Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
File:                     TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json)
Hash identifier:          8FbgoHk2ZvVL2S+gMp+Mk2tIAMEAealgbzIaCREZXJM=
Subject key identifier:   44:DF:D7:70:18:A5:A6:00:C1:F9:42:4F:A6:38:4E:9A:8C:3A:68:E1
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Certificate issuer:       /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial:       1206
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
Manifest number:          11E0
Signing time:             Fri 28 Mar 2025 17:18:25 +0000
Manifest this update:     Fri 28 Mar 2025 17:18:25 +0000
Manifest next update:     Fri 04 Apr 2025 17:18:25 +0000
Files and hashes:         1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: Q+d6HTiGPRkDB53BQCqoIeT5rrxJaE28lt7dPD0PLjw=)
                          2: 5604A238BB1C11ECBF12EE13C4F9AE02.roa (hash: NHWCUf8+AtbmzXnzmeZbtvKsPoQGJHCu3CTJE2iZ0Gs=)
                          3: 1DFE0A801E4211ED82CEED40C4F9AE02.roa (hash: IaKEMLHH7TpnUMP23vsjzKsi2qtWY17a/delPudkIiY=)
                          4: 41D236B27D2D11EDAFFEDF7CC4F9AE02.roa (hash: ZuZht7+LuqC9WsAxewTrmphz+5ViA4U2gImtlisiNCY=)
                          5: 54581848BB1C11ECBF12EE13C4F9AE02.roa (hash: aM+kflsjZ8tUuwjbVXKbKLGYT8Wl/jFCbN4S+5LlhQk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4614 (0x1206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A8A4
        Validity
            Not Before: Mar 28 17:18:25 2025 GMT
            Not After : Apr  4 17:18:25 2025 GMT
        Subject: CN=67e6d9e1-bac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:73:ec:1a:5b:93:29:d2:70:87:c1:20:eb:
                    51:22:1e:4e:af:ea:bc:28:45:de:9a:7a:a4:9c:12:
                    bb:e5:a0:54:3c:9c:46:9a:cd:e8:91:6e:c0:9e:c7:
                    ca:3e:12:10:a4:1e:19:c5:15:c6:54:aa:03:e7:a5:
                    ab:89:55:68:55:a5:75:73:f0:7e:38:8c:6e:59:f0:
                    14:c7:99:bd:21:73:31:f3:9f:ca:88:7e:70:4e:2d:
                    01:57:f1:01:ff:00:e6:4b:ba:71:d2:8d:7f:5e:3f:
                    b2:81:3e:e6:de:ea:44:30:fb:43:98:d9:99:77:f1:
                    12:e0:b9:08:19:0a:df:e2:0c:04:cf:e7:57:69:6a:
                    b0:48:8d:2a:17:88:11:e3:64:e2:9c:33:c8:54:47:
                    4b:6d:bf:d2:f1:0f:8c:8b:00:98:0b:ee:e4:c3:a2:
                    62:be:cf:90:9f:38:46:16:49:a1:c2:af:d7:73:ed:
                    14:cd:a7:73:ee:c1:4e:68:8c:4d:28:76:ab:8b:d2:
                    b9:9d:1d:ee:c1:9e:33:bd:4b:48:95:e9:ee:0a:d7:
                    cf:04:a1:d0:35:a7:42:89:ce:2e:1a:58:f7:40:c4:
                    2a:0a:bd:96:d3:65:1e:b7:52:51:b7:fc:34:42:f0:
                    7e:b5:11:88:f8:e8:1e:2a:c2:82:c0:49:ff:92:f1:
                    9b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DF:D7:70:18:A5:A6:00:C1:F9:42:4F:A6:38:4E:9A:8C:3A:68:E1
            X509v3 Authority Key Identifier:
                keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:03:c5:30:0d:5c:e8:e7:44:f0:8c:b8:ef:65:79:ca:46:35:
         52:ba:0e:2b:5a:fd:5f:2d:63:dd:fb:99:20:07:d7:4d:db:24:
         ba:91:f0:d0:b7:0d:3a:0d:90:08:23:ee:48:4c:33:f8:85:36:
         38:06:33:62:fb:90:d2:ee:34:26:80:b8:7e:5a:25:99:52:7b:
         6b:33:d8:fa:c3:e4:d8:a7:b6:96:8d:57:89:93:db:de:94:ef:
         19:3b:1e:63:b7:e3:cb:5f:3b:f7:21:42:d2:6f:29:8b:da:e4:
         03:c2:68:8c:21:29:c5:1d:a0:62:46:bc:fc:76:b7:a0:98:51:
         b9:91:5d:1d:62:04:3d:b6:a1:ce:87:81:4a:9e:24:7c:e3:a5:
         e9:78:5a:ed:bf:68:0a:b7:3c:35:39:f4:6b:9e:d0:94:05:1c:
         07:4a:86:d7:a6:74:17:2a:0f:9c:de:79:3a:26:b6:5c:7f:c9:
         d8:7d:88:93:5c:96:c3:2d:97:f3:e5:13:35:4f:4d:95:d4:fb:
         6b:8f:85:47:9b:3a:6d:f3:66:f6:c2:de:52:17:45:d8:94:f3:
         d1:5c:ea:38:ab:f0:ba:29:e1:2c:fd:4f:00:ef:14:23:b2:ce:
         a5:6b:40:68:52:6e:cf:26:8a:b9:40:8c:f9:49:f7:c2:1a:6a:
         a0:c4:dc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----