Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
File:                     SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json)
Hash identifier:          F0T0NRQi0ujeeHKy/GO2Cn3iFEuI4obZNYYBHC7R/rk=
Subject key identifier:   91:08:AF:43:18:F5:AB:02:1C:37:B1:57:23:56:8D:2B:ED:7D:8E:CE
Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE
Certificate issuer:       /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
Manifest number:          0154
Signing time:             Fri 31 Jan 2025 03:22:48 +0000
Manifest this update:     Fri 31 Jan 2025 03:22:47 +0000
Manifest next update:     Fri 07 Feb 2025 03:22:47 +0000
Files and hashes:         1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: hCWGX7sFLDc1nbUgEUZSL20vpnS21b+PvGBOACnfdbk=)
                          2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: 9kQKFEDsx84E4CpywA7tSIWQG3TRzqIWi8CdC1zIoK4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
        Validity
            Not Before: Jan 31 03:22:47 2025 GMT
            Not After : Feb  7 03:22:47 2025 GMT
        Subject: CN=679c4208-a9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4a:77:91:29:72:8a:16:48:d7:5c:25:70:70:
                    c8:aa:07:4b:31:ac:88:5a:d0:c9:2e:2b:57:15:6d:
                    78:3e:68:df:75:14:62:c8:a1:69:01:14:ad:38:fe:
                    f2:c1:81:5d:bb:69:9a:1d:13:e5:0e:39:ad:4a:df:
                    a7:8c:ee:97:a8:37:9d:62:d5:b3:d9:b7:15:38:c0:
                    eb:e8:e6:c3:95:ad:7a:36:33:32:33:7c:b2:34:61:
                    87:74:c3:69:b9:c1:f3:bc:41:33:95:6f:df:6c:f9:
                    b0:6e:76:5c:8b:a3:73:cc:3f:37:78:5b:71:e2:35:
                    f4:ef:e1:9a:8d:77:14:19:68:93:44:8f:c2:24:08:
                    21:9a:cf:68:72:12:ce:e2:c3:a8:5d:86:77:f4:65:
                    33:91:8f:bb:9e:41:35:f6:86:b6:21:2d:0b:1b:ce:
                    c0:99:57:4f:61:f8:25:ce:5d:e1:f7:70:ff:4c:e4:
                    60:cf:8f:13:84:6e:cd:06:57:af:79:fd:fa:d0:30:
                    48:a4:c7:31:40:02:e3:27:76:e2:b8:74:ac:4a:88:
                    06:e3:b0:3c:72:16:de:6f:5b:54:97:9b:be:85:47:
                    7d:c3:cc:1c:fd:0c:1e:a1:37:e8:fe:1f:d0:92:72:
                    97:c8:c0:09:0e:2e:5f:6d:d9:2f:0e:e8:ba:16:95:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:08:AF:43:18:F5:AB:02:1C:37:B1:57:23:56:8D:2B:ED:7D:8E:CE
            X509v3 Authority Key Identifier:
                keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:54:35:09:54:3c:19:33:07:21:c1:85:c1:e4:6d:72:59:b9:
         b4:28:39:15:9a:90:b8:0e:e6:bb:d8:18:bf:0b:ac:0e:9c:14:
         7b:fb:53:26:c7:44:77:92:c5:b3:40:dc:e2:52:b2:54:93:51:
         d8:c6:7f:4f:43:fc:cb:b5:1d:0f:c4:74:97:7d:a0:9d:07:d7:
         91:b7:82:df:26:af:69:08:74:33:8b:c3:df:0e:84:15:ef:95:
         d4:1d:30:c9:bb:1e:46:5f:87:3a:81:ec:50:c4:11:28:28:9c:
         f2:8b:8f:40:2f:88:50:45:77:94:dc:ee:e8:95:80:58:c4:d0:
         57:c7:85:69:19:82:26:15:25:27:01:20:c1:1c:00:a6:40:52:
         55:fd:b7:85:c1:e3:c6:94:5e:86:51:f5:46:a7:ac:fb:c5:8f:
         5e:73:29:e7:b2:ae:2f:ad:bc:cd:e0:01:0a:91:66:ef:04:c9:
         07:30:a6:fa:c5:0f:8a:04:cc:26:cc:a2:9e:16:3f:1e:24:98:
         49:0b:13:47:93:d0:7e:2c:65:34:39:ff:6c:c1:fb:7b:0d:65:
         98:30:a1:b2:19:3d:a8:2b:fa:91:fe:c0:60:4c:b3:9c:2b:fd:
         a2:6d:61:25:70:47:09:34:61:91:2f:49:84:66:a5:6c:14:2f:
         20:ae:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:25:54 2025 by rpki-client