Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
File:                     MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json)
Hash identifier:          H44fZ8u48SEK+Rl+M6pSS22VXTXgCKPM+A22YK/3xC4=
Subject key identifier:   1B:CB:69:59:6F:5E:F6:AC:E0:61:C6:0D:CE:AA:95:BB:F4:41:7B:E7
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       033F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
Manifest number:          0334
Signing time:             Fri 31 Jan 2025 01:13:08 +0000
Manifest this update:     Fri 31 Jan 2025 01:13:08 +0000
Manifest next update:     Fri 07 Feb 2025 01:13:08 +0000
Files and hashes:         1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: J+ySt0AkFM0Uv0LhUhbkmgWnkpudjV2XuFNgIFUHDWE=)
                          2: 4FEED19CACA111EFBA21832EC4F9AE02.roa (hash: 8bErV7mSfrVJlz6hy1FtUxNUANyHN6JlTH5gizdNosY=)
                          3: DD7E5CF29C3F11EFAB09C331C4F9AE02.roa (hash: 4z/BmPUjFoHSRBOOi3eLhOy6FBXwv/Bm1v1/mOuxKhI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Jan 31 01:13:08 2025 GMT
            Not After : Feb  7 01:13:08 2025 GMT
        Subject: CN=679c23a4-c5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:10:a2:18:62:d4:c0:24:fb:4e:f7:c9:f0:
                    0a:be:5f:46:9e:ff:78:96:af:ac:77:aa:26:36:79:
                    dc:6b:88:57:17:39:6a:36:03:06:e3:7f:06:bf:48:
                    b6:10:93:4d:95:40:ab:15:27:2c:cc:22:0d:0a:10:
                    e7:26:79:e0:cd:35:79:44:a8:75:a2:81:41:13:27:
                    20:fe:55:71:f3:f2:ae:32:19:89:eb:bf:9c:44:58:
                    b4:7a:7c:93:df:23:76:7d:4d:15:80:72:8c:ae:2a:
                    d4:42:de:ba:4a:f6:e0:12:24:8e:00:8c:ae:e2:28:
                    2c:d1:6d:d4:25:0e:ef:9c:7b:a6:0f:25:76:fa:dd:
                    b3:aa:eb:3b:8b:36:a6:ae:9f:8a:35:72:e8:9f:e1:
                    24:34:e3:89:37:f3:72:25:77:5b:df:78:c1:b9:20:
                    0f:67:24:a7:71:61:35:0d:bc:ea:17:82:be:46:10:
                    de:e4:98:95:c5:8b:e0:76:f2:69:c8:6f:8b:fe:dd:
                    05:57:95:b8:02:3e:49:1b:e9:79:da:33:e4:7d:55:
                    ca:6d:cb:a0:1a:78:24:2e:cf:b9:8d:2b:d6:b5:b9:
                    24:73:7b:51:81:65:4e:d6:39:c5:0f:67:8c:ee:5a:
                    ea:45:b4:9f:dc:a4:7c:54:0a:20:04:a6:6a:7b:5d:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CB:69:59:6F:5E:F6:AC:E0:61:C6:0D:CE:AA:95:BB:F4:41:7B:E7
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:19:07:7f:0a:97:6b:23:42:75:a4:15:3f:60:ff:3e:8f:
         8c:e1:a4:b3:80:fb:b4:ae:ca:13:23:bb:7c:57:0b:3d:03:76:
         a8:9d:b7:29:66:8e:37:ae:cf:68:b5:99:22:02:af:cb:1e:9f:
         02:d5:59:00:6c:da:67:01:30:c3:0a:72:bd:e1:86:9a:23:a8:
         c6:df:c7:68:08:84:a2:a0:a0:d9:18:e1:72:82:eb:10:f8:54:
         0d:dd:85:64:52:a3:72:64:6b:61:02:2c:c9:d2:8a:b0:20:f5:
         04:12:06:f3:aa:b8:e1:88:0d:69:f4:95:d4:f5:11:aa:12:fa:
         5e:d5:20:3c:36:76:ff:ea:35:5e:25:23:dc:6a:7a:3b:6f:1e:
         75:4e:cd:8c:50:cd:f6:76:f3:4e:ef:b9:96:62:31:26:50:55:
         15:fc:ea:e9:53:4e:2f:19:1c:87:a0:46:e8:22:5f:7c:4c:10:
         9a:2f:6d:8b:0f:15:25:24:f0:30:34:76:c5:a0:b4:3d:ef:ef:
         7c:ef:f6:c2:56:1a:43:6d:54:e6:15:fb:0a:ba:c7:fa:02:94:
         b9:da:88:d9:90:9f:d6:ae:94:d4:55:22:fa:ff:e8:5e:76:f3:
         6e:03:b1:4a:63:93:2b:ec:4b:97:9e:3b:e7:23:fd:55:f0:3e:
         42:a2:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:01 2025 by rpki-client