Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
File:                     ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json)
Hash identifier:          orfU73YuOLVzE9Rq73cJ5vCFNMTa4hWVR6ri8kcDLOs=
Subject key identifier:   A3:B9:C0:4D:A9:E1:84:06:F9:0E:8D:77:C7:98:F8:A1:1A:5E:7E:73
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Certificate issuer:       /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial:       0793
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
Manifest number:          077E
Signing time:             Thu 30 Jan 2025 21:22:39 +0000
Manifest this update:     Thu 30 Jan 2025 21:22:38 +0000
Manifest next update:     Thu 06 Feb 2025 21:22:38 +0000
Files and hashes:         1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: /LMBqUvIOQNEsIulMBJmEOzVY1dgM4UbXrkzCxNMtbI=)
                          2: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (hash: FfGvWbRgw7M2d0HlF6t0whQketZeGqrQDCwVLn5jEfk=)
                          3: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (hash: KUbdaIcIL3ANAib1/1yNdALhPqZywuDeLgdVE3tNncA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
        Validity
            Not Before: Jan 30 21:22:38 2025 GMT
            Not After : Feb  6 21:22:38 2025 GMT
        Subject: CN=679bed9e-56a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:51:e4:06:68:aa:c3:45:ec:84:da:1f:78:
                    0b:7f:04:06:09:c3:1b:79:e7:ce:69:85:d4:9b:fd:
                    b8:d7:51:56:7e:56:ad:5e:25:b9:d5:3b:aa:31:af:
                    c1:31:02:5a:c4:15:d0:16:be:48:17:a3:1f:07:9c:
                    46:30:a1:9e:50:50:ec:ef:7a:25:e2:92:b8:2c:51:
                    dd:7e:7f:c6:b4:24:5d:74:55:95:7b:cd:92:13:4f:
                    df:f9:34:73:93:0d:0b:8b:5e:e7:e9:23:30:e6:72:
                    b6:c7:20:31:39:8d:9d:82:e7:75:a0:b9:3b:bd:f4:
                    7e:5d:83:27:38:a8:6e:5b:c9:c6:fd:26:cb:5f:91:
                    d2:b8:f2:b6:d9:bf:a4:22:34:65:79:88:97:83:e5:
                    78:8c:1c:88:1d:91:34:ad:bc:1e:c0:8b:fd:66:2e:
                    3f:41:29:65:a0:33:73:c0:4e:01:c8:ed:12:4a:b6:
                    e7:17:b9:a3:6d:83:24:55:0b:72:be:3c:c4:24:cd:
                    87:44:5c:ef:35:dd:74:c3:14:49:57:e2:0a:85:95:
                    91:97:fe:ec:7e:f9:76:95:4d:37:5a:77:f4:1c:be:
                    00:08:14:87:05:e3:a6:c4:08:33:6e:19:d5:df:2f:
                    3d:da:01:28:1f:df:29:a3:c4:ba:b2:20:08:a5:a9:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B9:C0:4D:A9:E1:84:06:F9:0E:8D:77:C7:98:F8:A1:1A:5E:7E:73
            X509v3 Authority Key Identifier:
                keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:22:14:43:37:b1:49:27:23:08:a4:b3:00:91:05:27:1e:bb:
         d3:bb:b3:4e:7a:fb:f4:a6:a0:df:73:30:8a:b7:e3:6f:52:e6:
         c5:b8:d3:90:bc:2f:c3:a7:51:be:ac:8e:af:95:46:03:1c:b8:
         1c:57:3a:40:d7:82:ff:56:f7:62:b5:86:31:66:4f:43:9b:77:
         e7:d3:93:76:e2:af:4c:bd:d4:75:02:dd:7e:ce:c9:08:5d:b0:
         0a:f5:1f:c0:1b:11:f8:f9:d8:21:92:64:da:05:c9:7d:33:f3:
         71:ed:f7:32:62:e6:c5:ee:d6:0b:ed:f5:34:97:5c:be:f1:a8:
         29:0e:0d:3b:88:43:27:47:ff:96:ca:0f:12:04:4b:ce:60:9f:
         ae:cd:4d:8b:a2:26:ec:e4:ed:a0:b6:52:7d:73:d0:19:80:4b:
         61:c3:3f:7e:71:51:21:34:d4:3c:af:2c:bc:66:91:e6:60:29:
         c3:f0:6c:21:6e:e1:1e:da:2e:1a:a4:7d:67:df:a5:ae:15:41:
         3c:a6:81:ab:c5:98:78:5d:61:d0:a5:c5:ef:62:bc:30:c5:97:
         41:0d:f5:25:d3:3e:74:bb:83:4f:11:7b:2b:fd:7c:2d:9d:83:
         a1:59:a6:48:b2:e9:4e:7c:cc:08:45:7a:e5:74:50:d2:75:fc:
         65:94:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:30 2025 by rpki-client