Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F78/F8DE32D0E31911EF81032F34C4F9AE02/JIHnX8pT6t6YJ3qMA2i_-O3Nc_g.mft
File:                     JIHnX8pT6t6YJ3qMA2i_-O3Nc_g.mft (raw, json)
Hash identifier:          dY1eRC/O08D5lNAw7HOGi6H2Dnm+lptN6uJyUZUrP6s=
Subject key identifier:   4C:45:30:4B:0E:93:54:0B:72:F1:EA:2C:BD:3A:80:DD:59:A7:A6:EB
Authority key identifier: 24:81:E7:5F:CA:53:EA:DE:98:27:7A:8C:03:68:BF:F8:ED:CD:73:F8
Certificate issuer:       /CN=A91C8F78/serialNumber=2481E75FCA53EADE98277A8C0368BFF8EDCD73F8
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIHnX8pT6t6YJ3qMA2i_-O3Nc_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F78/F8DE32D0E31911EF81032F34C4F9AE02/JIHnX8pT6t6YJ3qMA2i_-O3Nc_g.mft
Manifest number:          0A
Signing time:             Mon 17 Feb 2025 09:14:16 +0000
Manifest this update:     Mon 17 Feb 2025 09:14:15 +0000
Manifest next update:     Mon 24 Feb 2025 09:14:15 +0000
Files and hashes:         1: JIHnX8pT6t6YJ3qMA2i_-O3Nc_g.crl (hash: Lrutac1uaFY7q0hCq166LCgqa4Clz4Yug4Q3TThgcLY=)
                          2: E219016CE31C11EF9927DB6BC4F9AE02.roa (hash: yKNcsRa30cbt+UvmKQMQQjjVntZF8YpvtZ225DVModg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F78, serialNumber=2481E75FCA53EADE98277A8C0368BFF8EDCD73F8
        Validity
            Not Before: Feb 17 09:14:15 2025 GMT
            Not After : Feb 24 09:14:15 2025 GMT
        Subject: CN=67b2fde7-8370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:2d:3c:cd:a2:32:f3:19:e8:48:e1:be:02:
                    99:6a:67:6f:0f:c6:73:49:17:f4:18:b7:6f:f3:74:
                    d4:75:52:e0:09:92:27:d6:9a:97:9b:a7:e8:9c:26:
                    e3:51:3c:28:99:5b:0e:8b:4c:2d:bf:cc:13:3a:0e:
                    d2:ef:98:46:09:6d:4f:f0:c0:f1:cd:18:01:35:a8:
                    40:16:46:46:ae:13:b3:39:8f:d9:d5:3c:ad:ff:d9:
                    f6:16:fd:2e:cb:71:82:4b:3a:6c:2a:4d:b5:5d:ea:
                    f9:6e:66:65:05:bb:dc:fe:84:b0:8d:84:43:fe:23:
                    42:8f:49:94:da:42:22:f3:3a:b7:4d:8a:ef:01:28:
                    7b:bd:d7:90:ba:7f:0a:25:a2:cc:93:58:a0:d1:11:
                    ad:80:83:4b:10:df:64:8a:b9:b2:4d:91:ec:aa:86:
                    c1:d2:af:ff:b7:87:db:69:3a:37:fc:cc:b4:76:c9:
                    5a:ad:2e:c0:c4:17:25:d5:d0:74:22:eb:8a:86:46:
                    7b:4f:eb:4d:ad:11:26:cb:bc:03:8f:bf:16:13:ed:
                    78:ba:4e:9b:13:9e:60:a6:22:c7:b1:f4:2d:ff:6e:
                    1e:73:3e:77:81:06:1e:91:d0:21:36:51:4b:03:1c:
                    cd:34:d4:02:66:5a:99:64:2e:2d:2d:d6:b4:02:a1:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:45:30:4B:0E:93:54:0B:72:F1:EA:2C:BD:3A:80:DD:59:A7:A6:EB
            X509v3 Authority Key Identifier:
                keyid:24:81:E7:5F:CA:53:EA:DE:98:27:7A:8C:03:68:BF:F8:ED:CD:73:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F78/F8DE32D0E31911EF81032F34C4F9AE02/JIHnX8pT6t6YJ3qMA2i_-O3Nc_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIHnX8pT6t6YJ3qMA2i_-O3Nc_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F78/F8DE32D0E31911EF81032F34C4F9AE02/JIHnX8pT6t6YJ3qMA2i_-O3Nc_g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:e9:35:5b:6b:a5:ab:6e:8d:bf:3f:18:ee:cb:b7:3d:f6:
         09:c4:5e:78:2e:10:c8:71:96:4b:3a:6d:6d:1e:84:d0:8c:81:
         e3:e0:87:4c:49:c5:13:b2:9f:24:51:5e:bb:5b:34:c0:01:98:
         38:13:71:38:b9:41:3a:99:5a:4e:ad:aa:c4:23:64:11:85:82:
         9b:4b:43:fa:6e:6b:51:0d:d4:1c:5c:08:bf:ca:9c:77:73:ab:
         c4:ff:e9:a2:f6:5d:34:78:61:63:4b:73:b6:17:a2:78:03:68:
         cc:2a:aa:28:e9:64:93:9c:cf:2c:3d:44:69:09:8b:eb:a9:cf:
         d1:8f:ae:39:4c:af:59:04:99:e4:a9:e0:79:ca:de:83:7e:72:
         1a:76:2e:ce:21:c7:6c:db:b6:cf:56:e7:1c:a8:db:68:f9:55:
         2d:93:42:dc:64:af:d0:d0:d0:a9:17:33:70:90:12:27:97:45:
         4f:a0:af:07:3a:34:43:84:39:9c:0c:ca:d9:da:31:b8:23:08:
         3e:a9:54:ed:1a:39:b0:a4:7d:e3:89:df:7d:75:f0:31:73:ac:
         d2:39:51:9c:95:7e:f3:51:75:59:dc:e6:01:6e:79:1c:ef:e4:
         d8:d3:bd:52:7a:1d:9c:d0:d5:3d:e8:75:64:ea:10:fb:09:f8:
         03:c8:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:18 2025 by rpki-client