Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
File:                     k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json)
Hash identifier:          6A/UbNxZYQhAfUEL8Ug9+TMgUiw60ANeX7lDVmRjXvw=
Subject key identifier:   D3:8B:2E:29:A7:E4:99:E7:7A:AB:D2:9C:BE:7D:B5:D1:AB:2D:FD:67
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Certificate issuer:       /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial:       1896
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
Manifest number:          1878
Signing time:             Fri 31 Jan 2025 16:30:18 +0000
Manifest this update:     Fri 31 Jan 2025 16:30:18 +0000
Manifest next update:     Fri 07 Feb 2025 16:30:18 +0000
Files and hashes:         1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: iOF5wYi+WWtvPDT49YBdmOY4ncAHuN4wkeYucXGNUJo=)
                          2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: dkIdUkxS0d2PbrqHHzMK0XKv4nvJXGsXU3jrSo/hWKk=)
                          3: A6ACA298858911E88026B416C4F9AE02.roa (hash: Bm6Hg3gh1j1a80wR2XX7xwyi1WY27Wumi8LE07BcSR8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6294 (0x1896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
        Validity
            Not Before: Jan 31 16:30:18 2025 GMT
            Not After : Feb  7 16:30:18 2025 GMT
        Subject: CN=679cfa9a-c32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:7b:07:7b:05:c0:94:e3:f2:3b:85:a8:00:
                    ba:b6:dd:31:bc:60:f6:28:c8:93:d0:8a:8b:cb:72:
                    39:ee:f9:b8:aa:f0:c1:a1:98:61:f9:c3:cc:1d:c0:
                    ee:a6:27:69:67:f4:b5:47:14:97:df:19:40:3d:42:
                    10:0e:7d:12:78:b9:dc:4f:ea:62:64:72:ca:2f:4b:
                    9b:13:5a:0e:0a:c6:5e:0a:d8:6c:56:29:70:7a:7e:
                    65:4b:0e:15:a2:e2:76:d5:f0:72:c1:8b:9d:2a:4b:
                    25:4f:96:96:36:d8:2b:a8:98:e1:1a:de:26:14:f5:
                    7b:6c:96:fb:5b:2b:6e:0d:ff:d9:dd:57:04:30:61:
                    8a:f2:0a:69:6e:5b:bd:0d:11:02:23:3f:c9:b4:60:
                    ef:ef:66:dd:05:ac:4d:94:f6:a5:f5:ee:64:61:5a:
                    48:77:2f:17:72:ec:ce:c9:73:f6:ec:59:84:2f:1d:
                    0e:92:57:12:34:43:88:2f:29:b1:cb:9c:79:23:d9:
                    0d:dd:5a:c7:0d:76:49:fb:b2:e8:01:32:36:9a:97:
                    a6:6e:5f:cb:9f:0c:66:39:47:f1:2c:75:a0:06:20:
                    b0:0f:d9:a9:53:a5:2a:6d:d7:c7:3e:54:ba:91:ad:
                    85:95:00:e1:17:f5:17:b4:c0:7b:2c:0e:dc:53:65:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8B:2E:29:A7:E4:99:E7:7A:AB:D2:9C:BE:7D:B5:D1:AB:2D:FD:67
            X509v3 Authority Key Identifier:
                keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6f:a8:b1:51:41:80:c4:ad:eb:4a:05:9d:7a:70:e8:71:65:
         f8:35:c9:6e:7e:0e:bf:ae:f9:54:4f:98:54:95:99:a3:96:d2:
         3e:0f:53:6f:7d:b0:86:28:e7:51:87:2d:18:3e:d0:fd:0e:f9:
         4c:9c:00:a7:45:3a:af:75:fb:59:d0:ae:0b:ae:fa:ad:51:64:
         a5:d5:14:5c:bf:e7:f2:15:76:8a:99:4e:3c:f2:75:3f:0b:a9:
         f5:5b:93:c3:ac:93:79:6e:81:4d:28:0c:a0:04:56:de:84:0d:
         21:d6:12:41:8b:fd:eb:13:6b:e9:03:5a:b9:ab:f3:6d:d7:ee:
         ba:b1:7f:15:9b:15:03:9d:b7:ae:99:2f:1f:60:61:23:25:0b:
         a8:e2:78:d3:c1:7f:45:da:de:d0:1f:7a:44:79:7c:3f:8a:f1:
         8c:c4:02:b6:84:5d:c9:c7:f6:b7:df:c0:09:81:9a:0d:ed:d4:
         bc:1d:c1:3a:6a:d8:42:8d:1b:0e:76:c9:9d:ce:dd:b7:15:c2:
         3c:2c:b0:45:a5:59:4e:39:77:2f:f5:06:7d:4a:fe:4f:a8:46:
         55:0c:89:85:65:57:13:71:d8:f1:c9:f6:73:9d:2e:f5:ec:87:
         3f:e5:e0:6a:42:7a:97:f8:08:17:d0:d4:d6:ab:9e:d8:f2:06:
         24:3a:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:57 2025 by rpki-client