Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
File:                     p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft (raw, json)
Hash identifier:          cz/31brpnxyI4rUJk3SvvNMqohg+s9s+RJMPGvG1XfQ=
Subject key identifier:   27:89:48:08:FB:96:38:D5:6B:59:60:90:53:F3:56:27:66:3A:37:FB
Authority key identifier: A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99
Certificate issuer:       /CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299
Certificate serial:       07B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
Manifest number:          1646
Signing time:             Mon 26 May 2025 17:42:09 +0000
Manifest this update:     Mon 26 May 2025 17:42:08 +0000
Manifest next update:     Mon 02 Jun 2025 17:42:08 +0000
Files and hashes:         1: p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl (hash: 9+25YcfxerqSkCFCZjB3sfjDUQL7ACEnYG3ioAlrDfk=)
                          2: 12D5B220296411EDB08A7E54C4F9AE02.roa (hash: IfNUHhPvu7UsBRDPbxmJEbxn+CUXhUXh86S7/wAn8KI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDCF, serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299
        Validity
            Not Before: May 26 17:42:08 2025 GMT
            Not After : Jun  2 17:42:08 2025 GMT
        Subject: CN=6834a7f1-a92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:73:61:9a:93:1e:1a:ea:c3:82:b2:23:9e:
                    1c:4d:cc:85:41:ea:82:d3:3e:57:34:61:75:fa:72:
                    81:7e:fc:cc:57:a0:0f:3b:7d:8e:e8:18:9d:66:c3:
                    bd:6e:ef:cd:00:58:cb:8e:70:74:cc:a5:3c:4e:cb:
                    3d:96:94:8f:36:0c:80:d3:68:79:ae:7b:1b:1f:f3:
                    de:e7:a8:17:3c:6e:f1:55:3f:c7:ba:63:ff:44:2a:
                    13:9c:ee:2e:a9:6a:50:8b:2b:a1:2d:a3:0d:a5:a2:
                    18:cf:34:c8:9a:17:53:80:0e:16:c6:4e:14:29:7d:
                    85:00:06:7f:24:d8:fd:1d:df:54:45:1c:46:5c:fd:
                    4a:4f:82:ae:3e:7c:26:1b:b7:e9:c8:6e:59:41:b4:
                    f1:ff:9c:20:9c:90:bf:0f:87:64:62:5c:1a:de:bf:
                    17:82:55:5b:cc:2b:eb:a7:d2:8a:57:41:ba:eb:e5:
                    15:ff:82:a0:9f:a3:c3:a9:9d:71:51:91:21:11:f3:
                    70:c6:04:09:07:03:ef:79:82:d0:2b:ba:72:e4:54:
                    b3:d8:a4:be:34:9b:44:89:46:21:1e:6c:b8:87:4d:
                    04:eb:e3:d6:63:e0:60:5a:63:cc:e2:c2:8f:21:56:
                    10:cd:71:a5:e6:2c:1b:68:a1:f9:03:e6:49:0e:df:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:89:48:08:FB:96:38:D5:6B:59:60:90:53:F3:56:27:66:3A:37:FB
            X509v3 Authority Key Identifier:
                keyid:A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f3:79:b6:6e:57:fe:06:d3:cf:22:64:31:5a:a1:c1:d1:82:
         37:4a:a1:c4:67:dd:74:4e:b0:a9:8b:c6:ed:68:17:d4:fa:38:
         da:aa:54:27:ad:09:86:3c:cf:6c:2c:54:e2:89:4d:72:76:5a:
         21:51:86:4a:0c:f6:61:d3:b6:32:cd:3c:cb:85:a3:9d:a9:d3:
         6e:64:ed:0a:71:f3:39:24:22:20:f3:2e:ba:e8:ff:6a:eb:a7:
         c9:56:a7:94:1f:28:60:b6:1d:13:96:ab:c8:5f:51:90:a4:ff:
         b3:f4:dc:03:77:7a:21:16:d6:48:cd:3b:85:a9:44:79:47:ab:
         80:52:b8:e5:e4:36:5f:0d:54:3f:d5:c6:31:68:a7:db:8b:03:
         1f:1b:18:98:a0:84:f5:22:b6:35:36:b0:86:7a:68:e7:3b:94:
         4b:17:57:86:5e:32:93:43:41:5f:62:b0:80:21:b0:26:fe:2a:
         41:4b:a8:82:45:21:42:15:28:28:c2:97:5e:93:85:74:3b:7d:
         b0:4c:93:f9:f4:0e:fa:23:a3:65:e1:c4:b3:5c:01:be:e9:ab:
         81:63:bf:c1:88:d2:81:65:11:03:5b:cb:a9:ba:d1:b8:d5:9a:
         10:ca:90:a6:2e:5e:99:e2:d2:2a:18:47:9b:d1:98:7b:2d:87:
         ee:4a:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----