Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
File:                     RbsZfeuTYVmBFWU_lwiean9iv5o.mft (raw, json)
Hash identifier:          g3YoroKRIiOVKW64Ki2b03a2NlwlL52vnCeseLNuzvg=
Subject key identifier:   D3:17:2A:A4:45:BA:1B:A3:01:0B:B9:CB:2B:EA:30:4D:6B:AD:FA:2F
Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A
Certificate issuer:       /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
Certificate serial:       1B9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
Manifest number:          1B89
Signing time:             Fri 31 Jan 2025 16:16:34 +0000
Manifest this update:     Fri 31 Jan 2025 16:16:34 +0000
Manifest next update:     Fri 07 Feb 2025 16:16:34 +0000
Files and hashes:         1: RbsZfeuTYVmBFWU_lwiean9iv5o.crl (hash: kGlEX51J59e4u9d091DM37X1M1jd0gvBn48D63Nsdzo=)
                          2: 421AC870FA3C11E68E9D3C2EC4F9AE02.roa (hash: YvBaVC/FCxSr3mH7Wniem5Fc4fRE2xPCszYEETdJT64=)
                          3: 575AA83EC89611EDB6E9F849C4F9AE02.roa (hash: zUQrvX33/3TCKafKm47GXtbl0gyaNKZ7M04LcO+HoFI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7068 (0x1b9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
        Validity
            Not Before: Jan 31 16:16:34 2025 GMT
            Not After : Feb  7 16:16:34 2025 GMT
        Subject: CN=679cf762-3fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:1f:7c:d4:5d:7f:4b:c2:3c:b9:bd:13:c2:
                    33:2a:f0:d2:e0:f6:64:3d:d5:b8:57:92:c4:cf:d8:
                    6e:cd:27:01:e8:0c:9a:e3:b3:19:44:e0:ec:69:bb:
                    72:11:a5:cb:cf:89:e3:12:84:b0:11:d7:3f:14:33:
                    8f:e3:28:f0:9b:37:0f:2e:35:4c:56:98:95:76:ee:
                    94:fd:b4:50:9c:35:a2:2b:3e:e3:85:3f:2f:62:ed:
                    66:e6:34:1c:7f:7c:4d:af:43:b2:5b:f2:8b:ed:41:
                    e4:32:bb:13:d7:50:5f:19:4c:03:57:b5:c0:75:03:
                    e1:7c:b3:dd:e4:8b:8e:d7:06:dc:e8:db:16:a0:6e:
                    db:34:73:33:78:05:35:b3:00:10:c3:bd:7a:d8:23:
                    41:12:70:f0:75:7c:60:77:eb:d7:04:16:40:f6:7d:
                    e6:db:6c:bf:9d:0b:b5:0b:c3:e0:de:b1:fb:74:3d:
                    6d:aa:86:e8:90:6a:7a:f8:8b:44:03:f8:a4:77:aa:
                    17:0c:f3:07:be:fb:67:a3:96:8d:1a:3a:82:50:5c:
                    e4:a8:1d:5a:dd:cb:41:bc:a3:74:d7:57:83:38:7b:
                    c8:97:68:23:b1:91:8d:41:b6:ce:3a:4e:9d:4f:fd:
                    0b:b0:76:84:9e:ed:af:f8:b1:f8:26:89:95:dc:d5:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:2A:A4:45:BA:1B:A3:01:0B:B9:CB:2B:EA:30:4D:6B:AD:FA:2F
            X509v3 Authority Key Identifier:
                keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:30:eb:45:27:fd:90:25:de:aa:df:62:dd:8a:93:c6:b8:
         3e:17:9a:ef:3f:63:05:88:cf:09:64:ec:78:9a:27:91:2b:b4:
         26:1b:43:cd:1a:8b:d1:3a:5a:22:3d:b7:37:03:4e:fd:c1:6e:
         7f:b0:3f:61:48:99:b5:83:bd:5c:ab:49:f5:19:c0:2b:18:16:
         21:16:95:3d:cd:84:26:ed:9d:9e:44:97:d2:d9:71:6a:6b:71:
         83:4e:b4:53:8b:92:9d:de:db:22:64:72:95:24:81:2d:85:9a:
         05:0a:8a:95:90:b9:8f:ae:a0:aa:1e:45:fc:d0:ea:73:37:a3:
         1d:fb:36:d2:04:b0:57:a5:67:fe:0b:40:64:31:85:88:18:77:
         27:e4:00:30:3a:3d:71:00:ec:fb:ca:da:4e:f6:ae:28:e8:78:
         ff:b3:ff:bf:6a:0c:e4:1b:d3:6b:91:74:67:ea:03:9d:e3:8a:
         39:6d:b1:58:90:6d:2e:af:71:1f:48:4b:cf:2c:09:6d:a3:23:
         19:64:fe:61:f1:c2:e2:37:94:ff:90:d8:65:77:c5:28:a2:8e:
         43:da:67:80:3e:57:5f:a0:de:76:ec:38:50:1b:5a:c8:bc:fc:
         59:2a:54:8e:09:33:7d:e0:27:7c:19:6c:b2:22:8c:87:79:71:
         b1:b5:28:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:52 2025 by rpki-client