Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          AQwiyLpB10/fvZm+v9QB8TGRr5+A1VQuWF2aNDo+xCI=
Subject key identifier:   E8:DE:09:54:E6:1C:5C:11:51:F1:0C:8B:77:D6:30:85:49:6F:90:D6
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       2275715795E5033805AB68A249B0C992B6B89F2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          023B
Signing time:             Sun 07 Jan 2024 00:27:52 +0000
Manifest this update:     Sun 07 Jan 2024 00:22:52 +0000
Manifest next update:     Mon 08 Jan 2024 02:31:52 +0000
Files and hashes:         1: 4B1987D5160068092602529871C93EA320045A75.crl (hash: FX8smT7P92wZE3B+R/H0oGiBdXhAOdgc+HMszGZN+vk=)
                          2: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: EKQwUVuzkFdB6hvG47b9y9VamdjPY3lACI/4wU0MC3A=)
                          3: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: 4tm4MN9QTL5HgA19ejSzX7wIgqpXJptZ++BSfBg1Gjg=)
                          4: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: iIQUD9+YEQ81/NcOUX+hV+8k5sAgghpJApGeyoM7dlc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:75:71:57:95:e5:03:38:05:ab:68:a2:49:b0:c9:92:b6:b8:9f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Jan  7 00:22:52 2024 GMT
            Not After : Jan  8 02:31:52 2024 GMT
        Subject: CN=E8DE0954E61C5C1151F10C8B77D63085496F90D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:00:3a:7a:fb:60:80:a5:a3:87:86:74:22:9c:
                    a7:07:57:ec:3a:f0:7f:8e:b8:f0:31:10:2a:95:f8:
                    4d:64:6b:4f:22:32:80:7a:1b:49:40:24:9f:70:46:
                    86:2a:c9:19:4b:42:05:46:d5:28:79:ba:aa:cb:db:
                    0c:ee:93:4a:9c:dd:3a:81:3f:5e:6c:44:36:52:58:
                    66:19:88:03:04:01:76:0e:12:04:d2:d5:b5:b5:76:
                    80:6a:92:dd:f5:60:37:4b:92:10:9a:c6:5c:48:e0:
                    77:17:0d:da:30:b3:01:07:67:48:28:d3:6c:5f:19:
                    bc:86:bc:47:e0:ef:ac:12:57:3a:46:7a:42:ee:04:
                    0b:c5:2b:54:a0:b8:c3:85:ed:4c:e4:36:e0:69:9d:
                    cd:5b:45:86:17:77:4e:02:9a:6d:6f:e0:29:21:b4:
                    0e:a8:1a:39:c7:57:e3:a0:63:81:b8:32:b6:34:6f:
                    9e:11:ce:06:2a:f6:98:68:a0:a6:fb:54:fc:f2:e0:
                    ec:12:80:ba:ac:7f:f6:b2:c9:97:12:7e:3f:6a:a6:
                    87:84:02:67:de:3c:91:29:d7:3f:72:a6:58:85:26:
                    78:e2:6c:5b:17:0c:9a:24:3c:ef:5e:54:d6:4d:9c:
                    b4:0f:ff:fd:3d:32:ff:8a:8e:fd:a2:78:dd:10:af:
                    b3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DE:09:54:E6:1C:5C:11:51:F1:0C:8B:77:D6:30:85:49:6F:90:D6
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:b9:0a:2a:a1:3d:db:ae:aa:5e:b9:d1:e1:a7:47:e3:79:
         df:25:01:6e:39:05:de:5f:a7:ee:62:7e:ee:95:cd:a1:cc:3c:
         d3:b2:f5:21:a1:0a:9b:43:3b:16:88:50:db:5b:e5:96:de:a8:
         79:53:f0:fc:01:47:b9:b4:06:46:d9:36:46:1e:2a:fc:0d:0f:
         41:52:57:ee:29:a4:10:38:cc:be:18:16:a4:f1:68:fe:36:a1:
         72:15:34:0f:1f:97:97:32:0d:44:d0:a2:20:b6:59:1b:5a:db:
         f7:26:9e:fc:a0:1b:f7:d4:e4:ba:e5:29:70:e7:e2:98:17:cb:
         e3:ce:d7:47:78:92:1b:0a:d2:39:71:ba:f2:9d:69:b3:1b:99:
         8b:b0:e3:b2:7f:e1:20:1a:8f:b2:81:42:de:8e:83:00:eb:e4:
         44:e6:e2:8f:57:e3:01:51:e7:3a:79:30:ec:21:79:ca:e2:24:
         36:83:b1:52:96:b8:f0:52:22:52:1e:04:32:bd:a2:ce:fd:09:
         83:93:02:29:ea:e7:4f:cd:2e:df:74:e2:77:4b:bf:ed:b2:2c:
         91:ad:cf:ef:c9:f9:68:b8:40:17:52:ff:49:0c:5f:87:c0:ff:
         cb:70:4b:6a:b7:6c:a8:7e:3a:17:ad:9f:6c:1a:e4:b5:24:6c:
         d6:f6:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:38:29 2025 by rpki-client