Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
File:                     ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json)
Hash identifier:          3Jxz/nQ9KP45yUk7+SxfXIA00xr9lpbv9yEiAzMisGI=
Subject key identifier:   B1:03:F5:D9:7B:62:2C:B5:C4:C4:FA:0F:C1:4E:14:5A:7F:46:88:C1
Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
Certificate issuer:       /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Certificate serial:       07D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
Manifest number:          07BF
Signing time:             Thu 30 Jan 2025 21:07:54 +0000
Manifest this update:     Thu 30 Jan 2025 21:07:53 +0000
Manifest next update:     Thu 06 Feb 2025 21:07:53 +0000
Files and hashes:         1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: /aymaa7p1b0gbV/ulLm6ZVpAtYG/RdqnIdG6iZbPFkU=)
                          2: E120E32E316111EEB9B76E4CC4F9AE02.roa (hash: x3JJ5fywP75b0VuxKMEwbNWWTXHH7l+L5PLPkPQYjmY=)
                          3: 5816B2BA4B5711EEB25C4483C4F9AE02.roa (hash: by0/Ko9TJNWSCYMY+AHCa5W7Y7EGdhoiyC4VFd9dKfE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
        Validity
            Not Before: Jan 30 21:07:53 2025 GMT
            Not After : Feb  6 21:07:53 2025 GMT
        Subject: CN=679bea2a-4711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:1f:fa:4f:bc:3a:0b:07:66:74:21:a4:ca:
                    32:e9:50:16:0c:a1:b3:5d:b4:0e:32:08:50:09:a7:
                    f3:3d:35:2d:13:a4:ef:e1:aa:a8:1f:55:91:8d:15:
                    bd:2c:74:a3:32:b5:94:49:ad:e5:67:1a:17:95:78:
                    ae:8c:53:31:ba:2d:72:34:ab:27:4d:5d:02:3b:da:
                    cf:10:09:0f:7b:2c:31:32:49:7e:e7:ec:d9:99:02:
                    a7:2d:e2:80:3a:65:f4:33:49:7b:6d:d7:04:35:7a:
                    34:0f:24:fd:c0:15:ac:f2:b4:fb:b0:76:7b:df:23:
                    1e:93:4f:05:41:fa:35:18:59:f8:f7:1d:ab:08:8d:
                    f6:83:22:d8:45:e5:59:3e:5b:dc:c1:27:ae:d0:b2:
                    3f:f8:72:47:de:0d:e2:d6:49:cb:2f:e9:51:65:32:
                    7f:99:04:bd:1e:fb:6d:49:76:db:a4:cc:f6:ac:f3:
                    53:11:bd:7c:52:cc:21:27:95:7d:94:1c:7d:20:c0:
                    93:49:64:65:dd:b5:34:c7:be:de:3d:8e:b7:a7:11:
                    f9:7e:26:4a:5b:54:1b:07:d8:00:30:d5:ca:3a:b8:
                    de:dc:01:8d:1c:54:eb:20:df:6a:58:10:3b:67:9b:
                    a3:4f:8f:64:6a:4f:78:2c:58:33:17:8b:b5:d4:6b:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:03:F5:D9:7B:62:2C:B5:C4:C4:FA:0F:C1:4E:14:5A:7F:46:88:C1
            X509v3 Authority Key Identifier:
                keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:7b:95:e2:01:94:bc:8f:bf:78:90:9f:b6:f1:ef:52:4e:05:
         ad:22:af:fd:53:3e:05:ff:97:dc:4b:17:81:e4:af:81:22:96:
         20:75:f0:32:b3:17:0a:26:d5:b9:49:a6:93:83:a4:9a:b5:61:
         bf:71:d7:25:0a:39:60:15:57:2d:75:7d:c9:78:4c:b4:11:00:
         6f:0b:9e:aa:92:ea:fd:93:8f:94:7e:9b:63:21:cd:c6:e3:da:
         9d:7a:da:37:ca:a1:a0:87:97:f9:a2:63:6d:0d:69:df:38:15:
         9b:48:d6:15:4b:89:18:61:ed:46:81:12:48:2f:6c:d3:7a:4b:
         5f:e7:5a:01:f8:93:70:6d:69:fd:a2:01:ed:07:7e:23:1f:4d:
         94:8a:f8:a4:a4:86:30:c6:ba:93:1b:10:04:17:65:4c:50:49:
         67:62:7c:28:9d:51:27:91:33:7b:60:4a:bb:ba:36:20:bf:32:
         f5:64:de:55:ec:ca:91:67:16:47:36:4c:bd:55:a9:4b:8f:15:
         b6:24:38:4d:e7:81:40:16:5e:7a:23:52:1e:77:cb:0e:be:44:
         53:55:35:96:b8:2d:83:63:3d:15:f9:f2:88:5d:6a:7d:73:2b:
         c2:a7:43:5d:cb:56:f8:53:fc:1b:77:0f:2a:c2:78:62:dc:19:
         c7:83:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:02 2025 by rpki-client