Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
File:                     jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json)
Hash identifier:          JTplyzZ6Jeza5oDauM8r9oHJhlRkOt3xXmROolhe8F4=
Subject key identifier:   06:9F:19:19:0B:A4:C8:72:D7:41:F1:3F:70:C7:F7:FA:6B:42:73:48
Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F
Certificate issuer:       /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
Manifest number:          0185
Signing time:             Fri 31 Jan 2025 02:56:36 +0000
Manifest this update:     Fri 31 Jan 2025 02:56:36 +0000
Manifest next update:     Fri 07 Feb 2025 02:56:36 +0000
Files and hashes:         1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: /Asa/M1KGtbNoYm+brIH8tHBQSo5uhl3MJPglsdnIEo=)
                          2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: AiUrlvDcYmkH6kDf7UBXGmz219nsjiQ9ojv7y2Lw3oI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F
        Validity
            Not Before: Jan 31 02:56:36 2025 GMT
            Not After : Feb  7 02:56:36 2025 GMT
        Subject: CN=679c3be4-be67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:37:e5:11:18:ea:f9:41:49:51:10:3b:8a:
                    da:ad:51:ab:2e:99:a7:30:40:3c:f8:6d:06:82:ec:
                    84:9f:c7:70:90:39:b1:90:9b:1c:d9:bb:ee:e6:a3:
                    bf:ac:bf:9a:b5:ff:76:1f:f3:0d:85:c5:64:cb:35:
                    d8:3b:00:15:9b:08:5d:63:a5:b8:6e:44:da:9c:9e:
                    9f:53:94:63:d6:44:40:fd:e1:f0:95:d6:ab:60:66:
                    64:be:ae:21:47:06:15:1c:82:f0:82:82:e3:b2:66:
                    b3:6b:ef:19:52:00:8c:69:94:4a:8b:14:5e:a5:bc:
                    fb:c3:9d:a7:7c:a7:33:b6:25:60:5a:9b:22:12:98:
                    94:1d:76:7b:bb:f9:94:e8:1e:e2:db:87:8a:8d:d2:
                    3f:f2:31:95:ac:8e:ec:b4:19:e7:97:75:bb:ad:fb:
                    18:73:72:db:ca:ce:06:a4:4e:f8:16:3e:32:9d:8e:
                    53:34:1f:2f:7c:2b:53:69:91:ac:ba:1b:ee:2b:3b:
                    3c:9d:73:c2:7f:54:be:33:62:fb:0d:93:a9:36:58:
                    d2:3c:cd:c4:ce:12:cb:80:ee:91:92:ca:95:a9:94:
                    69:34:87:93:45:0c:c5:c8:85:fc:46:3d:18:d4:74:
                    ae:2b:29:4c:1e:7b:44:4c:76:2f:a7:3d:16:30:56:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9F:19:19:0B:A4:C8:72:D7:41:F1:3F:70:C7:F7:FA:6B:42:73:48
            X509v3 Authority Key Identifier:
                keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b0:00:7c:d1:af:40:ce:c0:ca:9c:56:64:5a:9c:b8:e4:c0:
         16:e6:c6:b2:d9:0d:13:dc:65:0b:1c:d8:12:44:e8:e4:80:3d:
         2b:b3:af:86:46:d3:1e:2c:fb:04:f5:36:1a:6f:5c:9c:82:d2:
         9e:d3:19:be:9e:7f:f9:1a:0b:b7:13:a0:83:85:44:bb:3c:63:
         fa:1c:73:ff:93:a0:59:67:a3:8a:71:c4:62:a4:1a:26:a4:82:
         8d:db:51:df:3a:18:aa:46:dc:0c:98:14:88:18:d2:6a:6e:af:
         ca:3d:27:e7:64:46:7c:d1:28:7e:2a:18:e7:b4:77:d8:04:2b:
         52:c4:f1:a4:95:07:53:24:37:d9:92:00:3e:fa:16:4f:bc:27:
         84:82:56:74:67:e9:c2:f2:48:76:ab:b7:b8:75:27:6d:d4:fb:
         e4:af:af:05:ed:c8:71:c0:3c:a8:c6:c4:c5:25:c0:31:b2:b1:
         f6:5b:6d:ed:cf:2d:4b:2b:ae:a0:2b:d3:0a:c9:bf:6a:81:7f:
         f8:e4:0f:bb:d1:a8:86:19:a7:80:50:0a:b0:e8:c9:0e:ed:2a:
         03:c3:36:57:f1:91:8b:20:41:b5:ab:e4:96:87:e3:e2:fb:28:
         21:ad:76:6f:88:ae:68:56:88:a3:47:36:bf:45:57:09:5e:b7:
         4e:4e:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:32 2025 by rpki-client