Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
File:                     PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json)
Hash identifier:          /p+v1Jpn2CSn1u19iKWXV6ygxQFJ5YGiW+tpPUIhFXQ=
Subject key identifier:   09:4D:9E:04:1A:EC:24:E0:64:39:F3:D3:18:A8:29:FF:3D:73:77:1E
Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
Certificate issuer:       /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Certificate serial:       0BE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
Manifest number:          0BD0
Signing time:             Fri 31 Jan 2025 18:43:01 +0000
Manifest this update:     Fri 31 Jan 2025 18:43:01 +0000
Manifest next update:     Fri 07 Feb 2025 18:43:01 +0000
Files and hashes:         1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: xbJV7EGd0UiC53t5B3k0uc9bYK2eLbTJuxlQ0RHT010=)
                          2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: SaoXuslBHecNHa04UZ0EBB+W8ns+FIPHvzYnnMHMCbU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3040 (0xbe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
        Validity
            Not Before: Jan 31 18:43:01 2025 GMT
            Not After : Feb  7 18:43:01 2025 GMT
        Subject: CN=679d19b5-4349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:01:28:f0:9d:87:63:fc:98:b0:b6:0b:7a:
                    26:44:ab:52:74:d9:62:a0:1a:ce:ce:db:17:a8:bd:
                    d7:48:bf:13:81:9b:5d:92:06:09:ac:b8:0f:ec:d7:
                    d7:50:1c:75:91:9a:83:1f:a5:8b:e7:ff:e8:9c:ae:
                    fd:12:0c:9c:af:20:82:d8:66:6c:a1:86:c6:c1:d8:
                    32:1c:88:f3:2a:66:c2:07:29:5c:b9:29:16:f8:8e:
                    fc:31:b3:36:89:81:3a:f8:cd:09:e1:7c:56:5c:ee:
                    7a:b1:ba:be:5e:a9:cc:27:aa:a7:d1:6b:83:29:11:
                    01:4e:3a:a3:95:fd:9b:ef:10:fa:b6:72:28:1e:81:
                    75:70:46:50:25:eb:64:ee:15:54:f7:96:44:d3:cc:
                    65:3c:d2:e7:ac:ab:82:90:90:b4:6e:34:43:55:10:
                    c5:d9:c9:c3:87:53:91:f1:dd:79:a2:45:4b:84:db:
                    96:d1:26:68:62:9b:69:1d:20:b6:3c:08:ef:53:42:
                    77:72:58:b5:25:94:bb:a6:7f:da:36:15:ae:a5:ea:
                    04:b6:06:e3:e7:f8:e7:3c:87:31:b1:b9:2a:dc:73:
                    04:8e:89:11:14:13:7c:8a:27:d6:d5:a1:7a:db:b4:
                    2b:4a:84:03:93:aa:fc:50:c5:43:d7:c3:c4:89:a3:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4D:9E:04:1A:EC:24:E0:64:39:F3:D3:18:A8:29:FF:3D:73:77:1E
            X509v3 Authority Key Identifier:
                keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:66:c4:b9:10:0a:be:e2:6d:a9:ea:c1:79:56:12:cd:e7:e1:
         a6:22:1f:23:0e:9a:83:da:16:09:dd:00:c8:3b:40:cc:b1:ae:
         45:1e:66:1a:8a:be:07:09:96:65:7d:a4:45:d3:b1:54:19:01:
         f0:d2:87:91:7b:ca:28:e6:e2:91:18:20:fd:57:56:c0:27:3f:
         3a:06:6f:46:c8:32:b0:29:6e:f2:0d:f4:95:2f:dc:9d:a6:68:
         23:60:1b:71:52:25:33:2b:31:05:b5:26:7b:61:55:7d:a3:b9:
         63:fd:70:fe:e9:43:61:ea:71:fe:69:eb:03:ce:c6:c1:57:94:
         d7:c9:45:4e:22:c8:3f:5a:7e:fe:3e:20:91:89:de:97:e4:0f:
         ad:cc:e6:14:cd:d4:30:00:48:5c:ef:b1:d6:8f:75:68:d0:66:
         60:a7:3b:a4:8b:6f:f1:2f:3c:49:08:74:05:da:71:37:8e:b5:
         ed:d6:80:20:5c:c3:1f:f5:1d:6f:c6:52:cc:ae:c0:c2:d9:16:
         88:da:be:d5:21:18:19:aa:02:30:e0:54:92:4d:7a:a9:e1:a3:
         76:14:7f:12:4d:df:1e:b3:ca:06:69:26:02:0d:ba:da:f6:c6:
         a7:51:2d:b5:ee:b5:78:e2:63:02:d3:db:73:f6:a1:3a:7b:8f:
         ac:d9:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:39 2025 by rpki-client