Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
File:                     4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json)
Hash identifier:          WUxmDaENcWwAntP95EUahq7Cho1ICyIZvptsBlGKG5E=
Subject key identifier:   15:1C:C7:57:D0:21:D3:05:50:91:9B:71:14:A5:E0:01:30:A4:6E:7B
Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
Certificate issuer:       /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
Manifest number:          6C
Signing time:             Fri 31 Jan 2025 05:56:55 +0000
Manifest this update:     Fri 31 Jan 2025 05:56:54 +0000
Manifest next update:     Fri 07 Feb 2025 05:56:54 +0000
Files and hashes:         1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: el11ccOqqCb2zFxAvSOL+4HDAckf5CiKG7f29S0+xAE=)
                          2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: cLMsRe3bjQqt9KTlSv77ZsvirHU5HvmwxB64rB3nwQc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
        Validity
            Not Before: Jan 31 05:56:54 2025 GMT
            Not After : Feb  7 05:56:54 2025 GMT
        Subject: CN=679c6626-2f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:9a:46:c8:15:1c:ab:f1:0d:d9:86:45:a1:
                    d0:05:9b:76:3b:bf:d3:1c:c1:0a:e2:3f:b6:9c:ec:
                    de:c7:4a:a8:d9:a6:51:b1:9c:c1:62:03:56:a2:3a:
                    d6:68:45:1c:59:92:0f:33:17:e6:08:13:f3:5b:18:
                    84:3f:83:7c:e1:86:86:46:42:fc:c0:74:a7:07:f8:
                    09:23:2e:20:2e:a4:35:e3:28:ef:3c:b0:f3:74:54:
                    66:00:53:cc:f5:c6:72:01:9f:f0:e6:10:7a:d6:95:
                    c3:eb:c0:71:6c:98:97:d3:78:85:9d:95:1e:ed:96:
                    b9:1c:c2:23:a0:72:11:20:f8:c7:68:2e:0c:7f:1f:
                    cf:dc:d3:4d:4c:18:96:60:d6:e5:02:76:c4:1b:44:
                    1c:69:bf:0c:06:6a:78:21:91:32:b9:e6:4c:a5:f7:
                    64:c0:2b:71:f5:72:34:7f:8a:b1:bf:6d:2a:5d:4e:
                    5f:2e:67:09:8a:3c:bf:c1:41:5f:7a:db:f5:7e:f5:
                    45:98:24:3b:71:ea:62:15:4f:c7:47:1d:d7:53:f6:
                    25:27:80:c3:94:e9:23:0a:54:c8:7a:45:02:9b:df:
                    ef:9d:2f:09:0a:14:1c:bd:b7:2e:be:ff:78:a3:d8:
                    5a:ec:67:41:66:95:a0:c1:a7:90:8c:31:90:3d:2a:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1C:C7:57:D0:21:D3:05:50:91:9B:71:14:A5:E0:01:30:A4:6E:7B
            X509v3 Authority Key Identifier:
                keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d7:79:f2:57:ab:e4:f3:22:a0:74:f6:f8:1d:4a:9a:78:c2:
         53:d2:31:18:5e:e5:22:15:19:02:7b:85:8a:88:16:35:50:68:
         8e:41:7a:df:94:d6:77:bd:c2:9a:41:a3:71:77:1e:e5:7f:5f:
         77:28:a0:5a:63:ff:93:b7:01:ba:96:c4:53:67:24:16:19:34:
         4e:a1:29:dd:13:cd:bd:72:3a:4e:5b:c8:c8:ba:4f:78:98:0c:
         2c:be:0c:f2:4b:02:5f:2e:96:25:15:67:31:3f:19:81:b4:c9:
         ef:78:f1:9e:4a:ca:da:19:12:b5:ae:27:69:28:22:31:4c:e7:
         92:40:5c:0d:37:90:38:f4:0b:95:f1:d0:3d:bd:35:e8:e6:a3:
         16:e4:cf:cd:ea:b7:c9:4a:67:2e:48:09:dc:2c:44:f8:51:10:
         86:32:65:81:bc:62:24:19:ba:6d:0b:e6:04:a4:a7:c8:85:97:
         32:f9:51:d1:69:86:44:4b:b1:e7:e0:97:9f:1b:60:db:6f:e9:
         77:a0:6a:eb:2a:f6:f3:2e:ad:9e:aa:de:d5:3d:7b:cc:14:f4:
         d6:cf:97:03:e0:5b:dc:01:5d:f1:0a:a3:4b:b3:0a:1c:c2:06:
         85:fe:d3:f5:3f:d3:86:01:41:e9:f0:1a:c8:61:bf:15:8a:e0:
         2b:0a:89:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:06 2025 by rpki-client