d5:28:0b:7d:cf:14:64:
         71:ff:62:1f:28:9c:4e:68:ae:9d:7e:f3:4e:f4:7f:da:bd:b8:
         d5:94:2f:12:09:40:00:6e:ce:f2:36:19:54:ce:8a:98:85:51:
         a5:a3:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:35 2025 by rpki-client