Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
File:                     hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json)
Hash identifier:          PHClcV02Q2HYefWxsRSlnoDa51C3KnEXn+Ygamp4BhA=
Subject key identifier:   98:8B:74:28:32:26:0B:08:95:FD:A0:02:44:85:7C:DD:AF:4C:FA:EA
Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97
Certificate issuer:       /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297
Certificate serial:       0B8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
Manifest number:          0B84
Signing time:             Thu 30 Jan 2025 19:02:56 +0000
Manifest this update:     Thu 30 Jan 2025 19:02:55 +0000
Manifest next update:     Thu 06 Feb 2025 19:02:55 +0000
Files and hashes:         1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: zDB/fi6f1CjzrlAMVH/YXNJnCI4I430wkV+A9GdiuIk=)
                          2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: EeQ1Nt52m1hyZ6VPZEPVHxza1Z77ig7QYE1EDDBnm08=)
                          3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: TRjcmxyqZohfOlB4LLbzqsFvH4uXUeHEH5tCE+DExYI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2958 (0xb8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297
        Validity
            Not Before: Jan 30 19:02:55 2025 GMT
            Not After : Feb  6 19:02:55 2025 GMT
        Subject: CN=679bcce0-0653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:c8:07:28:5d:ca:f1:39:e4:52:67:30:05:
                    24:d9:a1:15:72:7b:95:42:d7:e2:4b:50:7e:06:38:
                    0f:93:61:06:49:b9:8a:af:a2:28:92:6c:da:76:0d:
                    54:23:1a:15:d6:0c:f5:7e:5f:69:ae:8b:9e:43:38:
                    c8:27:46:b8:f0:80:0e:d4:7e:44:ce:ef:f7:2a:b0:
                    3f:43:98:f9:50:75:9c:e2:ce:74:17:b9:9a:a9:a2:
                    b6:7e:80:3f:12:08:09:24:ba:23:ad:36:3c:be:70:
                    bc:e9:7b:f5:1c:c9:9a:c9:87:6a:0f:63:01:1d:9f:
                    9b:b9:39:ed:a2:2b:45:84:47:f6:36:95:c8:8e:67:
                    8f:4d:b6:ee:94:93:d3:03:c9:70:b8:00:c1:e8:09:
                    42:6f:e7:ec:71:57:5e:76:30:19:cb:65:cd:92:e2:
                    62:c2:d8:0d:f8:f2:d2:3f:f3:5e:d8:ff:e8:a3:a4:
                    7b:da:62:fe:f7:d0:92:bc:f3:3b:4c:1b:85:cf:64:
                    04:9c:5e:a9:c2:41:2f:d1:42:9d:62:11:36:76:ed:
                    18:45:1f:fa:82:fd:1c:8f:80:24:98:fe:bc:09:98:
                    22:0b:b1:b4:2e:2d:7a:fb:3a:f7:91:c9:07:f2:88:
                    54:40:34:7b:ce:75:be:6b:82:5c:9b:f4:14:51:41:
                    9c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8B:74:28:32:26:0B:08:95:FD:A0:02:44:85:7C:DD:AF:4C:FA:EA
            X509v3 Authority Key Identifier:
                keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:3e:4e:7a:23:d3:e3:45:4f:74:0f:e8:b1:2d:88:5d:b3:
         dc:d6:26:a6:52:42:f4:6b:39:fa:1f:6a:d0:77:88:7a:40:67:
         38:74:0f:68:8f:c0:09:57:2f:23:6a:2c:bf:e7:9f:1c:b8:9b:
         8e:0b:ff:d2:fc:94:b8:c6:5e:86:b1:9c:40:7e:d6:25:5d:ec:
         59:b1:ad:90:5a:36:e1:38:69:47:33:ca:c0:e9:1d:35:2a:da:
         f0:0f:06:90:c7:6c:4a:45:b4:ef:e9:04:52:24:80:e8:ac:95:
         f8:6e:5e:f5:d4:e9:9c:52:4a:12:ff:e3:59:c0:5b:9c:37:9b:
         2f:f5:69:fd:9d:b4:6c:12:47:24:4c:49:9f:24:aa:0e:5d:cd:
         b1:48:c7:a8:c2:c4:e0:df:f2:d3:93:fa:f7:32:6b:13:e0:1d:
         7d:26:97:8a:23:8e:93:0e:2c:80:04:ea:8f:43:a8:eb:83:27:
         2e:45:31:71:59:2b:57:38:b3:45:8c:bb:c1:a9:42:23:2b:a9:
         d9:1a:df:7b:f2:85:0f:31:76:29:ea:f2:db:23:ca:30:b1:6f:
         35:81:47:61:65:85:18:19:8f:6b:46:fd:86:4b:5f:85:cd:8a:
         9e:f7:08:6b:86:3e:32:e1:87:9c:93:7c:94:01:bf:62:af:ed:
         4e:48:00:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:07:31 2025 by rpki-client