Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
File:                     FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json)
Hash identifier:          PnCAVk1OYFaWKr7pw/iUpPjeT7Y8e8cicRMsdt22w6E=
Subject key identifier:   60:5A:C5:EC:BA:95:45:62:1F:2F:92:F3:C6:F2:57:73:F9:7D:B4:B5
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       0AA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
Manifest number:          0A94
Signing time:             Fri 28 Mar 2025 19:46:17 +0000
Manifest this update:     Fri 28 Mar 2025 19:46:17 +0000
Manifest next update:     Fri 04 Apr 2025 19:46:17 +0000
Files and hashes:         1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: hF2L0DNDObK5RaXTY8CDjwJBT5BZJz0WXan7gmrZvLA=)
                          2: 13321D24572211EA88CE445FC4F9AE02.roa (hash: xXSQwBPCYruuGyQsKTjHM9n/RD09yi8k8z8wgJzm9aU=)
                          3: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: ZAAiXs8Yo5BnQ7gh48TENV41rzsIW/WMFRgJN6n/qck=)
                          4: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: X82qAyT8/61wVP2kDNOcBKWAMfutmgdSPtnosWaKfos=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2726 (0xaa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D
        Validity
            Not Before: Mar 28 19:46:17 2025 GMT
            Not After : Apr  4 19:46:17 2025 GMT
        Subject: CN=67e6fc89-9ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:e0:ef:47:a2:d1:7d:d8:c4:70:f0:34:e2:
                    29:ef:05:e4:2f:8f:8b:dc:b4:7f:0f:1e:14:4b:eb:
                    01:a2:54:dc:c1:16:ce:bb:d3:62:0a:b3:db:3f:29:
                    fd:5c:0f:e2:53:a9:92:80:33:5f:77:c6:d3:3d:99:
                    de:e5:08:f3:3a:bc:d7:88:17:ec:9c:49:58:4a:92:
                    cc:24:04:aa:cf:81:02:a6:e0:2d:41:d0:0c:fb:5f:
                    63:67:39:37:61:aa:d0:3b:44:41:1e:c5:31:fb:c6:
                    aa:87:e1:04:80:54:7c:8e:38:49:ff:90:2f:4f:d4:
                    cf:de:f5:66:64:e3:6f:ed:4b:ba:e1:70:02:87:b7:
                    5b:fb:14:ab:a8:66:84:f3:11:b0:3b:b9:5a:85:3e:
                    33:78:7c:b2:95:4e:11:3d:9f:19:63:f6:27:6c:7f:
                    60:b3:28:33:3a:09:e6:ce:b4:91:8e:b4:d0:1e:6d:
                    67:ff:bb:f3:56:a2:f0:d7:5f:ce:65:5a:4a:17:38:
                    36:83:9e:85:56:e5:24:39:d8:f0:79:12:37:b9:20:
                    d7:b7:f5:00:d2:ea:62:f8:6d:d3:b7:58:cf:50:54:
                    f1:6d:72:ce:08:82:68:dd:84:b4:20:e3:5f:72:51:
                    09:0f:31:86:ff:32:07:c4:5a:5c:0d:66:55:e4:e0:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:C5:EC:BA:95:45:62:1F:2F:92:F3:C6:F2:57:73:F9:7D:B4:B5
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ad:82:3a:2f:e7:17:8d:0d:24:25:6d:ee:21:02:1d:2e:1f:
         a1:6c:9c:d7:da:4f:8e:75:fb:0e:8d:93:9f:6f:22:ec:0e:89:
         4d:cb:ef:9c:7b:05:53:e3:8c:36:2b:3a:29:d1:b8:b1:5c:c5:
         5c:e1:68:84:a0:3f:64:b6:1d:23:c8:25:a0:d3:9c:7b:d9:7f:
         34:e4:fe:30:71:4d:55:da:d4:6c:18:f6:20:35:27:1a:3f:bc:
         91:f0:ce:c0:d7:ba:76:7a:f8:7a:d6:a6:8e:26:bc:b6:12:4f:
         93:51:4f:a3:81:1d:b4:3b:06:bf:f7:f1:fb:d5:06:ef:53:50:
         e1:c8:0f:c4:3b:b6:33:83:2f:cc:c6:43:4c:6d:6e:39:fb:65:
         ca:74:2d:ac:91:00:87:a0:56:95:a0:73:15:59:b5:51:1f:da:
         e5:86:57:c6:29:af:c5:a6:81:ac:df:5a:58:aa:4f:70:a4:78:
         26:65:ef:87:c8:8d:7c:c3:61:c8:88:37:0f:e1:ec:70:6c:3e:
         01:0d:70:3b:49:c1:10:d2:65:5b:c2:5a:90:b1:ac:3e:1b:eb:
         ee:7b:8d:69:c1:21:a0:a2:db:c5:52:80:bf:dd:84:50:28:4d:
         ff:c7:2b:a0:e5:7f:6e:10:e4:40:60:8c:10:ff:59:0d:a7:a5:
         17:34:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:18 2025 by rpki-client