Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File:                     AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier:          6OasGRKtaICJIklmadClpZlwOXdjolxyL7CWHdUqHDc=
Subject key identifier:   F0:BF:83:D8:22:B1:F6:8E:2D:46:A9:4A:05:90:BC:CC:14:A6:46:5D
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer:       /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial:       0939
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number:          092C
Signing time:             Fri 28 Mar 2025 20:32:53 +0000
Manifest this update:     Fri 28 Mar 2025 20:32:53 +0000
Manifest next update:     Fri 04 Apr 2025 20:32:53 +0000
Files and hashes:         1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: gt+p9BW7oWhb5G1Bqu9IQKnm1U8j+FZKM//JCI5Spa0=)
                          2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: QM6yiuNN4HsQC994z+CdWb6oLYSKQw2/aCC7nDolw/E=)
                          3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: OKqVFD1uZroQnXYiHQdFbraVnh1GYUqvC3EFoMwpZqM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361 (0x939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91147EF
        Validity
            Not Before: Mar 28 20:32:53 2025 GMT
            Not After : Apr  4 20:32:53 2025 GMT
        Subject: CN=67e70775-7976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0c:75:44:bf:9a:d6:f8:b0:c5:d4:5c:62:c5:
                    75:66:11:0c:9f:8a:37:4b:e0:b5:0d:89:85:c3:7c:
                    fa:1a:62:27:62:34:f8:4f:af:18:a4:2a:6e:97:7d:
                    d0:82:37:66:ab:75:89:a0:36:48:fe:4b:94:13:00:
                    ff:2b:85:7c:e9:3c:38:38:36:aa:55:27:72:3f:37:
                    c4:45:eb:c5:14:91:9b:73:0f:23:58:fe:ea:78:f9:
                    0e:3f:f5:06:75:df:bb:c4:7c:26:44:0c:7c:4b:18:
                    ff:67:be:90:64:46:07:85:3b:9c:ea:ce:b2:e7:eb:
                    f7:b7:a9:35:5f:20:8e:bc:8d:5b:48:7b:a4:f2:e1:
                    96:66:e5:5b:a4:95:10:59:5b:62:57:b4:c3:1c:30:
                    3c:c6:b0:67:41:2a:49:11:70:61:8b:95:f4:51:b4:
                    49:5a:6d:18:27:c9:76:fb:43:33:68:c5:1e:28:6e:
                    dd:ad:86:2d:79:ea:eb:14:a5:14:5a:bb:1a:85:20:
                    0d:fc:db:75:52:2a:5b:0c:2a:5f:f5:15:33:4e:a2:
                    5a:c1:2d:05:30:65:40:87:1b:87:f8:35:2f:33:98:
                    7c:ae:e3:38:aa:06:e8:9a:fd:6a:e5:46:ed:e8:15:
                    0d:77:e4:48:84:59:2d:72:67:fd:d3:c1:ed:4d:e1:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BF:83:D8:22:B1:F6:8E:2D:46:A9:4A:05:90:BC:CC:14:A6:46:5D
            X509v3 Authority Key Identifier:
                keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:8c:eb:c2:4d:39:9b:7a:54:e5:64:c8:70:c2:0f:20:35:
         d4:f2:b5:72:3c:00:08:3a:64:d2:92:bd:4c:11:26:ad:2c:70:
         9e:01:32:24:80:d1:90:69:65:7d:90:a9:f8:98:a8:e8:69:cd:
         6b:b2:85:2e:af:78:3d:a1:10:13:c3:3d:3a:5d:da:1c:b8:30:
         c4:ff:ac:b7:b3:c5:34:e0:a4:33:eb:bc:41:de:45:17:fa:96:
         89:38:3f:27:03:d8:44:ff:da:82:06:9a:b2:8c:db:72:41:74:
         f8:40:fd:48:03:13:69:b8:67:3a:9e:25:5b:be:2c:f8:fc:cf:
         3b:54:dc:b0:e1:ab:38:eb:aa:e2:0b:41:3c:6a:17:4a:82:e5:
         a4:43:81:b2:c2:5c:8e:df:3b:22:79:38:24:a9:16:ca:d5:df:
         ba:15:73:19:8c:ad:4f:91:72:0a:e9:1f:17:9b:30:e0:7b:b5:
         67:ff:a5:6f:56:7a:0d:67:b9:bd:4c:46:0c:bd:6a:58:dd:cd:
         c1:45:7b:e3:04:83:76:76:c7:3c:f3:dd:b8:b7:58:d8:7e:29:
         30:8f:4d:ac:78:97:57:82:37:2f:21:31:23:e5:4d:42:df:0f:
         02:0a:49:a9:38:5c:2e:1c:1e:73:c3:ff:a7:96:9a:42:34:85:
         a2:c3:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----