Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
File:                     9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json)
Hash identifier:          NgbopECznDVa8BsiqGg4Nt8GEyiOlomZeDWCNUAi7yE=
Subject key identifier:   3A:30:20:61:98:FB:A0:6C:B7:E5:3F:18:73:96:15:EC:68:85:8C:7D
Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E
Certificate issuer:       /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
Manifest number:          019E
Signing time:             Fri 31 Jan 2025 02:33:34 +0000
Manifest this update:     Fri 31 Jan 2025 02:33:34 +0000
Manifest next update:     Fri 07 Feb 2025 02:33:34 +0000
Files and hashes:         1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: vetHm14EHNTlDodhJZq4yyWG+k/tdg7ByiLG+G1oCeU=)
                          2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E
        Validity
            Not Before: Jan 31 02:33:34 2025 GMT
            Not After : Feb  7 02:33:34 2025 GMT
        Subject: CN=679c367e-5c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:7c:94:d4:50:dc:bf:07:ff:ec:54:4f:ae:
                    fd:e3:0a:75:02:d5:c9:35:4f:c6:d4:20:db:e5:bd:
                    eb:af:82:a9:96:f7:6d:da:6f:a6:9f:83:6d:ce:1a:
                    bc:74:74:5c:d9:aa:cc:5b:25:35:4f:3d:ac:2d:53:
                    6e:ed:b4:fe:36:ff:47:da:d2:59:ac:e5:8e:aa:db:
                    e0:e7:d0:66:dc:c2:85:c2:a7:8c:c5:5a:18:33:18:
                    08:f7:3c:07:90:01:d6:27:fa:58:69:fa:c9:e8:13:
                    98:69:52:37:52:da:ae:0b:d1:ed:22:f6:f4:bf:7a:
                    49:c4:6b:2a:cd:52:a4:46:25:49:cd:05:df:c1:5c:
                    7d:c1:4d:a0:4b:6c:71:89:0c:2d:b0:49:62:25:6a:
                    b5:fc:07:52:7b:12:ed:79:79:74:67:ff:08:16:7f:
                    62:30:c3:82:86:a3:a7:ea:59:81:e9:36:af:a4:5a:
                    17:ab:b3:40:e4:57:f1:ac:ba:77:9a:96:85:5c:11:
                    ce:78:2e:7d:05:88:ee:bb:9f:15:09:1f:21:aa:b2:
                    c9:0c:98:48:df:f5:6c:0a:ed:63:70:59:14:40:5d:
                    f3:72:c1:36:37:43:af:35:6e:3e:09:5d:cd:24:ed:
                    43:c2:4f:3a:87:51:ff:57:d5:b7:e4:1b:06:bd:84:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:30:20:61:98:FB:A0:6C:B7:E5:3F:18:73:96:15:EC:68:85:8C:7D
            X509v3 Authority Key Identifier:
                keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f7:27:32:a7:4c:c1:37:6a:13:82:8e:49:25:83:49:d7:18:
         59:13:a4:d3:6e:f0:89:7b:0c:9f:ba:e6:a0:6f:6b:42:29:26:
         1f:d0:0e:9f:cd:74:6d:89:42:05:86:2f:74:a7:2a:6d:b6:3d:
         2d:79:01:4d:15:14:93:2f:cb:08:0c:e5:94:8e:2c:f4:d8:0a:
         07:ba:86:c5:61:83:52:85:45:46:99:f6:64:6d:95:f6:2a:30:
         e7:d2:70:3e:21:03:e9:95:8e:eb:6f:6f:87:d4:83:d3:2b:26:
         17:c8:92:b7:b3:0c:e4:7a:8c:9f:08:63:12:64:f9:5a:72:82:
         5a:82:d3:e0:a0:7b:51:1f:95:11:0e:62:70:27:ea:a0:29:0f:
         c2:74:33:c2:95:f2:ad:c3:9b:aa:a0:96:7b:6b:4f:16:ad:e2:
         d7:d8:1f:11:ae:a8:64:6a:d7:13:9e:52:e6:26:27:c0:65:80:
         e0:cb:26:68:ed:3e:c7:e7:44:ec:ae:aa:cb:24:a7:99:db:36:
         44:18:d8:d7:27:27:63:ed:07:e5:ad:85:8f:42:17:31:75:f9:
         e7:e2:3d:bb:cc:19:d2:63:09:74:fe:91:c5:a0:5d:4e:04:5f:
         cd:bb:3a:da:b2:4d:4e:26:53:17:1f:1c:e6:93:6e:73:22:85:
         1b:e2:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:39 2025 by rpki-client