Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
File:                     MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json)
Hash identifier:          O3huo/qU6a4o5rWY+T75MURN2sMH+toU31JQEc8J9rU=
Subject key identifier:   4A:5B:64:8D:95:0F:15:C7:62:DD:D2:BF:70:13:55:F1:12:B7:19:7A
Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E
Certificate issuer:       /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
Manifest number:          01CB
Signing time:             Fri 31 Jan 2025 02:19:43 +0000
Manifest this update:     Fri 31 Jan 2025 02:19:43 +0000
Manifest next update:     Fri 07 Feb 2025 02:19:43 +0000
Files and hashes:         1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: bafh2pkMbzDowGC1Sg2sxWtMpkPF15seUUkKsimc+kk=)
                          2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: 5RvSp27bzJLpaJnE9Vp9OHr3zH1Dq7i1O2ke5dqvusQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E
        Validity
            Not Before: Jan 31 02:19:43 2025 GMT
            Not After : Feb  7 02:19:43 2025 GMT
        Subject: CN=679c333f-3f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:5d:4f:77:d7:f8:d5:0f:a9:e0:df:4e:1c:
                    78:fe:2f:7d:5d:ee:e6:48:17:48:89:ed:94:4b:8b:
                    4e:40:b2:43:e9:9c:22:8c:61:16:e4:1b:6d:32:0a:
                    e4:02:96:3f:b9:a7:51:85:69:c9:eb:a0:a5:d1:e8:
                    2b:90:63:14:0b:db:c9:38:99:66:69:08:5d:df:54:
                    27:79:46:93:09:9c:26:f7:b3:b1:f6:89:dd:eb:42:
                    46:89:81:ed:cc:0e:24:c3:af:13:ab:75:13:29:22:
                    bd:72:06:b8:79:17:b8:1c:2a:13:fe:ac:63:b6:e3:
                    da:1e:a9:21:43:b6:2e:17:0c:cf:b2:e6:49:1f:19:
                    c6:f1:c8:1b:43:11:e7:33:3b:7f:56:1e:8f:f3:7c:
                    8c:ee:48:6c:ca:08:98:39:a4:3c:5b:84:31:ad:fd:
                    20:09:72:3b:ef:64:c2:85:21:e1:ec:64:33:82:f1:
                    87:7a:3d:30:8b:e5:11:f8:44:18:f8:ba:bd:d0:35:
                    c9:b2:bf:a1:46:e8:b7:4f:45:e6:1b:f2:2d:aa:e8:
                    cd:b6:88:cc:b7:1a:b3:2e:c4:4f:ed:ca:a3:8e:01:
                    13:15:cb:73:39:6e:13:92:b6:df:a5:03:fa:a4:0c:
                    00:49:25:ae:3e:83:92:81:49:c5:85:ce:ac:d1:12:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5B:64:8D:95:0F:15:C7:62:DD:D2:BF:70:13:55:F1:12:B7:19:7A
            X509v3 Authority Key Identifier:
                keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f4:50:41:50:f7:7c:49:f6:bd:0d:70:ac:7e:6e:87:70:38:
         4e:7d:de:f1:71:5f:d7:03:b8:1d:d1:e7:22:cd:08:8c:6c:6e:
         60:bd:88:c4:ae:3f:9b:29:6a:37:e8:55:16:d7:1d:7b:a5:e7:
         49:b4:44:c3:56:99:36:d5:7a:38:34:4b:30:db:5a:14:4e:05:
         6c:10:33:11:29:cf:c1:89:02:cc:ca:c7:c9:da:e5:7b:90:7e:
         2b:61:a6:86:21:0e:ab:df:ad:01:bf:4e:2f:26:0b:b1:0b:9a:
         55:22:97:3f:52:af:e8:e1:10:5c:60:9f:2d:a8:61:f6:85:60:
         1e:32:f4:12:96:2a:d6:2c:ef:7c:cc:0e:5d:b3:13:40:7a:64:
         ee:7a:df:cb:67:52:6f:f3:80:4b:db:ce:f3:7c:57:1d:f8:48:
         51:b9:97:cd:0a:59:81:52:b2:0a:eb:64:39:48:31:18:1f:53:
         28:87:96:0b:d9:a2:c9:6c:47:2a:bd:c3:ec:b2:ce:c7:a8:2f:
         de:f5:f3:8b:d4:14:ff:57:b6:0f:6c:e4:fe:34:7d:c6:a7:55:
         7a:a1:28:1b:b9:65:03:0a:f6:50:1e:fa:12:50:b8:54:ad:4f:
         9b:6e:92:64:a7:a1:88:ba:15:80:5f:f0:4d:bd:35:bf:73:18:
         03:be:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:33 2025 by rpki-client