Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
File:                     l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json)
Hash identifier:          mXqAuTjcKztB7q54eYN+4fESP2eZyYjYB381KHF8pGE=
Subject key identifier:   E4:68:95:BE:BE:7A:36:0D:FD:DE:66:C2:FE:EA:7E:DA:86:66:2E:61
Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B
Certificate issuer:       /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
Manifest number:          01B9
Signing time:             Sat 29 Mar 2025 02:38:55 +0000
Manifest this update:     Sat 29 Mar 2025 02:38:54 +0000
Manifest next update:     Sat 05 Apr 2025 02:38:54 +0000
Files and hashes:         1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: gd166v9aOVwlq6wooQiRZYxorVrwJffA8ko4rpV/xB8=)
                          2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: 6uCw/qXIdZiC4cEobpHAa9i3YEi9P+DFX8n151x7wcY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911251C
        Validity
            Not Before: Mar 29 02:38:54 2025 GMT
            Not After : Apr  5 02:38:54 2025 GMT
        Subject: CN=67e75d3e-ddc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:2e:69:ba:22:b8:29:79:70:77:b8:18:cd:
                    30:6d:96:1c:6f:d1:8b:97:c2:86:b5:8d:1c:db:c2:
                    8d:80:2a:f8:0d:a0:40:14:8b:56:e0:df:54:01:f8:
                    dc:94:e0:36:9d:56:79:03:19:26:bb:89:8c:02:1c:
                    2b:94:cd:b5:5c:09:1a:c9:e6:7a:fb:39:1f:29:80:
                    a1:50:a6:12:7a:b9:d2:ff:21:25:64:19:b9:3a:65:
                    34:76:57:30:8a:5e:50:ca:0e:39:a3:8f:b9:a6:df:
                    3e:de:c4:e1:38:76:d6:ab:57:d7:94:eb:93:b4:2f:
                    d3:60:97:a4:9c:11:e9:f2:f3:7d:dd:bd:f6:09:3b:
                    e9:e1:e9:a5:c3:0b:28:dd:a0:8c:18:15:52:9c:f8:
                    37:f2:23:7a:0f:df:cb:59:4e:54:59:0f:85:6c:a4:
                    9e:1a:d0:d7:b7:a5:e5:2d:a0:9c:2e:69:0b:f6:bb:
                    3e:1a:be:08:6b:6c:f5:00:ff:62:89:72:f9:e4:89:
                    ee:ab:a4:20:fc:d7:90:8f:9d:f4:91:c0:b0:19:3b:
                    4b:24:57:94:0c:26:60:f4:34:67:67:40:32:f6:97:
                    a1:75:25:5d:75:c2:8d:41:ac:7f:09:8a:e0:52:c6:
                    82:91:9b:f7:72:bf:f8:99:c1:f8:e9:f9:39:bc:98:
                    03:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:68:95:BE:BE:7A:36:0D:FD:DE:66:C2:FE:EA:7E:DA:86:66:2E:61
            X509v3 Authority Key Identifier:
                keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:41:70:19:38:10:61:b5:2d:10:e8:40:7f:47:4d:fb:7d:12:
         ae:dc:da:a5:24:28:9e:c1:86:9d:cc:46:47:bc:55:c3:59:58:
         b9:8f:c6:ff:2d:cd:e3:69:4d:65:f3:bf:3e:96:96:51:3f:02:
         9a:58:61:11:aa:10:55:70:22:0e:ec:61:0a:02:10:38:44:72:
         45:35:b5:c5:d2:eb:6a:e1:ef:85:9a:d1:d3:6d:d0:9d:e0:0b:
         17:e4:f2:7f:f1:4b:a4:22:f8:23:5d:d3:c7:56:e2:a4:23:8e:
         f2:33:b3:67:46:56:a5:9f:ba:42:f2:37:1d:c5:62:d3:01:b4:
         d0:d9:7c:f0:3b:ce:f4:3d:df:e9:25:eb:e3:88:69:30:33:26:
         d7:56:d6:0b:b1:41:07:83:d8:51:9a:33:01:66:ef:01:e7:d9:
         4c:8b:21:d3:c0:0d:89:cf:74:97:6b:42:8e:33:a3:3d:a8:04:
         5e:61:22:f7:ae:3c:87:e8:e4:ad:2a:cc:b3:a7:13:48:70:f1:
         e2:7a:7c:32:fe:f9:a5:25:ff:e2:e1:cb:42:3e:2a:bf:fb:89:
         ba:8e:bf:04:b4:18:11:26:25:61:72:b1:c2:f9:71:87:15:0c:
         da:e8:45:11:47:ad:c2:73:f3:44:0f:73:d6:9d:55:7d:93:9d:
         f3:00:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----