Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
File:                     0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft (raw, json)
Hash identifier:          TZ0FOgsWqkq8LDznM42+jAosLDlNCFW3HtICM9BB9WY=
Subject key identifier:   D9:9F:16:F4:79:D2:22:AB:63:8B:0B:6A:C9:26:9E:E1:C6:18:9D:4E
Authority key identifier: D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23
Certificate issuer:       /CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
Manifest number:          01B3
Signing time:             Fri 31 Jan 2025 02:22:28 +0000
Manifest this update:     Fri 31 Jan 2025 02:22:27 +0000
Manifest next update:     Fri 07 Feb 2025 02:22:27 +0000
Files and hashes:         1: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl (hash: 2UyfJItk9q8zJX9WjdzusgBh6LXrRBsjum4SRS5YBPc=)
                          2: C18E7856446C11EDA55DB951C4F9AE02.roa (hash: AKVXd/DH9YanLRhXJZMqC5LiMXYq5bZo14nqm8XdwR0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
        Validity
            Not Before: Jan 31 02:22:27 2025 GMT
            Not After : Feb  7 02:22:27 2025 GMT
        Subject: CN=679c33e4-6900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9e:9e:7f:ae:6c:18:1e:31:b4:32:21:ca:97:
                    fb:9c:65:96:7d:88:b1:85:71:35:c1:1e:47:6b:f5:
                    00:2e:15:f5:f8:28:1b:ad:dc:e0:6c:13:26:66:aa:
                    dc:fd:d0:e6:87:89:e6:54:fa:b7:6d:e9:6c:cf:4e:
                    5c:25:ff:d9:81:04:d5:92:2f:e1:c7:76:2d:12:8c:
                    77:18:d6:d3:83:9a:d9:72:11:12:b3:2b:f9:89:41:
                    e8:ed:c8:27:31:8a:c1:05:03:9d:7c:61:3c:62:55:
                    1c:9b:49:94:66:a2:47:c5:73:65:40:00:40:07:12:
                    e8:96:de:b5:6b:01:29:89:46:af:10:34:45:00:46:
                    60:c8:73:e6:99:7b:c2:fc:2f:a6:48:8c:54:d7:06:
                    a1:38:9c:34:fe:97:bf:94:6c:eb:35:1d:69:3d:0d:
                    a4:b4:cf:72:1a:76:d4:3d:d1:3d:01:19:07:80:00:
                    13:42:02:7c:bf:8a:d4:cc:d4:9f:a3:b4:e2:49:29:
                    0c:21:3b:42:67:60:25:1f:9d:bb:cb:47:e1:49:56:
                    e3:e4:4e:cb:03:64:14:33:27:e9:56:3d:7e:d7:56:
                    77:83:7f:59:58:48:8a:52:5f:29:a9:e2:cb:10:57:
                    3c:42:4b:34:8f:0a:b8:3f:91:f2:18:79:23:af:18:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9F:16:F4:79:D2:22:AB:63:8B:0B:6A:C9:26:9E:E1:C6:18:9D:4E
            X509v3 Authority Key Identifier:
                keyid:D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:ea:db:a3:8b:26:ec:78:d4:15:35:dd:96:c1:51:f2:55:
         25:18:65:af:84:c0:77:76:64:06:e4:4d:62:d5:17:19:4f:bf:
         22:b0:80:68:d0:19:ab:c3:98:e3:a8:3e:18:32:4a:5d:ef:44:
         5e:3f:0f:0a:42:b8:5f:64:9e:e7:ae:f5:cc:7a:57:c0:d9:2c:
         65:4c:ea:0a:c9:d1:45:63:34:65:74:8d:21:84:8e:1a:b7:eb:
         12:be:6a:b6:4a:25:9d:1e:bc:2d:76:18:b0:7d:50:1d:45:d6:
         3e:2b:c1:45:fb:c6:b8:64:a1:ab:a5:26:3f:dd:7a:40:7c:1c:
         e8:39:d8:71:8e:d0:d3:72:a3:cb:03:13:52:9d:e5:d8:6d:48:
         da:fb:30:2a:e2:43:46:b3:e9:5c:d2:52:30:9f:29:11:53:53:
         66:af:ae:35:ae:96:58:bd:1b:ea:6d:4d:25:6a:eb:a2:77:c6:
         bf:57:85:60:10:5a:d7:b0:33:e1:5b:58:02:b5:f2:2e:3f:b6:
         a8:53:93:8b:bf:10:50:8e:43:44:13:51:ef:a3:7c:1b:63:c0:
         69:71:f6:8f:36:db:f6:ac:12:1f:b6:2a:e4:e6:b8:88:6b:32:
         32:10:f1:3e:e6:59:3a:57:18:f6:34:3e:58:10:76:e2:e7:ff:
         3f:28:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:21:56 2025 by rpki-client