Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File:                     ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier:          JpDAcwU5eGKDQdtL3U4ulHlYGA9dLEs3zTdPjFwYMKQ=
Subject key identifier:   5D:5A:E0:26:ED:57:30:F2:D6:44:84:43:DF:22:A7:95:FB:27:FA:B1
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer:       /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial:       0336
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number:          032E
Signing time:             Fri 31 Jan 2025 01:10:01 +0000
Manifest this update:     Fri 31 Jan 2025 01:10:01 +0000
Manifest next update:     Fri 07 Feb 2025 01:10:01 +0000
Files and hashes:         1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: TPLYUrgr9ubH0klgdXmlwxanumng9F0p7NMbDxe1x2A=)
                          2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2V4s60CBepyFsN4hkIBA1O5APSOWrUwQgr6qjDAHtko=)
                          3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: PpnJ+skHtxU80Y62k+Cdmycu9izolR2+X8heLZ727nU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
        Validity
            Not Before: Jan 31 01:10:01 2025 GMT
            Not After : Feb  7 01:10:01 2025 GMT
        Subject: CN=679c22e9-641a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:ff:99:21:6e:25:2e:48:f0:08:f7:11:ef:
                    da:d9:1f:28:30:43:20:fc:f5:5e:5c:09:b0:7d:37:
                    58:3f:75:7e:fd:4d:1c:58:6c:0d:c6:3f:9b:7f:a9:
                    23:89:10:48:aa:c3:de:57:9c:69:7b:b8:2e:ae:12:
                    3c:f1:b0:8e:c9:bf:c3:7b:e9:a4:30:a7:eb:3a:75:
                    da:86:22:24:39:1c:b7:2d:a2:bd:d7:84:39:07:88:
                    56:fb:9f:14:0f:c0:de:c5:bc:53:86:7f:47:7f:0c:
                    51:d4:d6:4b:b6:5e:aa:a9:22:0d:20:e4:cc:3f:0a:
                    5f:90:30:29:e1:d2:14:2a:76:86:8b:f7:27:fd:3c:
                    af:e0:3b:07:7f:34:b1:e8:e9:c4:a5:34:87:42:6f:
                    f6:8c:db:81:2d:d5:87:05:54:af:60:96:ba:01:e3:
                    fc:a7:3f:f9:98:a1:07:b9:e7:46:ab:b8:01:ec:2b:
                    f6:f2:41:b1:19:cf:d2:d8:6a:18:dc:0e:4e:6b:2e:
                    1d:9b:eb:86:eb:b8:a3:45:f9:f8:d5:7f:e3:5b:3c:
                    a3:d1:4d:41:74:0f:0d:91:8b:0c:f2:4e:83:74:91:
                    12:81:b0:ff:7a:e9:20:8c:72:1c:d7:9c:09:16:85:
                    90:58:94:52:59:5d:48:3f:19:2e:f6:a7:04:c9:72:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5A:E0:26:ED:57:30:F2:D6:44:84:43:DF:22:A7:95:FB:27:FA:B1
            X509v3 Authority Key Identifier:
                keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0b:33:78:93:5b:51:c8:3d:29:4e:d2:0c:3d:bb:fa:b3:c6:
         17:9b:f7:e2:69:0e:26:0d:3f:63:88:58:b4:a8:8a:d3:72:25:
         9f:4b:6e:17:3f:3d:2b:81:b3:9d:7f:c9:6f:fa:e6:89:db:fc:
         2f:a7:21:ab:ff:47:96:5f:2b:17:e6:58:e2:38:97:b4:44:d6:
         81:31:38:a6:ec:e1:ec:30:d0:01:1d:2c:6c:5a:36:66:04:a3:
         66:71:d4:05:f8:6c:66:c3:b0:14:bc:05:a2:b0:c9:8f:4b:e5:
         af:57:6f:01:41:a1:73:8a:57:d1:61:d8:c2:5b:16:cd:db:f0:
         37:df:80:b4:10:e8:57:76:db:8c:72:4e:5c:ef:28:bc:77:a8:
         4e:19:10:2a:aa:e4:51:6a:d8:b2:42:d5:e9:6b:a2:1a:70:6d:
         3b:63:af:bf:b5:f6:12:6f:38:3c:c0:ab:b4:4c:09:e2:a9:60:
         02:a0:ee:f2:a4:ce:e5:48:f6:2b:b9:62:e1:fc:79:90:b8:f3:
         ca:2b:46:09:5b:56:15:a2:78:b8:d6:c8:74:20:33:7d:88:63:
         c3:bc:37:70:7d:6a:10:7e:ba:e7:cc:ac:6d:6f:7b:ad:58:9c:
         0a:ac:22:7b:6c:2a:69:13:ca:54:61:5f:91:2f:5f:4d:24:34:
         81:17:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:12 2025 by rpki-client