Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
File:                     AuOHDsPGHid3cW1wGLNMszV6AsQ.mft (raw, json)
Hash identifier:          qQ7L/gBdQrpIJ4kOl7z1RQ9uR4U1mrKhMVHOidrXE/8=
Subject key identifier:   C9:A7:15:DD:D8:D0:CD:44:0B:DD:42:CA:B3:16:C3:85:61:36:F6:26
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Certificate issuer:       /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial:       0638
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
Manifest number:          0622
Signing time:             Thu 30 Jan 2025 22:45:12 +0000
Manifest this update:     Thu 30 Jan 2025 22:45:12 +0000
Manifest next update:     Thu 06 Feb 2025 22:45:12 +0000
Files and hashes:         1: AuOHDsPGHid3cW1wGLNMszV6AsQ.crl (hash: W1SuD4NhfHBIkszGLpJPeFqo2q5IWIh/Vho0go5K+fE=)
                          2: 78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa (hash: hEiN61azCzCVDsRROVBC0HW2s55XG0VY8MhC1abTRg8=)
                          3: 79B5BD3A6AC011ED9C15EE6BC4F9AE02.roa (hash: tZpTe2qCGQj6NQwlc0TmLNR5XmYKiiqPqhHoaN4jA38=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
        Validity
            Not Before: Jan 30 22:45:12 2025 GMT
            Not After : Feb  6 22:45:12 2025 GMT
        Subject: CN=679c00f8-730e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:53:be:6a:60:04:7c:09:09:0e:85:1d:5b:
                    16:35:d9:df:cc:a2:e1:6c:0e:23:e4:13:9c:97:09:
                    73:6f:35:e6:44:7b:b1:86:3f:84:59:48:a7:5d:43:
                    dd:7a:04:fb:37:05:4b:10:8e:9f:cd:c5:9e:93:5e:
                    31:69:0b:df:03:13:db:19:d9:aa:fb:98:dc:3f:87:
                    e8:ec:9c:3a:fd:ba:68:e7:81:61:4c:4a:42:52:bf:
                    16:af:96:92:02:34:a5:30:2c:92:85:22:be:be:c0:
                    02:ba:61:4f:56:13:42:77:07:ac:5b:1f:ee:a9:81:
                    00:41:f9:f3:83:1c:c3:dd:e6:85:93:00:18:ac:18:
                    90:78:ee:ce:6b:f8:51:0c:a4:1f:a4:79:20:33:ff:
                    ca:70:e4:df:75:75:4f:65:36:4d:d2:c6:d1:7f:e9:
                    a3:ee:23:a9:84:1d:64:6c:1b:ea:19:7e:15:45:83:
                    60:4f:5b:8e:31:38:ab:2f:da:ad:78:d2:71:e0:36:
                    f1:9a:49:db:56:4d:9c:92:c3:73:be:b3:c2:4e:50:
                    50:da:0f:b8:d0:e7:7f:2d:fa:8b:11:45:e4:02:c9:
                    77:99:63:92:7c:94:43:79:cd:9a:b8:55:7c:a2:41:
                    98:08:48:9b:f2:2f:7e:ae:0d:0f:c0:34:ff:df:23:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A7:15:DD:D8:D0:CD:44:0B:DD:42:CA:B3:16:C3:85:61:36:F6:26
            X509v3 Authority Key Identifier:
                keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:74:a9:ef:4c:89:fb:77:75:44:06:ce:30:d9:1d:9d:bc:5e:
         51:f1:c0:9f:ab:eb:7c:60:e4:7c:88:42:41:bc:1c:60:06:d5:
         8d:ea:5d:b1:ba:78:2b:95:c5:ec:fa:62:07:f1:b6:3a:3a:8a:
         26:db:d9:fc:20:31:03:c1:64:c7:e4:be:a0:dd:4d:78:cd:32:
         16:53:03:2f:0c:2a:88:ef:ba:07:a8:aa:db:f1:32:78:69:ed:
         90:b0:be:be:86:52:ae:cc:e7:55:8e:77:fa:76:85:9d:af:20:
         62:82:c4:08:06:96:c6:9e:b8:84:1b:ac:a4:6b:76:45:34:22:
         24:75:2c:d4:c7:14:9e:02:f0:5d:92:65:18:3f:dc:fd:15:f5:
         6d:37:b7:4f:e4:af:8b:c2:a2:54:ab:58:44:c3:7c:72:b8:c7:
         59:cc:f1:34:3a:2b:13:40:27:90:04:28:a7:73:3a:19:e8:ee:
         ad:01:c1:73:1d:23:e6:8f:f1:ce:2e:8b:ee:c5:88:99:ce:77:
         63:97:53:45:68:7a:83:97:7f:25:ff:4a:5d:0a:1a:5d:16:27:
         de:21:4d:d1:d3:b2:d6:f8:4f:66:80:77:e9:6b:ad:ac:ae:88:
         e8:4d:91:8b:1b:2f:de:81:28:47:46:b5:e6:db:bb:23:5e:29:
         1c:ab:e4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:06 2025 by rpki-client