Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft
File:                     92beXsvKeWcFK5bbbxeCvY_abXQ.mft (raw, json)
Hash identifier:          687OS7k8Hpg3sZbeQ9S4TldI0Bq589ZnadIflfJsZS8=
Subject key identifier:   DF:F5:DD:4A:63:82:5B:68:17:8E:9A:78:5F:38:9C:14:A2:4D:D6:BC
Authority key identifier: F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74
Certificate issuer:       /CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
Certificate serial:       0515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft
Manifest number:          0509
Signing time:             Thu 30 Jan 2025 23:39:36 +0000
Manifest this update:     Thu 30 Jan 2025 23:39:35 +0000
Manifest next update:     Thu 06 Feb 2025 23:39:35 +0000
Files and hashes:         1: 92beXsvKeWcFK5bbbxeCvY_abXQ.crl (hash: ZeMQtO+Hsfshkiwu9Kozf3KHFIh9GQAl65si3qnAANk=)
                          2: E2663F929C9511ED8014F84CC4F9AE02.roa (hash: 6Y5tviiZDDG9UDEgc5UyI9seFOB72fV6jZ50KDgSVtg=)
                          3: E14490BE9C9511ED8014F84CC4F9AE02.roa (hash: yIhHBUsSlf0ICdfFTknapFp3nWFmuwzWUa+01ysRpJs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
        Validity
            Not Before: Jan 30 23:39:35 2025 GMT
            Not After : Feb  6 23:39:35 2025 GMT
        Subject: CN=679c0db7-3794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:2f:cf:99:58:77:68:69:fa:a6:9a:b1:b4:
                    b9:5a:cf:f6:ea:88:30:4f:00:d4:f2:73:4e:02:a9:
                    f1:62:34:5e:1f:21:67:e3:dc:53:a0:ef:f0:b1:4a:
                    df:68:a3:00:3f:fb:6f:0f:5d:71:ce:3b:75:72:d2:
                    6e:74:48:71:12:4d:6c:61:91:f5:05:2f:65:55:06:
                    14:7a:f2:d7:b7:50:09:2c:4a:b8:bf:61:ba:bc:00:
                    25:a9:bb:d9:42:57:f5:59:95:5f:a8:c9:68:5f:5f:
                    c9:54:18:78:7b:22:0f:60:95:57:90:17:6d:31:4e:
                    b2:2a:2f:52:a6:d9:16:6c:21:8e:6c:bf:ff:0e:74:
                    ac:a6:ac:73:17:42:f3:cf:33:4e:2b:ea:e4:ba:0f:
                    77:9f:76:2d:a0:5c:fe:fe:73:ea:01:9f:4c:dc:17:
                    e3:e0:72:26:9a:d3:1c:82:d7:98:91:bb:a5:f7:6d:
                    0d:fd:8a:03:99:59:b1:4b:86:a9:db:8d:71:17:1c:
                    0a:06:97:62:2c:37:0d:d3:68:68:45:aa:17:0c:06:
                    f2:bf:b6:1d:69:5a:f6:53:43:6c:ca:f1:d6:22:c5:
                    44:37:ff:4d:7b:7a:3b:e2:d9:10:e9:2e:20:b0:e4:
                    9b:a4:f0:32:8c:44:d0:93:81:14:08:3e:69:1c:ed:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F5:DD:4A:63:82:5B:68:17:8E:9A:78:5F:38:9C:14:A2:4D:D6:BC
            X509v3 Authority Key Identifier:
                keyid:F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:5e:c5:8e:9f:a8:f6:ca:f5:c2:b7:7f:56:ef:cb:4a:33:
         e3:b4:aa:9e:8d:5a:69:a2:05:67:83:2f:4f:b2:cb:c6:68:af:
         dc:1f:e9:cf:8b:89:0b:13:f1:b0:d9:b8:32:bc:22:ce:8e:03:
         a3:56:cc:83:3f:d1:db:c8:67:4a:ba:7c:15:ee:b6:9c:ff:1f:
         26:7b:bc:88:65:55:f0:d3:30:ec:92:75:9d:56:cf:5d:7e:aa:
         80:22:df:79:0a:da:82:63:98:27:2c:b2:f5:3e:4a:9d:c1:a1:
         72:1d:7c:eb:32:df:92:56:17:fa:a5:4d:8e:a6:2a:28:36:c3:
         31:d4:f4:09:01:78:dc:f4:d3:6e:ff:d2:e8:59:e5:aa:48:d8:
         d6:7f:91:6a:ed:c5:73:ba:6e:60:65:19:75:84:ed:1b:53:88:
         a6:ec:1b:c7:1d:b2:39:20:40:09:f0:c3:3c:2d:65:bf:e1:65:
         de:30:d2:af:1d:84:1f:fb:f5:70:04:cc:28:b5:1e:7f:7d:b8:
         f2:f4:b7:f8:93:18:11:26:ba:51:34:5c:80:33:71:9f:ed:57:
         b6:6e:a5:b6:c5:dc:0b:aa:92:8c:67:2b:5f:03:88:30:76:d9:
         9a:25:2b:2e:14:39:99:61:d3:ae:82:0c:d2:0a:70:89:91:8a:
         2e:1c:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:15 2025 by rpki-client