Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
File:                     sEu6HxjA5wgx81T3RV7hXTIpQbM.mft (raw, json)
Hash identifier:          bMvPoFdzcY4rgh/IytkkNrgseVNlG49JK3hrtaa+Bpk=
Subject key identifier:   3E:24:0C:42:F6:FE:ED:30:08:0D:6C:6C:39:3C:59:99:27:81:72:D8
Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Certificate issuer:       /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Certificate serial:       0645
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
Manifest number:          063A
Signing time:             Thu 30 Jan 2025 22:32:27 +0000
Manifest this update:     Thu 30 Jan 2025 22:32:27 +0000
Manifest next update:     Thu 06 Feb 2025 22:32:27 +0000
Files and hashes:         1: sEu6HxjA5wgx81T3RV7hXTIpQbM.crl (hash: ve6yFwpZPl/VR2dFJUlVNTo945EtVjSTUNV4R7X9KFc=)
                          2: DA33C49E08E211ED8B10721AC4F9AE02.roa (hash: Rk/+lADA6gcgkQ0X84YplZfwCDuN0k5YWfT7OkmFseI=)
                          3: 2E9F8D4A08F911ED8F90BA78C4F9AE02.roa (hash: qQOIJ0lcwqmCJOnDFoB5aMDri/0+odCLlhKVJ/uxcsQ=)
                          4: 710DB204831D11ECA37CC12EC4F9AE02.roa (hash: /OB040tMw9qyOdBlNACkUKZ8Xy3MrWKpNRv3p9KED/k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Validity
            Not Before: Jan 30 22:32:27 2025 GMT
            Not After : Feb  6 22:32:27 2025 GMT
        Subject: CN=679bfdfb-fecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:44:14:2d:08:b0:4c:85:42:26:30:f2:ad:
                    8e:ee:da:10:b0:73:d7:35:0e:4a:d4:d6:ec:3c:1a:
                    8a:43:38:99:6e:17:67:32:9b:69:01:dd:40:f1:bf:
                    bf:7c:0b:ac:db:3a:21:db:c2:a0:5b:c4:21:a0:01:
                    6d:a1:4c:e6:69:7f:be:7d:79:15:61:ff:2d:b3:39:
                    e1:9c:35:c6:4b:83:35:1b:ad:fd:13:9e:e7:65:a0:
                    12:60:81:a3:c8:d5:b3:3c:67:73:47:c3:3f:f3:b2:
                    29:6f:60:3e:18:34:b9:a4:73:b7:9e:67:23:b6:32:
                    1c:f7:c4:05:98:4e:fd:9c:46:c3:07:09:6b:e1:9d:
                    b3:f4:3b:8b:d7:66:1d:fb:58:67:78:78:02:dc:41:
                    5d:43:86:4d:18:2c:71:78:9e:39:ce:05:84:9c:f2:
                    8d:45:f2:48:83:b7:07:19:c4:fc:22:93:1f:b6:8f:
                    2e:b5:10:9f:a7:2d:67:3c:eb:cc:af:94:69:48:31:
                    65:61:a3:c7:4d:0d:69:ac:f9:d1:5a:d6:11:07:cf:
                    c6:1e:c9:8a:84:bd:ba:84:3b:7d:91:b0:1a:68:60:
                    00:1f:5c:2e:1b:b0:00:42:50:cf:75:5b:39:7f:de:
                    3c:cb:f4:7a:02:2e:9c:5c:8c:72:6d:47:d3:f1:a3:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:24:0C:42:F6:FE:ED:30:08:0D:6C:6C:39:3C:59:99:27:81:72:D8
            X509v3 Authority Key Identifier:
                keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:56:5d:3b:8d:30:fa:a3:4d:f6:eb:7e:27:d4:5a:bf:ab:
         ed:80:1c:ab:4d:5e:38:35:e6:ab:5e:b8:72:84:8a:6e:5c:77:
         03:d8:93:75:db:d1:a5:e4:c0:21:aa:76:8c:e2:3b:e0:a5:01:
         05:18:52:9d:ef:53:c7:8a:56:6d:39:79:ae:51:e2:f6:76:73:
         f9:b6:cb:ae:4b:63:2b:3e:65:b1:cc:89:5e:fe:31:d0:1c:7f:
         cd:94:6a:d8:84:01:58:92:db:52:5a:04:6e:56:90:7e:56:6a:
         d6:dc:a0:35:2f:19:b0:8c:a9:3e:64:9a:b1:af:e2:5a:b4:fb:
         58:f3:fa:d1:21:01:47:f3:44:0b:14:93:0a:fa:ba:f8:5a:88:
         59:9f:ff:57:a7:6c:06:aa:1f:0a:d9:df:0a:a4:d0:ee:7a:72:
         18:35:ec:c3:ee:04:54:9e:43:bd:2d:61:0d:26:12:c0:6e:d2:
         23:d4:17:76:8a:43:d7:05:b7:81:03:77:60:95:72:05:57:97:
         35:00:ff:c0:92:7a:a1:f4:ff:40:2b:e4:de:14:52:a3:d7:00:
         53:aa:ff:ec:60:72:0f:e4:01:16:de:70:ca:43:d6:a4:03:e2:
         5f:45:f6:56:e0:95:dc:28:cf:f9:68:47:1d:50:58:f9:1d:e2:
         f3:4d:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:10:36 2025 by rpki-client