Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File:                     F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier:          tFzwEeV3Yx+vI+liO0SsVTxCDRoNo1Q+UccmNEZZWCM=
Subject key identifier:   17:93:1E:75:BA:3E:C4:E9:59:81:79:8E:11:3B:42:A8:56:F6:AB:3F
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer:       /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial:       078E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number:          0781
Signing time:             Thu 30 Jan 2025 21:18:02 +0000
Manifest this update:     Thu 30 Jan 2025 21:18:02 +0000
Manifest next update:     Thu 06 Feb 2025 21:18:02 +0000
Files and hashes:         1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: QpNN1is4oLKkyzv5rx/NzuXRQzBPlRO+eO1jZTnTuEU=)
                          2: 8D38DE3C2FED11ECB35A414FC4F9AE02.roa (hash: 4nNxlXf6o0nnD5I2xWyRCuAKUzO3zgq8UO0w+zr/898=)
                          3: 8E7B872C2FED11ECB35A414FC4F9AE02.roa (hash: OlQKH7ACIVrHGtlUAnuv3tHbt5ORT3G0pc9ERA6ytzA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934 (0x78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
        Validity
            Not Before: Jan 30 21:18:02 2025 GMT
            Not After : Feb  6 21:18:02 2025 GMT
        Subject: CN=679bec8a-56d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a6:d4:20:43:26:f7:8d:02:d0:21:13:74:1a:
                    dd:2e:da:30:15:60:8c:96:0f:ef:c8:91:4a:2a:52:
                    c9:ca:22:c8:55:c3:88:af:a0:b1:22:03:7a:2b:f5:
                    39:be:3b:df:d3:4e:8e:2a:e6:43:18:e7:5c:57:ee:
                    f0:b4:1c:c3:79:16:98:12:97:cb:38:1c:4d:f4:4a:
                    0d:0b:59:72:9e:5f:0e:be:27:60:c9:ca:30:cc:d0:
                    3b:52:2c:4a:4a:25:86:c8:70:2f:9f:54:c2:31:4b:
                    cf:59:8b:34:b4:91:7f:ae:6d:88:9c:2a:95:eb:34:
                    de:da:cc:fc:44:1e:af:74:81:4d:75:31:fe:2d:2d:
                    56:2c:bf:bd:ac:4a:f2:4b:4c:59:86:6a:cb:36:8f:
                    34:a7:c1:22:80:38:e3:9a:cb:e7:b8:ce:21:e2:e9:
                    11:fa:c5:01:d5:8c:86:12:f0:69:c5:5e:00:2a:45:
                    e8:37:ee:cb:01:fe:b8:d6:17:f6:37:25:f1:b5:bd:
                    28:52:83:72:04:84:e6:a8:5c:13:c9:5d:64:22:68:
                    65:20:c0:57:5d:79:30:06:f4:f6:0c:72:6d:de:d6:
                    b0:a5:89:88:05:28:ce:be:af:3b:14:31:2b:ce:62:
                    8c:ef:c1:3c:0e:b1:b6:66:ed:8d:91:56:a8:4b:eb:
                    07:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:93:1E:75:BA:3E:C4:E9:59:81:79:8E:11:3B:42:A8:56:F6:AB:3F
            X509v3 Authority Key Identifier:
                keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:42:ce:2e:1b:ea:37:13:a2:19:33:7c:d6:38:d0:61:33:
         4a:19:b7:75:be:f2:0b:e7:df:f2:3c:84:92:26:48:e9:6b:8d:
         97:ed:cb:fb:72:e1:c6:af:ac:0c:da:aa:c9:05:49:57:48:07:
         83:44:66:fa:b7:02:02:3e:14:f9:ff:22:29:93:12:2b:6c:45:
         22:41:47:19:13:3a:3d:57:1c:56:e3:30:d7:0a:3b:07:05:42:
         53:aa:23:66:a1:dc:85:a3:e2:2c:cf:59:78:9c:48:b3:7e:b1:
         e3:75:bf:de:0b:d8:95:76:dc:94:e9:36:3e:74:33:2c:60:94:
         f7:ed:50:6b:5c:e3:74:5a:c2:03:2d:ba:e3:3d:b7:6d:ff:6d:
         56:c7:0a:14:f9:0a:d2:d7:bf:46:b5:3c:1d:27:a2:d7:a8:2d:
         a4:9c:c6:02:60:82:aa:bd:79:bb:01:c0:ef:5f:7f:9d:de:07:
         a5:f8:ed:fb:30:a2:e6:f2:74:59:8f:e5:96:a3:33:da:b9:7c:
         a1:58:19:47:5d:d6:0a:6b:27:04:a9:3c:90:c0:4d:8c:f6:20:
         e3:b9:5f:56:27:d1:96:28:3a:4d:ae:de:30:ad:e8:e7:ad:8d:
         e5:40:21:d1:2c:7c:3f:17:2c:3a:e3:fb:04:bc:61:89:99:07:
         8d:ba:11:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:43 2025 by rpki-client