Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
File:                     4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json)
Hash identifier:          r3KulvIA0hiudjC9XbBnfEol97g0ullwfYY8XJ+LzBc=
Subject key identifier:   96:E7:C5:1C:DD:7C:80:38:7F:15:3A:14:A1:74:7D:07:EE:DD:AE:15
Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66
Certificate issuer:       /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
Manifest number:          018A
Signing time:             Fri 31 Jan 2025 02:49:18 +0000
Manifest this update:     Fri 31 Jan 2025 02:49:17 +0000
Manifest next update:     Fri 07 Feb 2025 02:49:17 +0000
Files and hashes:         1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: yvfHtEkAiJz4KHFPBCQN6SOLGmKt0jNcpqznsbtE1Ts=)
                          2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: 8hmKlSyIYm+hEMbljQN7ZPJxD7JA/JzX6lz/de7dJIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
        Validity
            Not Before: Jan 31 02:49:17 2025 GMT
            Not After : Feb  7 02:49:17 2025 GMT
        Subject: CN=679c3a2e-9770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:96:e6:65:6d:df:01:26:c6:61:64:95:5d:
                    1a:d0:51:e7:54:13:79:52:cc:93:bb:27:d0:21:3e:
                    33:e2:91:18:07:40:c4:5b:f1:1c:c3:c1:b4:98:3a:
                    9d:78:ef:b3:09:dc:84:2b:e2:b3:3d:53:7d:c1:a9:
                    9f:e3:dc:1a:cc:ba:69:b1:fe:25:50:a9:0f:c4:c2:
                    34:7c:82:bf:39:e5:ff:c4:de:85:9c:1d:cb:5c:0d:
                    9d:06:19:19:c2:ae:a5:46:44:c1:1f:b1:2f:0d:35:
                    a2:49:34:29:fb:dc:7c:40:be:e1:8d:01:62:08:0f:
                    4f:f6:a4:69:87:2a:9c:ac:16:22:23:bb:fe:3b:83:
                    cf:99:05:81:8b:97:b0:90:75:86:34:fd:72:0e:48:
                    85:25:b2:e4:43:78:af:21:98:9d:cf:bf:92:03:93:
                    ff:e5:4f:17:74:1e:c9:16:59:f1:38:f7:8e:b2:ad:
                    95:cd:44:2e:24:7e:37:f0:66:f5:96:2f:ea:f0:ca:
                    70:b6:1f:44:c5:e8:67:70:30:47:be:30:78:f2:f1:
                    0c:0c:b9:23:91:29:96:9e:f3:b8:92:c2:99:c3:a4:
                    bb:ef:a0:46:61:62:82:12:e2:68:79:63:19:82:e1:
                    bd:f6:a0:b7:31:83:35:11:b4:26:d9:be:80:8a:4c:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:C5:1C:DD:7C:80:38:7F:15:3A:14:A1:74:7D:07:EE:DD:AE:15
            X509v3 Authority Key Identifier:
                keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:2c:c3:7d:35:92:ec:6e:40:fa:89:cc:7c:7d:14:14:08:
         20:0c:e4:14:5e:d2:65:30:7b:b0:8c:7c:5a:b4:b4:4d:7f:bd:
         24:7a:ef:0a:55:dd:55:40:57:21:26:7a:96:8f:a1:f3:5a:83:
         21:8f:7d:2e:16:f4:dc:8d:89:52:7b:35:39:fe:66:d0:d0:b2:
         ef:d7:6a:ba:4c:2f:d4:85:bf:b5:12:10:81:f1:e2:66:1e:84:
         23:72:70:ff:99:a9:77:28:44:84:66:24:be:a0:66:da:b4:c7:
         27:23:a5:ce:65:4b:db:8a:c6:d7:b7:4e:71:98:9d:ff:fb:1f:
         a4:cd:3a:19:92:9a:cf:ed:ca:07:c3:4e:3c:e0:e0:bb:1b:84:
         c3:6b:41:69:c5:9c:f0:76:8f:bd:15:17:c3:a7:bd:e4:f2:6d:
         51:65:86:c8:b2:f2:bc:92:4d:99:bf:b9:e7:c9:3a:8a:a9:54:
         66:07:8d:1c:83:46:96:28:d9:49:4a:21:fc:4f:be:a1:32:98:
         d3:4b:fc:b9:98:c3:bb:48:37:89:92:87:e3:c5:a7:35:52:a6:
         8a:48:f2:4c:85:b2:a0:ec:e9:56:4f:b6:85:85:73:ba:6b:ea:
         67:2c:af:66:dd:fd:6b:4b:d1:80:4d:84:fc:36:37:47:2d:e3:
         2e:86:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:14 2025 by rpki-client