Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          H3B+5We9ESle8C/yzQ0WfMh5bWvUHPHFHLPSLTf+kLw=
Subject key identifier:   09:CC:CD:A0:A6:FE:0B:F8:E3:93:C7:54:A9:06:E7:01:B6:E5:56:0A
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1DF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1DDE
Signing time:             Fri 28 Mar 2025 16:12:43 +0000
Manifest this update:     Fri 28 Mar 2025 16:12:42 +0000
Manifest next update:     Fri 04 Apr 2025 16:12:42 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: EPvJe0g1fV0nn5V7FzYL58SsQfzKTKUa7v4vAkGuTnU=)
                          2: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: HcaovZ/E4LVI99vShwEF3DVWudHVhbjCDuMnNSp75nw=)
                          3: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: lziphfAQalP1g1qd41FgsGMuQq4aElhXOf7iBsezcaw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7670 (0x1df6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B
        Validity
            Not Before: Mar 28 16:12:42 2025 GMT
            Not After : Apr  4 16:12:42 2025 GMT
        Subject: CN=67e6ca7b-f0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:b0:4d:85:9f:6e:a3:4f:90:16:6b:bb:74:
                    ec:81:85:e4:4e:8e:db:e8:10:93:39:1a:3d:c4:9a:
                    cf:c0:ab:f4:7c:51:28:39:ae:73:8b:5f:15:cb:ad:
                    05:33:a3:22:5e:21:d8:36:a8:8a:b7:8a:c4:e1:9a:
                    21:d7:24:4a:b4:bb:c2:c2:ff:47:46:b2:a2:74:85:
                    11:68:ae:23:ad:4f:36:3e:f3:f7:6b:ec:25:3b:f1:
                    e0:ad:19:6b:3a:1b:fb:75:80:72:20:e3:47:24:58:
                    20:f5:a0:7b:d1:38:33:ca:80:1c:4d:55:42:ba:08:
                    d6:80:d2:64:cb:e4:c0:4d:c4:82:17:02:29:81:0e:
                    64:0e:46:ca:c6:42:e8:84:7a:5d:a3:c1:48:14:2f:
                    01:a3:9b:e4:aa:c8:2e:6e:0b:8c:3b:a3:9b:9a:10:
                    be:d5:c7:18:36:b6:20:62:4b:b2:bf:34:8d:b9:d2:
                    ee:7f:cb:68:86:53:fb:16:e7:f9:6c:72:47:8f:99:
                    b4:9b:bf:23:13:a3:96:ea:2d:c8:5f:92:69:2b:d1:
                    17:35:f6:60:fe:b1:53:f2:c0:06:d1:ae:64:db:09:
                    9d:9c:a5:e1:74:2d:e8:11:74:b1:64:58:27:84:76:
                    dd:f2:be:09:b1:0c:7f:85:38:d5:cf:77:23:f8:a1:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CC:CD:A0:A6:FE:0B:F8:E3:93:C7:54:A9:06:E7:01:B6:E5:56:0A
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:af:3c:94:1d:af:f2:39:dd:40:ac:b9:53:3b:3d:65:2a:
         14:4f:f3:cf:51:b8:b4:ce:d1:db:ab:55:43:25:d6:1d:d3:f1:
         07:9e:46:93:fa:1d:30:23:1e:76:2a:11:3e:c0:5f:71:a7:00:
         67:26:e4:41:4e:16:33:b0:af:2a:a4:d9:56:fb:15:aa:6f:c3:
         06:08:a1:5f:f0:84:3a:5a:17:3c:da:e2:c0:5e:46:1f:47:dc:
         fb:56:9e:a8:55:c5:24:44:82:5b:cd:a8:26:26:1b:55:79:38:
         5f:12:c5:11:32:05:cb:3e:d8:c7:a4:2b:01:4e:cb:55:aa:14:
         a7:c2:79:e5:58:0a:85:d8:2e:6a:05:6f:30:12:b4:ac:ed:ee:
         3c:20:95:da:d2:8d:54:6f:3d:9f:40:69:de:74:41:33:bd:90:
         9f:b0:83:3d:37:12:e6:40:51:7e:b0:42:a7:75:1a:80:90:6e:
         83:9d:ae:e3:2b:7c:4f:56:c7:fa:4d:d4:39:18:3a:7d:79:de:
         88:5f:32:8f:53:54:e5:d3:ab:e4:e2:9f:aa:d7:b0:ee:e1:27:
         0b:bf:1a:e4:c0:b5:f9:64:cf:d3:9f:6c:6c:7f:08:62:2b:43:
         02:be:19:64:63:24:14:dd:32:12:c9:31:e9:c5:81:88:84:19:
         8e:1e:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----