Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
File:                     1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json)
Hash identifier:          jhC9ZBp8ZjipPn2vDLkTGZeG/ZjGxex+UKjYSEjIRNE=
Subject key identifier:   68:C6:82:90:67:19:FA:F6:F3:4F:63:C1:E8:C8:E0:52:7B:A4:FD:4B
Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22
Certificate issuer:       /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
Manifest number:          D1
Signing time:             Fri 31 Jan 2025 04:48:44 +0000
Manifest this update:     Fri 31 Jan 2025 04:48:43 +0000
Manifest next update:     Fri 07 Feb 2025 04:48:43 +0000
Files and hashes:         1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: g85zSnW07YBi36w1kZoovIN93IbMB03c/ZY8x8hZ4QI=)
                          2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: Czi7PWRQ87B1nKXSiQO2Heb4QoSzR8e/1K23JvG3RhM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
        Validity
            Not Before: Jan 31 04:48:43 2025 GMT
            Not After : Feb  7 04:48:43 2025 GMT
        Subject: CN=679c562b-492c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b7:81:5e:88:3b:a2:e5:e1:01:b3:9b:66:a2:
                    bc:e2:43:d6:59:af:9f:55:78:69:af:cb:83:64:f2:
                    40:25:68:0d:a2:f4:fc:97:87:09:f5:14:b2:84:67:
                    2f:ca:15:30:8b:e0:3a:c6:5e:8c:11:8d:73:2b:7b:
                    04:0a:4a:2b:c8:2b:9e:5b:56:28:fb:ae:25:d7:77:
                    98:d4:30:36:c5:8e:73:b5:d5:25:6d:5a:dc:51:90:
                    4b:d7:d7:f8:eb:f4:b2:5c:67:7f:ca:f5:84:07:88:
                    6b:34:c9:a3:ad:bc:4e:97:a4:21:55:58:14:1d:bd:
                    82:13:df:64:2d:fa:9a:33:cc:37:d2:59:2e:6b:ce:
                    0a:9e:90:9d:0c:63:6c:fb:e3:19:9f:0b:c6:e7:9d:
                    59:e6:bf:56:40:e1:b4:13:93:a5:74:74:c9:81:e9:
                    84:22:53:2f:1a:bd:0f:9b:8b:01:c6:3d:ce:cd:9c:
                    75:37:9a:49:ad:5c:9b:ac:9f:ab:4b:93:58:f7:78:
                    fa:1d:bf:bf:f5:81:f7:1d:f3:85:b1:3d:f3:5a:bc:
                    82:9c:33:54:bc:5a:88:39:e0:18:75:88:7f:26:6c:
                    f8:3b:b9:bf:e5:b8:8a:35:65:e8:df:ca:d9:b5:46:
                    f9:46:a9:b6:1e:83:0c:c5:a5:35:12:65:a8:ea:9f:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C6:82:90:67:19:FA:F6:F3:4F:63:C1:E8:C8:E0:52:7B:A4:FD:4B
            X509v3 Authority Key Identifier:
                keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ff:78:6d:8b:d2:86:b1:10:a0:ec:22:ac:b8:6d:72:88:6d:
         63:de:bf:b3:0d:6e:cd:81:9b:c6:c6:96:4f:d5:0b:34:0d:32:
         a5:f6:a2:56:34:34:97:0f:9d:40:a3:fd:f5:2f:72:b4:12:53:
         3b:58:7b:f5:2a:33:50:42:1e:71:4b:73:5a:55:42:2b:2e:e1:
         82:1a:89:96:0a:cc:27:f6:da:18:67:97:14:cc:08:3b:f4:90:
         9c:a5:58:3b:99:a9:3c:c2:4b:5a:a7:83:c9:a0:86:ea:ef:c5:
         3c:6d:43:73:ae:62:1d:c7:2a:e5:9d:27:ce:f8:c6:51:b5:fb:
         2e:bb:4a:1c:b9:0c:35:1b:e1:96:09:68:4e:3a:5d:df:da:9a:
         9d:38:05:36:ac:1d:29:fe:64:80:a9:ec:cd:d9:1d:b9:7a:38:
         dc:d1:90:5d:6e:69:a4:b4:29:0f:3d:ac:23:10:6c:05:9f:12:
         64:db:30:ee:e7:ad:d6:80:fe:9d:61:8c:35:77:ed:f0:cd:24:
         2b:59:db:2a:51:7d:8b:26:48:7a:28:a4:a8:0e:78:ff:b2:bb:
         d8:e5:7e:bc:1f:2e:03:ff:53:28:42:84:0f:3a:f8:bd:a9:a2:
         bd:87:21:2d:cc:96:c2:e3:fc:75:57:9c:a6:3b:dc:43:74:dc:
         84:33:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:16:07 2025 by rpki-client