Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
File:                     UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json)
Hash identifier:          PabqSIWFmpL2d22+zOMwQp6+8TxTRQrFCNPNy2D+nSY=
Subject key identifier:   59:E5:1B:68:57:BA:6C:FB:95:CA:16:A2:CA:FE:EB:E4:BD:C7:E6:BE
Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97
Certificate issuer:       /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397
Certificate serial:       07FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
Manifest number:          07F5
Signing time:             Thu 30 Jan 2025 20:56:24 +0000
Manifest this update:     Thu 30 Jan 2025 20:56:23 +0000
Manifest next update:     Thu 06 Feb 2025 20:56:23 +0000
Files and hashes:         1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: bm2xcksIKjvOBEuhNiIgge5iThvYQuWsRPkAc9n09ow=)
                          2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: P441cSLHyLoUjwh77ci4OGTBUeTeIRb4uG1co2Vb+f8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397
        Validity
            Not Before: Jan 30 20:56:23 2025 GMT
            Not After : Feb  6 20:56:23 2025 GMT
        Subject: CN=679be777-dcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:15:df:9c:db:f4:ff:ae:71:ab:8a:1b:2e:53:
                    01:85:8f:35:38:2f:cb:b3:2e:81:ec:99:28:39:c6:
                    e8:03:0c:56:14:8d:a7:07:0d:1a:20:7f:ce:61:d8:
                    17:bf:9b:97:48:bf:84:b1:2d:d1:4e:b9:0a:5c:33:
                    fb:ef:59:0e:2c:68:71:8e:2e:8f:88:e0:5d:95:16:
                    12:10:25:2d:33:ed:c9:98:82:0d:d1:e5:75:43:50:
                    ef:38:6c:57:7a:f3:70:a0:6b:e9:f3:06:ee:66:4c:
                    20:71:4e:b4:99:96:14:54:27:19:ea:fc:91:b6:c6:
                    3f:4f:b5:9e:ab:94:ea:b5:08:15:9a:0d:b8:88:88:
                    32:fa:95:b1:6a:f5:9b:ba:16:70:34:02:63:f0:2d:
                    b2:45:35:ca:81:96:fb:c0:3a:64:2a:3b:6d:bb:b7:
                    87:e7:af:92:98:7b:91:4d:38:50:ba:74:78:23:b8:
                    eb:ba:17:f7:0a:8f:b5:b9:a1:f8:1c:2f:20:80:f1:
                    f4:40:f5:69:40:c2:81:25:f9:dd:c6:b9:c3:19:69:
                    c8:dd:c3:58:59:78:50:8a:de:3c:e0:ea:e1:b6:d7:
                    f5:b7:8c:07:9b:b2:f8:ef:14:51:97:86:c9:d8:17:
                    7c:6d:9c:e5:d3:90:8a:02:95:67:25:da:c7:10:98:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E5:1B:68:57:BA:6C:FB:95:CA:16:A2:CA:FE:EB:E4:BD:C7:E6:BE
            X509v3 Authority Key Identifier:
                keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d3:8b:dc:f4:c6:8d:31:eb:1a:2f:a0:e0:d4:73:5c:03:9a:
         b6:0e:70:c4:6d:a6:33:26:89:f6:88:be:2f:01:09:e9:87:fc:
         e3:b0:8c:7e:e4:9e:46:a7:e4:6c:8d:b4:96:a6:23:54:c9:1f:
         d0:f3:2a:e8:4b:ea:15:12:31:77:7f:29:a2:43:6c:bb:13:60:
         32:dc:00:70:56:1d:2e:0a:5a:4e:70:6f:42:d4:4e:56:80:71:
         31:a0:cc:e1:de:2a:ec:cb:d0:65:c6:6f:75:4e:04:91:55:a7:
         18:fc:10:b2:ee:09:58:dd:d1:a7:f6:4c:0d:94:fd:b5:d8:0f:
         c5:75:d8:2e:6f:6e:5d:31:ee:19:c4:ff:35:1a:18:75:c2:b8:
         50:82:56:16:42:ce:68:d9:99:0a:0b:98:8d:ce:89:b9:6e:81:
         87:26:94:0d:dd:6e:1a:f7:16:1b:ea:4b:2a:98:81:0c:72:c9:
         fc:77:67:2c:90:36:71:84:1b:c1:2b:56:79:e2:fe:c6:94:f9:
         0d:39:08:e1:84:2b:09:50:fd:d3:e1:10:22:2d:a4:88:4b:c7:
         f5:7a:ae:f9:1c:65:59:65:c9:88:c1:88:af:ea:5a:c3:89:7b:
         df:11:d6:1a:47:df:97:72:e9:43:a4:2e:5d:e5:a3:71:63:c2:
         e1:82:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:19 2025 by rpki-client