Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
File:                     fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json)
Hash identifier:          iq2CpEeZq7NJjyqLUcWeURYWEzEq1tWkhvCF++xJdiQ=
Subject key identifier:   DE:B8:EF:74:2C:7B:11:9B:57:F7:7F:FE:C3:8D:69:3E:CD:38:22:53
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Certificate issuer:       /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial:       1490
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
Manifest number:          1481
Signing time:             Fri 31 Jan 2025 15:35:09 +0000
Manifest this update:     Fri 31 Jan 2025 15:35:08 +0000
Manifest next update:     Fri 07 Feb 2025 15:35:08 +0000
Files and hashes:         1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: cYrOBWGxesNhTJr4AvafOMg88G7ZMeGWixTvcq/WfLI=)
                          2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YNZrHGd8UkVm/DTmJOLPzWf76BUdR5xOiCV0HPKmn3c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5264 (0x1490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
        Validity
            Not Before: Jan 31 15:35:08 2025 GMT
            Not After : Feb  7 15:35:08 2025 GMT
        Subject: CN=679cedac-b88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:55:52:1c:8b:1b:1a:1e:b2:30:96:0d:d8:
                    05:f6:ae:c2:5a:f5:bb:61:55:96:4d:ee:76:87:1a:
                    9c:a8:64:09:02:4f:d8:cc:3b:07:ec:24:f1:9b:a6:
                    78:4c:41:5c:13:32:db:22:d4:3d:04:7f:60:74:58:
                    ad:9b:ce:16:8b:e5:1b:8a:e8:5d:0d:7d:12:8a:94:
                    37:b2:06:52:f6:53:7e:34:f9:8d:78:67:fc:3b:26:
                    1e:ff:8c:71:7d:87:29:76:3c:9e:7f:9f:da:6f:54:
                    66:97:49:29:b4:a9:a3:e3:68:46:bf:1c:4c:0a:07:
                    27:66:1e:95:16:25:c2:1b:ca:7b:86:30:60:eb:a2:
                    98:64:6f:ca:a1:51:07:51:e8:0a:77:3a:38:ed:b1:
                    ff:32:b9:83:76:b8:ff:53:71:e1:b8:6c:c3:32:66:
                    93:ec:a1:aa:27:15:94:2d:e1:d9:02:af:f7:61:22:
                    1f:22:f4:fb:e1:8e:39:af:2e:b3:15:e0:8c:c0:68:
                    42:8e:bb:2e:6a:09:12:c6:16:36:b3:bc:db:cc:9b:
                    0c:54:40:a4:39:6e:9d:73:c4:9f:5e:18:7a:a6:ba:
                    b6:40:85:39:90:88:ba:c7:92:71:d6:cb:26:e4:9b:
                    59:18:66:df:44:ed:3a:dc:44:75:da:b6:50:0a:c4:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B8:EF:74:2C:7B:11:9B:57:F7:7F:FE:C3:8D:69:3E:CD:38:22:53
            X509v3 Authority Key Identifier:
                keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:da:70:44:eb:ca:2a:26:1d:1b:1e:21:17:1b:ed:e7:b4:
         c5:89:5d:d2:92:80:93:57:7e:43:7d:32:73:78:f3:b9:cc:ac:
         49:90:01:f2:8e:b6:73:4a:73:0d:54:79:d5:3c:2b:60:62:15:
         40:8c:c0:86:c1:08:6c:56:27:e2:6f:e2:f5:bc:91:b2:92:25:
         a4:45:b4:14:f6:22:4c:e2:93:86:4a:15:f9:47:bc:3c:73:15:
         4f:b4:8f:07:d3:5a:f2:3f:a3:fd:1b:a9:fa:2c:04:34:03:fa:
         10:a7:58:a4:f3:71:3b:d7:ce:91:36:1e:5c:23:10:98:6c:1e:
         0f:82:3a:bc:68:10:24:7f:e1:33:e2:48:0b:57:a8:61:74:87:
         3f:09:8f:82:ad:be:36:6d:55:c3:d8:1b:c1:2b:59:f2:c1:08:
         e2:ca:21:03:ac:bf:4e:12:e1:02:ea:6a:cd:27:47:33:43:f0:
         18:1c:b4:dc:a9:ef:b4:11:0a:01:e5:f8:25:64:34:81:1c:40:
         62:0e:5f:d1:19:11:a7:7d:dd:b6:f5:22:9c:3e:38:7b:b1:90:
         54:68:a2:e4:c6:b1:fd:b3:47:07:68:87:49:5e:b4:6b:cf:da:
         c4:3e:08:3a:2c:0c:18:a3:9b:91:fc:c1:c5:ee:eb:cf:e1:cd:
         a4:63:12:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:32:48 2025 by rpki-client