Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
File:                     N-24AKVpn6hX9211S38vQXXuqF0.mft (raw, json)
Hash identifier:          DertstCUwx45A3Hy21E5CEkZryn6D8YBI9fv1IIe1DA=
Subject key identifier:   A5:80:6C:F6:D5:56:D5:F3:0B:AE:3D:FF:A6:62:F8:5B:EF:F0:E5:A4
Authority key identifier: 37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D
Certificate issuer:       /CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
Certificate serial:       0815
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
Manifest number:          140F
Signing time:             Fri 31 Jan 2025 18:26:57 +0000
Manifest this update:     Fri 31 Jan 2025 18:26:56 +0000
Manifest next update:     Fri 07 Feb 2025 18:26:56 +0000
Files and hashes:         1: N-24AKVpn6hX9211S38vQXXuqF0.crl (hash: u56eMxCKv/1L77N9hLPOkyWMIObwKituE23PsfsqBLY=)
                          2: 6E570966CD1B11EA9613AA1DC4F9AE02.roa (hash: ohLcJGiw9Qpz+3q7Qq1rXsYI1VYW0bgcQ/ITvPJhtyk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2069 (0x815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
        Validity
            Not Before: Jan 31 18:26:56 2025 GMT
            Not After : Feb  7 18:26:56 2025 GMT
        Subject: CN=679d15f0-8365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:b0:80:1b:28:68:23:14:d3:e8:61:e6:1f:
                    23:da:a1:bd:73:5c:be:54:33:00:a9:f3:63:da:fd:
                    ff:40:76:5e:c6:51:46:df:bd:d0:b5:d0:af:25:a0:
                    ec:1e:ae:4c:b5:f6:24:12:9a:ab:74:8a:df:b7:b1:
                    cb:d2:5f:81:6e:e2:e8:0f:7a:16:0b:19:8e:e1:cc:
                    d5:a0:87:94:ed:98:79:8f:da:48:b8:7b:07:e4:2e:
                    90:92:07:ed:ac:f7:97:67:20:5d:4d:62:9e:4f:41:
                    2e:38:4c:14:98:6d:3d:76:ec:f1:a2:34:52:e2:30:
                    40:fb:ed:6b:9d:dd:ae:b1:80:1a:4e:42:51:a7:d1:
                    d6:06:f4:b3:be:b3:72:71:e1:7e:ee:cc:68:c9:fc:
                    65:01:0a:cb:5c:75:22:f2:f4:8c:12:dd:85:bf:cc:
                    14:76:85:b0:d4:2d:e5:d8:d8:0d:58:3d:3d:63:7c:
                    7b:2f:b7:3b:d3:72:1b:fb:91:24:15:04:71:85:84:
                    47:60:fc:9b:1c:4b:dd:3c:fb:8e:a7:7e:d3:25:4e:
                    af:24:05:ef:e1:9d:68:22:62:12:02:ad:43:c4:0d:
                    e7:cf:39:3b:40:81:43:51:35:b6:24:76:78:b6:12:
                    76:e9:4a:d3:9a:8f:44:d7:2c:65:c0:24:f5:ca:81:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:80:6C:F6:D5:56:D5:F3:0B:AE:3D:FF:A6:62:F8:5B:EF:F0:E5:A4
            X509v3 Authority Key Identifier:
                keyid:37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4f:ce:f5:42:22:db:a0:82:a6:70:ae:3b:8f:e5:a5:56:48:
         49:29:40:d3:9a:00:73:d1:52:4c:25:6c:5f:57:a8:46:17:5c:
         35:4f:f2:86:b7:45:de:d8:e7:5d:8b:3b:ed:42:12:c8:ab:c9:
         58:fb:44:8f:cc:b3:05:4c:00:9c:ab:dd:62:fd:03:09:18:fb:
         61:db:3b:68:5a:a3:79:65:2b:b6:41:6b:d3:73:63:a4:77:20:
         40:86:53:7b:00:d5:19:d6:e4:ab:12:d8:1c:ab:ff:ad:57:b8:
         89:69:ca:5d:43:9d:7c:20:0c:d1:b5:aa:89:1a:3c:76:3d:ac:
         76:7f:2d:e6:8e:7c:f1:31:bf:8b:cc:44:ed:88:e7:77:73:9a:
         95:3a:bd:79:f8:65:ef:1e:fe:06:96:88:8b:aa:6e:92:36:4a:
         17:c4:79:ec:cd:46:79:e6:d1:38:cc:eb:a6:8b:97:7d:8c:eb:
         3d:c7:df:ab:0d:86:1d:bb:9a:ce:95:95:df:78:42:ab:a5:cd:
         72:6c:b2:1d:bd:65:e3:98:61:b1:c5:2c:cd:93:5d:e4:d3:72:
         fa:15:c7:6d:9d:f4:64:75:d6:7e:4d:ae:73:fa:ec:c3:b9:79:
         42:3d:ae:69:4c:00:ab:e9:e3:f8:53:b5:a1:f5:66:76:2a:41:
         71:ab:d9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:51 2025 by rpki-client