Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
File:                     aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json)
Hash identifier:          dl8fK7V6YV103e/ECjGqN2mvc/BR6uaRyVMMKYz9un0=
Subject key identifier:   B5:76:B2:B2:D1:B7:64:0E:5C:91:DC:A6:CF:6E:47:39:88:B9:8F:24
Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
Certificate issuer:       /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
Manifest number:          63
Signing time:             Fri 31 Jan 2025 06:14:56 +0000
Manifest this update:     Fri 31 Jan 2025 06:14:56 +0000
Manifest next update:     Fri 07 Feb 2025 06:14:56 +0000
Files and hashes:         1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: +Y85+D4pzENRn+6ez7G28o596ozuIDp5EbBtq31AOio=)
                          2: FDECD5AAC11411EF8CFEEF70C4F9AE02.roa (hash: xGbaIkdszdV8iay+6JK/xSO/ZldDE4l+mpR721XpUnY=)
                          3: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Liof1SLVHNX2pYYIW5GwZOHH2hPfFF88sQw8vFt1FR4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
        Validity
            Not Before: Jan 31 06:14:56 2025 GMT
            Not After : Feb  7 06:14:56 2025 GMT
        Subject: CN=679c6a60-3f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:4c:12:a7:28:ec:13:36:d9:68:16:e4:0e:
                    6f:d6:00:f3:f4:61:1c:f4:b6:f7:ed:5c:a8:3e:8b:
                    db:9e:58:1a:61:42:7e:11:80:2c:ff:e3:d0:09:f5:
                    3d:ab:1f:45:1a:c5:ed:8e:8d:4e:18:b5:20:68:d9:
                    e9:6f:78:90:73:9d:1a:a4:89:c9:0a:1f:28:52:ce:
                    88:31:de:8c:1f:55:c8:18:59:77:d0:55:86:fd:00:
                    5e:51:cc:c8:b4:8d:fd:c8:b4:ca:8b:7b:e4:a2:14:
                    b6:dd:d4:e5:f7:8a:3e:50:68:1a:7a:77:67:85:8c:
                    f1:0a:cb:84:28:7f:19:cb:07:1d:79:f9:9e:fc:1b:
                    65:f2:27:64:f0:7c:76:3f:d3:a8:63:57:dd:de:e8:
                    e5:47:a8:8c:1c:ce:b6:a9:c4:29:37:88:46:5e:cd:
                    6a:39:d7:71:30:14:b1:97:28:24:29:9e:5f:38:64:
                    37:1d:62:7e:d0:21:d4:91:cc:02:d1:46:e7:8c:8b:
                    e8:a4:e6:37:bb:97:7b:47:41:4b:5f:b2:12:2a:d6:
                    9f:4b:e9:fc:9b:e2:59:4d:c5:97:72:bf:50:57:38:
                    30:46:b9:ea:6a:91:6a:cc:aa:78:c5:b9:76:55:0f:
                    e8:94:19:41:fd:36:b0:b0:5d:f9:49:a4:10:f3:24:
                    88:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:76:B2:B2:D1:B7:64:0E:5C:91:DC:A6:CF:6E:47:39:88:B9:8F:24
            X509v3 Authority Key Identifier:
                keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ab:7d:39:12:b8:c8:f8:12:33:bd:85:6a:a2:d7:25:cf:1b:
         1a:25:ff:37:d5:7e:c0:ab:cd:b6:12:c3:07:fd:11:39:14:5d:
         bb:7d:0a:4c:70:34:64:a4:a4:3a:76:86:4e:17:b5:3d:ae:10:
         e2:29:4b:c3:cf:d8:ec:73:55:13:09:cf:d2:47:a3:2f:84:36:
         dc:7b:44:4e:f2:74:5a:67:77:af:56:a9:47:0a:d5:50:fa:56:
         d5:2a:66:4b:19:10:d9:8b:81:d4:90:32:22:57:67:cf:1a:9f:
         0c:f7:b7:11:19:6d:f5:69:33:f0:0d:03:14:03:02:85:f4:bb:
         b2:d8:e4:00:ff:37:dc:2e:4d:45:ba:38:eb:10:0b:c6:c4:5c:
         89:4c:16:02:31:0f:2e:57:2e:61:67:05:e3:d2:4e:fd:6b:31:
         ca:f7:b7:65:28:1c:cc:2b:01:e7:cf:b2:20:4b:1d:b4:8f:7e:
         ef:9b:22:f8:cf:f5:63:99:7d:38:c9:eb:42:fa:fd:7a:f3:6c:
         74:c0:a6:c8:4e:3e:13:aa:61:79:21:7a:b0:7c:fe:5f:af:08:
         53:7d:d4:3a:f5:2c:aa:31:49:11:3b:02:86:55:69:55:51:af:
         32:c5:c8:f5:46:15:fa:73:87:44:e4:62:fa:7e:3c:cf:c1:92:
         cf:08:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:18 2025 by rpki-client