Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
File:                     Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json)
Hash identifier:          8TIJHte6ygDNeSBJ7fGeWKlWBehuBD2bET6yPQ8lXK8=
Subject key identifier:   99:C3:26:F8:2A:53:AA:69:97:E8:CB:1E:FB:B9:CD:ED:F8:91:E4:A7
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Certificate issuer:       /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial:       0C28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
Manifest number:          0C1A
Signing time:             Fri 31 Jan 2025 18:21:50 +0000
Manifest this update:     Fri 31 Jan 2025 18:21:49 +0000
Manifest next update:     Fri 07 Feb 2025 18:21:49 +0000
Files and hashes:         1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: BNFRW9V2Ui8eDoaSj+aXG8+QtM4XTZoqtMDwDLW+T18=)
                          2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: ZJYTa6/4Mo2ZhGCzzSDSUlHgf//iLKJXvM086ZIoSG4=)
                          3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: y1Ah/sCRnzTCZTtDJj4VAK1Ak4axz54qZlJpOkCDzUE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3112 (0xc28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
        Validity
            Not Before: Jan 31 18:21:49 2025 GMT
            Not After : Feb  7 18:21:49 2025 GMT
        Subject: CN=679d14be-84c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:44:62:02:52:16:f7:02:95:8c:be:52:af:
                    50:0a:2a:8a:54:68:20:57:92:31:22:3a:d7:4a:bc:
                    4a:a1:71:22:9d:19:35:0e:6b:9e:54:7c:3f:85:69:
                    21:57:dc:1b:08:f6:1d:be:75:8d:b7:96:84:0c:63:
                    37:7e:c4:bb:ad:40:d6:b6:fb:9d:8f:f9:42:cb:29:
                    32:ca:26:6a:ee:9e:77:a8:b9:2b:79:e4:29:08:65:
                    30:0f:e6:2a:6c:f2:85:75:9e:9b:40:01:5a:4a:a8:
                    fb:8b:72:02:00:bd:cd:92:3b:04:df:be:1b:aa:f1:
                    cf:58:c0:82:c7:66:99:6f:8e:62:28:3e:ff:31:2f:
                    e9:57:25:94:60:f4:c2:6f:9b:af:d8:c1:82:93:81:
                    53:a8:42:80:cc:fb:73:c9:fb:b4:fa:d5:a4:e8:d7:
                    21:b8:2e:0d:dc:4b:e1:dd:3d:d1:d3:fc:62:91:78:
                    5d:dc:55:4b:07:76:38:3e:65:76:fc:af:73:3a:e2:
                    a9:43:1a:81:4c:d2:85:13:72:04:af:1a:bb:79:12:
                    9e:57:ea:09:a6:fc:1a:4f:a1:72:b3:76:29:d5:72:
                    5f:ba:16:c7:62:2e:ae:1b:d3:de:d3:ac:fc:60:01:
                    db:fe:ee:b7:45:37:e4:80:33:b5:35:bd:60:3d:f7:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C3:26:F8:2A:53:AA:69:97:E8:CB:1E:FB:B9:CD:ED:F8:91:E4:A7
            X509v3 Authority Key Identifier:
                keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:8f:0d:23:fe:cf:b3:4e:68:82:eb:c2:c5:8e:64:28:31:
         61:9d:70:c4:19:bf:77:4d:de:44:2f:ef:e5:50:2d:93:97:cf:
         52:50:4d:1e:1d:53:56:2d:d9:82:18:2b:6a:da:cd:a2:21:b1:
         15:2d:95:f8:4f:05:b9:be:df:1f:ec:81:97:23:c0:6e:1b:a7:
         07:63:75:a4:5c:6c:e5:95:b3:96:d1:79:4a:21:b8:68:47:57:
         1c:21:ea:fb:9f:f7:4f:ed:3d:c3:d3:30:ad:bf:44:c6:33:a3:
         52:11:85:fe:ff:99:cc:12:b2:ef:92:20:a8:2f:3d:73:d8:55:
         6c:7d:04:86:8e:12:9f:f7:a0:ca:2f:4f:31:db:53:3f:34:03:
         d3:e8:02:46:d1:69:e7:cf:d3:07:e5:b5:0d:8d:fd:a9:2b:5c:
         ee:0c:0d:f0:cb:1f:a0:51:2b:81:58:b6:72:ac:c0:ad:7f:27:
         c5:f1:a1:1b:1f:f7:71:d6:2a:56:27:25:4c:e7:bf:bf:48:0c:
         c7:3c:0c:e1:9d:7f:fe:2f:ae:64:14:a8:62:c5:83:d6:01:ff:
         58:63:3a:50:7f:4b:51:97:23:42:cc:f9:8a:a9:7e:55:33:20:
         60:53:6e:41:b3:8c:7a:4a:94:7e:cc:bc:74:e5:aa:3d:4a:c9:
         8d:34:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:40 2025 by rpki-client