Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
File:                     zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json)
Hash identifier:          8kCd2a0/067RSZoD3/er16/33c7M3JopYiCRCWB4Vz8=
Subject key identifier:   D1:30:7A:AA:F4:33:A8:3C:24:8E:D0:A2:3D:57:46:84:8C:24:F9:F1
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Certificate issuer:       /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
Manifest number:          9B
Signing time:             Fri 31 Jan 2025 05:34:14 +0000
Manifest this update:     Fri 31 Jan 2025 05:34:13 +0000
Manifest next update:     Fri 07 Feb 2025 05:34:13 +0000
Files and hashes:         1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: WkZhf9VnFSNdm5fs4/7+J2A+PqszHouLy4OHIIx7kJU=)
                          2: 758D7C140AC611EF805C3840C4F9AE02.roa (hash: mXX/S1ZAowoBmhXNAUjql/b0o4tCgx0gjB97LLmOsJw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
        Validity
            Not Before: Jan 31 05:34:13 2025 GMT
            Not After : Feb  7 05:34:13 2025 GMT
        Subject: CN=679c60d6-c992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:d6:28:a4:b5:ca:56:df:f3:95:3d:ab:73:
                    33:d7:1d:59:eb:4e:f4:fa:18:45:60:d1:2b:1c:76:
                    f7:2d:14:c0:b3:32:37:67:a7:23:e7:14:a8:d4:a9:
                    de:3f:3a:02:fe:c7:f4:c4:f1:22:cd:bd:7b:64:0d:
                    1f:aa:42:e8:cc:c6:2b:ae:63:b2:bb:39:0f:ba:bc:
                    a5:8f:44:e7:59:6c:07:51:d2:3b:4f:ea:5f:9e:57:
                    dd:ae:07:6d:78:24:16:74:c4:62:5a:42:d0:69:ee:
                    0a:6a:dc:f2:e6:30:da:e8:39:5c:df:8a:30:de:0b:
                    c9:82:92:49:7d:d2:9a:37:eb:c3:03:db:a2:16:f4:
                    f3:ec:34:14:a3:ac:61:c2:a3:58:45:e8:58:67:68:
                    fe:df:ee:4a:ad:4d:dc:e0:e4:cb:7b:94:cf:b3:77:
                    99:ac:82:c4:cb:b7:70:ae:23:9d:6d:dc:2b:36:c1:
                    4c:49:92:27:bf:ff:bc:26:e8:aa:5d:d9:80:02:23:
                    d8:1a:3f:3d:3f:3e:79:28:59:3e:36:02:02:b3:96:
                    56:ca:b1:1d:dc:f7:40:8a:b1:d2:71:e8:68:8f:00:
                    47:a1:7a:2f:d3:a6:14:71:f3:df:f3:e2:f2:a0:eb:
                    40:3f:d3:f6:23:99:e7:f3:9b:fb:61:1c:68:01:2d:
                    05:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:30:7A:AA:F4:33:A8:3C:24:8E:D0:A2:3D:57:46:84:8C:24:F9:F1
            X509v3 Authority Key Identifier:
                keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e5:ca:93:ab:ec:40:77:6a:29:3b:a8:7e:2f:57:ae:00:33:
         b8:1f:6b:4b:e0:ec:af:db:1f:89:d4:4e:5c:ed:82:ee:a1:ad:
         27:8e:c3:f0:89:84:46:f0:2a:32:8a:2d:23:57:6c:b9:2e:ef:
         2e:be:5c:9c:c5:bb:59:1d:df:88:d8:de:69:2a:50:00:bb:3e:
         a5:d6:87:6e:0a:bd:eb:76:4e:ab:20:d6:d9:ba:9b:a8:2c:5e:
         79:b4:9f:1b:11:8f:00:54:29:1f:20:37:b2:b3:6c:af:99:27:
         8f:f6:20:22:38:d6:ff:40:27:fb:a9:5c:1a:08:0f:80:e3:61:
         a3:d1:1a:fa:c9:da:57:3d:75:84:98:31:5e:40:bc:e8:44:28:
         42:51:ec:d9:b9:71:70:dc:f3:b0:7f:c8:8d:bc:77:4e:8c:8e:
         c2:bb:45:33:ae:88:e6:0b:c3:4c:f8:d5:d8:0c:35:16:ef:ac:
         32:73:1b:8e:76:60:d5:97:f8:53:23:73:ed:13:5b:59:2d:1f:
         6a:5a:45:63:89:97:65:9d:01:59:93:64:07:8c:9e:dd:6b:c5:
         41:ce:19:8b:d1:5c:15:0c:a7:e6:4c:ee:03:95:0a:d5:53:3a:
         6f:43:43:9d:f9:a3:ce:17:9c:a3:57:e0:bd:63:8e:a8:b2:d8:
         6f:b9:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:18 2025 by rpki-client