Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
File:                     U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json)
Hash identifier:          0NbbNjGa1m28/mAd3JuEsXf++8cafnuk0gRDupjwR20=
Subject key identifier:   CC:FF:0F:C7:71:53:C1:B7:E2:1F:79:B1:F5:B4:CD:36:F0:BB:D7:9B
Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
Certificate issuer:       /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Certificate serial:       0569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
Manifest number:          0557
Signing time:             Thu 30 Jan 2025 23:31:02 +0000
Manifest this update:     Thu 30 Jan 2025 23:31:02 +0000
Manifest next update:     Thu 06 Feb 2025 23:31:02 +0000
Files and hashes:         1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: KQ4l2iJEDBxVm7LpRYG3m9jthNCwEXn5IOINwcrI/wo=)
                          2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: uD0SlFN84GC2MoE4vVvfp4yng005Xq5iK1CMSLwmVKE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
        Validity
            Not Before: Jan 30 23:31:02 2025 GMT
            Not After : Feb  6 23:31:02 2025 GMT
        Subject: CN=679c0bb6-f2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:27:74:fd:d8:52:98:5c:a2:48:1d:24:13:
                    72:0c:e0:86:86:d1:c2:e7:ac:b7:4f:c5:18:a9:05:
                    f2:62:0c:93:b1:00:96:da:23:fb:80:86:56:5e:2c:
                    d1:3c:38:5a:ba:b6:b3:bc:6a:98:40:f9:1c:80:6b:
                    fd:14:41:ea:a2:b4:69:d5:d0:33:5d:2a:52:f8:65:
                    04:dd:c8:e1:1d:bb:fa:41:98:89:56:17:06:e9:6e:
                    eb:16:55:21:cc:9c:c9:ed:a6:b8:8d:cc:1e:3e:0e:
                    7c:83:b9:8e:34:91:85:dc:da:4e:0c:b8:82:1b:56:
                    e3:fc:c1:d6:c2:c4:be:83:48:25:ab:1d:37:6e:83:
                    6e:ef:e7:9a:e6:86:c4:0f:85:95:93:bc:bb:a4:30:
                    16:69:d3:c1:32:e8:b3:f8:b4:f5:da:35:97:24:47:
                    fe:56:76:88:09:04:dd:8d:51:b6:8b:2e:bd:af:5e:
                    f4:96:af:76:ba:72:d2:f9:64:d4:b0:e6:4a:f0:80:
                    a1:23:67:ec:f5:dd:fc:dc:fe:ff:bd:cb:56:97:63:
                    35:fc:a2:48:2b:89:d0:ae:80:b0:cf:c8:25:80:4e:
                    3a:f9:15:ad:4c:63:9c:af:4d:67:53:28:1f:b1:6a:
                    51:42:41:82:28:1b:5d:35:4b:8e:f9:df:e3:4d:5e:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FF:0F:C7:71:53:C1:B7:E2:1F:79:B1:F5:B4:CD:36:F0:BB:D7:9B
            X509v3 Authority Key Identifier:
                keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:86:c6:12:5d:a6:2b:d4:27:7e:18:e9:21:ca:52:e8:8f:
         59:3c:40:77:ab:3a:0b:eb:a7:77:c4:29:3f:64:a2:ce:c5:80:
         59:fa:79:94:da:63:ff:be:c7:a7:95:25:62:d4:ff:e0:54:8a:
         d8:ac:f7:5b:2a:28:01:4d:4f:9d:a1:8f:9f:63:e9:e4:87:5b:
         e6:e5:53:dc:be:e9:0f:44:02:bb:42:f3:31:c5:96:86:a9:33:
         c9:b2:b2:42:6e:22:48:ec:d9:4b:58:ad:00:e6:cd:ff:87:73:
         c9:7e:c5:c5:8c:83:83:1c:e7:42:ce:18:aa:e3:45:e2:fd:4f:
         2c:69:2f:37:6c:6b:0c:eb:78:84:4a:70:4f:33:8a:db:69:95:
         3c:c4:60:77:fe:1b:62:94:23:f3:73:64:88:62:99:c2:86:d4:
         d6:02:99:e6:bb:7c:d9:56:d0:0d:cc:e9:60:ac:d4:d6:9c:79:
         2a:a3:e8:82:ee:8f:38:2f:f1:2a:3c:f7:f0:bb:bb:b2:b8:62:
         33:1c:ca:8a:19:52:7b:74:6d:49:a6:21:cc:5e:55:a1:b8:43:
         27:a9:40:3a:6f:24:21:5e:6f:d6:c3:17:7a:cd:9b:dc:41:96:
         63:c4:88:b4:e1:a2:26:49:f8:5c:9a:91:ad:c5:c8:eb:a4:c5:
         03:5a:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:43 2025 by rpki-client