Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File:                     pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier:          knh0R2FGte9v1yEqMQw4SrNKNAf3iq1sSwpKcl2OZJo=
Subject key identifier:   B3:DD:15:04:16:77:89:23:F7:55:49:9D:3C:16:AC:CB:8B:33:74:23
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer:       /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number:          93
Signing time:             Fri 31 Jan 2025 05:38:24 +0000
Manifest this update:     Fri 31 Jan 2025 05:38:24 +0000
Manifest next update:     Fri 07 Feb 2025 05:38:24 +0000
Files and hashes:         1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: DszAk/YeEUmoEjnkyGrWOiFlOEJ1/yrq89pe6Dz5Jag=)
                          2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: KtwKCiu1tgQ6R6+i3JU5soTLFnUBFXS8yd45yO6BoNc=)
                          3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: s7o1AVwqwtRLydyEtYjNo04BCkqu6ThzcBNfODjnDVk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
        Validity
            Not Before: Jan 31 05:38:24 2025 GMT
            Not After : Feb  7 05:38:24 2025 GMT
        Subject: CN=679c61d0-3cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:56:2d:bf:94:b6:b7:a7:cb:4b:93:f5:fa:
                    37:ae:ae:78:81:6f:da:76:42:f2:a6:6f:b3:02:4f:
                    b7:30:b1:30:eb:6c:4e:b0:df:de:dc:da:7f:2d:75:
                    de:44:45:dd:da:09:c9:ed:94:64:ee:d1:1b:36:df:
                    c0:cc:3d:97:dd:1d:d2:8b:aa:43:ef:41:40:c8:4e:
                    3f:ae:65:41:10:66:32:c2:13:74:67:21:85:91:68:
                    a3:25:77:1d:72:41:0e:f1:42:07:e4:cf:92:c4:04:
                    d9:47:f3:6e:f6:31:2d:66:1a:f4:ba:0b:ef:0b:62:
                    4c:48:07:c6:e1:0e:8e:be:89:e0:94:4c:93:c3:49:
                    a5:a2:89:41:a1:4b:23:ae:1c:93:f5:70:95:73:00:
                    a9:6c:8e:b2:df:ae:bd:4b:7c:c0:86:9c:c2:22:14:
                    63:41:fe:75:92:38:89:0d:b1:87:8c:1f:0b:84:ca:
                    13:14:e4:10:b5:a8:01:69:64:c8:b2:89:89:d7:47:
                    26:d0:35:61:94:a6:3c:4a:84:b0:f4:ac:e8:23:53:
                    4b:d9:11:9b:e9:d0:a4:80:07:4b:7b:6c:aa:cb:d2:
                    84:80:9c:cc:5b:96:42:94:16:71:40:18:9c:a3:36:
                    f3:94:d5:4e:eb:ff:75:f8:57:b6:81:6f:17:1f:b5:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DD:15:04:16:77:89:23:F7:55:49:9D:3C:16:AC:CB:8B:33:74:23
            X509v3 Authority Key Identifier:
                keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b0:24:29:14:94:85:15:b6:8a:6d:60:92:48:5c:fc:00:18:
         d8:d0:1e:a9:09:4d:e3:8a:b7:ff:4d:53:74:4e:93:ed:69:05:
         76:92:1f:72:5b:30:49:ac:fa:0a:cd:f6:3e:1d:2b:f9:75:73:
         d0:c5:55:09:a1:62:0a:59:48:88:27:37:16:d7:0d:ca:65:d0:
         e0:71:e9:32:fa:d0:c7:7f:a8:2c:00:97:27:df:32:c8:4e:61:
         73:7d:4c:eb:50:88:86:e0:73:2b:69:a1:88:95:02:df:a6:76:
         bf:bf:e2:9c:24:2a:97:bc:7a:fc:93:36:61:66:e7:89:25:d0:
         5f:b8:19:e7:eb:74:d0:f1:4e:23:9e:c6:3b:41:a3:91:06:0e:
         cb:ab:a9:0f:1d:a3:1d:9a:89:cb:90:5f:26:3e:1c:43:f2:11:
         fc:5b:37:05:f0:9f:08:b2:64:7b:77:01:fd:00:17:c7:8f:f4:
         57:59:86:31:39:dc:9b:7b:5c:54:0d:3b:6e:dd:5a:df:0f:73:
         13:f6:e3:f9:d5:03:2d:1d:3c:37:be:5d:37:f2:f7:2e:4b:dd:
         32:70:4e:b5:d1:8f:24:45:80:96:9e:8b:b7:97:4f:6a:1a:29:
         98:d7:cf:d0:74:90:43:6a:9a:c4:da:d9:5e:93:34:b3:b1:96:
         80:f2:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:08 2025 by rpki-client