Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
File:                     VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json)
Hash identifier:          TywZqj89iy9i2kDdR75dqFFrT1VFQZleeS4Ss1giMvk=
Subject key identifier:   28:08:DE:93:34:7D:9F:6C:9B:E5:05:8A:B2:75:A7:0B:4D:80:A5:6E
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Certificate issuer:       /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
Manifest number:          0118
Signing time:             Sat 29 Mar 2025 04:26:07 +0000
Manifest this update:     Sat 29 Mar 2025 04:26:07 +0000
Manifest next update:     Sat 05 Apr 2025 04:26:07 +0000
Files and hashes:         1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: IfZMWCMwBdPLv5PNoMQ+199SRZkjTVWo8naftS6V82Y=)
                          2: 22C2DBA66E7511EFA80C0F12C4F9AE02.roa (hash: tr6zyJGh7+1q2ybxGoLN0xTOQqNRAsC2+oBUs/Woa0Y=)
                          3: EE44E774314411EF956C0046C4F9AE02.roa (hash: RuueBAzkzHj3V8fqwlyaa9eFSpNJ4wgOoJ0+Jq+BXus=)
                          4: 0BB29428314511EF9B1F4B46C4F9AE02.roa (hash: zTFd6R54T3NlCmkGgnrlEJM5la1RNIWxE66Q49nYSZ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91229A5
        Validity
            Not Before: Mar 29 04:26:07 2025 GMT
            Not After : Apr  5 04:26:07 2025 GMT
        Subject: CN=67e7765f-8001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:f6:f9:5f:eb:03:fa:90:9f:6f:d4:21:6e:
                    46:a8:ba:dd:27:c6:91:d7:e2:98:94:71:7b:92:e7:
                    cd:bd:1a:7b:d2:d5:eb:01:1d:39:0b:0a:40:39:70:
                    3b:60:50:67:33:ff:4c:64:63:4a:6d:2e:8d:20:bf:
                    32:fc:d0:33:ba:d7:26:65:02:98:e2:b0:58:04:ac:
                    13:80:bb:10:08:1d:3a:32:cb:28:03:4a:09:48:79:
                    ab:53:a4:31:99:06:60:cb:d9:b9:3f:ef:97:03:36:
                    bf:f9:e7:a4:5b:7b:b2:dd:61:d3:5d:27:61:01:53:
                    8a:2f:ec:9a:e9:c4:8f:ee:0b:12:d0:8d:35:c0:ee:
                    5f:89:f0:51:f6:a4:16:31:32:48:f1:aa:e1:13:d0:
                    f6:49:76:2b:5a:e4:9c:35:17:3d:53:8c:61:19:84:
                    04:30:eb:c6:1e:9a:a8:81:a5:97:65:d6:59:7d:78:
                    8e:37:06:d1:56:a3:35:d2:8f:b9:d4:1e:79:f5:be:
                    8b:75:d1:5f:f7:c9:07:f8:82:72:04:95:68:e3:61:
                    95:9e:97:1a:59:d2:e5:3a:0f:7f:3b:08:20:79:ec:
                    b7:67:a1:1c:67:24:e5:ef:c9:da:73:36:a4:12:78:
                    7a:36:f3:30:a9:81:77:c4:ca:10:ba:04:85:8e:da:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:08:DE:93:34:7D:9F:6C:9B:E5:05:8A:B2:75:A7:0B:4D:80:A5:6E
            X509v3 Authority Key Identifier:
                keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:89:7c:6a:1e:c3:b6:02:a3:2b:2b:32:6d:a1:39:f3:50:35:
         3e:d0:9f:40:3d:2f:08:23:1d:2a:f4:31:02:1e:b5:02:ad:5a:
         6b:3f:13:c6:98:65:e9:42:f1:52:20:89:2f:b8:c3:ef:88:c9:
         21:33:ac:5f:ad:17:33:80:31:ef:01:dc:39:eb:31:b8:2b:34:
         6d:22:bb:da:bf:25:f0:00:ac:5a:85:df:36:dd:b6:61:55:9b:
         6c:71:3b:ca:9e:41:d0:4c:1c:44:24:18:f8:e2:be:1d:cd:1e:
         36:71:dd:42:f7:12:ad:1f:2c:2f:7c:56:a7:df:b9:1a:a7:57:
         56:1d:f8:3d:44:ab:86:c6:0c:86:0d:12:6a:bd:7c:71:8d:ec:
         f8:4b:13:b5:7f:4f:45:b2:e4:84:3d:89:8b:c1:38:3c:81:38:
         31:04:14:84:26:12:6f:e7:3a:c2:7b:b3:10:2b:67:f5:f9:28:
         c8:25:04:68:59:e9:87:58:bf:10:1c:56:aa:1e:5a:7d:a3:da:
         86:a6:85:c8:db:aa:22:ed:89:52:ab:6e:ab:f5:7d:d8:a2:6b:
         f5:98:a1:6d:4f:c4:4f:e3:27:04:2b:f0:53:5b:fc:62:3a:92:
         cf:93:77:a0:27:a6:9c:70:ec:8d:ca:37:da:5b:30:d1:42:77:
         a6:0e:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----