Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
File:                     UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json)
Hash identifier:          g/a0bmCSox52UhjdIIYWBQmTVhg2TpUd/QnrtFy2AM8=
Subject key identifier:   0D:A7:99:E4:96:DC:36:3E:76:65:FA:66:52:F8:8B:50:87:3B:5F:BB
Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3
Certificate issuer:       /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
Certificate serial:       073B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
Manifest number:          0733
Signing time:             Thu 30 Jan 2025 21:40:26 +0000
Manifest this update:     Thu 30 Jan 2025 21:40:26 +0000
Manifest next update:     Thu 06 Feb 2025 21:40:26 +0000
Files and hashes:         1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: 9vtXBOgXVd9ap6IkKZh5ZLYFu+4SoFEzLk58vDOXZx8=)
                          2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: zj2/IQcxrFfQP3sb/0xMN/kSgo/BiJLwAfEBd9gJdG8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851 (0x73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
        Validity
            Not Before: Jan 30 21:40:26 2025 GMT
            Not After : Feb  6 21:40:26 2025 GMT
        Subject: CN=679bf1ca-1a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:87:0c:78:da:97:78:f4:b2:07:88:65:02:
                    6c:88:e2:64:16:a0:c3:54:03:c8:39:f0:ea:a1:bd:
                    ea:72:c7:82:eb:97:52:a1:58:74:63:6b:81:98:0b:
                    c8:a2:4c:64:a2:3f:60:5d:df:25:fe:86:00:a9:fc:
                    be:c8:db:2c:6b:5e:ff:b4:35:65:ae:4b:29:87:c1:
                    b4:ed:38:af:31:04:ad:ba:fe:0a:03:8e:5b:50:93:
                    3e:2a:76:02:79:cd:89:1f:1f:2c:af:8c:cb:d9:4c:
                    50:3f:62:49:8e:60:3e:32:a5:b3:e7:af:f1:01:c2:
                    4d:12:fa:cf:50:aa:7c:99:b6:a6:19:08:12:16:c8:
                    aa:30:0d:f9:2b:cc:b0:a6:2f:64:97:39:c2:8c:cb:
                    f2:0d:21:c9:5e:bc:a5:95:8e:04:de:90:e7:40:62:
                    5b:e8:9e:c1:15:c5:e7:df:43:ae:39:cd:11:92:02:
                    09:61:1b:21:c8:79:13:87:dd:af:23:32:65:b1:3b:
                    d4:75:44:8c:df:04:4a:76:eb:19:ec:2d:64:da:e8:
                    81:5a:d7:51:81:95:ff:0d:ef:f1:7c:2e:b8:a5:d2:
                    94:dc:c8:ec:f7:e1:20:64:8c:d5:bd:92:8f:43:e5:
                    0c:7e:87:f6:da:79:39:55:93:1f:9a:75:be:7c:35:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A7:99:E4:96:DC:36:3E:76:65:FA:66:52:F8:8B:50:87:3B:5F:BB
            X509v3 Authority Key Identifier:
                keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:6b:94:f2:8b:e2:8b:7f:6f:ad:f4:ad:05:e6:3a:40:0f:
         45:f5:b2:34:54:18:d6:c5:45:33:2b:6d:51:30:f2:c2:34:62:
         12:5f:7b:6d:b1:c9:6e:a9:a1:48:ab:a5:81:6b:d4:2a:05:d7:
         96:87:01:9a:98:96:e2:ef:57:bb:07:83:0d:1c:6a:7c:b0:c2:
         14:fd:8e:98:10:57:3f:a1:12:b3:b9:2c:6f:4d:39:a0:75:56:
         f3:13:34:03:29:13:61:b5:bc:ce:49:48:75:d2:b9:bc:cc:14:
         f5:2c:98:b3:af:80:a4:7a:82:c1:7e:6a:d5:fa:1d:01:12:d5:
         1b:a7:b7:49:3d:76:56:03:ce:41:ee:20:4d:13:dd:69:a4:19:
         80:73:e3:51:5c:70:52:19:19:de:8a:6c:27:11:c4:e7:6c:cc:
         e7:79:a7:f7:77:7e:1e:dd:8a:b1:aa:98:9a:b9:25:b5:f9:f4:
         97:48:82:cd:44:8b:f5:65:3c:4c:14:c9:15:73:db:ad:f3:bd:
         8d:54:f7:12:da:4f:64:41:29:fa:dc:47:43:94:70:30:23:9e:
         5d:9e:3b:98:f7:d5:82:e2:bb:9a:bd:24:72:2b:07:03:e9:25:
         38:5f:60:e1:38:14:63:9b:1d:63:3b:2a:04:f4:e8:d0:14:a4:
         48:2e:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:13 2025 by rpki-client