Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
File:                     _1wQCXXjaGJFyt5XnFdDO7_faBk.mft (raw, json)
Hash identifier:          JwsAU03plQ115wkqCb7LGbbnhs25WKYIHYLftD8QeIE=
Subject key identifier:   BF:17:7B:37:51:D7:C6:3B:EE:FD:57:36:B3:85:A0:2B:DF:6A:E1:C9
Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
Certificate issuer:       /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
Manifest number:          F8
Signing time:             Sat 29 Mar 2025 04:35:18 +0000
Manifest this update:     Sat 29 Mar 2025 04:35:18 +0000
Manifest next update:     Sat 05 Apr 2025 04:35:18 +0000
Files and hashes:         1: _1wQCXXjaGJFyt5XnFdDO7_faBk.crl (hash: mWq5xzGcmBUQEGs9k2kI/qQccbgPkTCToIYHoedQtls=)
                          2: 749936E290D511EE816E5C34C4F9AE02.roa (hash: LprFRa9DDPfl/3Qfhn6O1nEl8KrrEuPylvF2cGWjxe4=)
                          3: 740BB01A90D511EE816E5C34C4F9AE02.roa (hash: n+XeE9XCFt/q45U7WPv35bND6hFpIvrgPLf9ca2BNws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144913
        Validity
            Not Before: Mar 29 04:35:18 2025 GMT
            Not After : Apr  5 04:35:18 2025 GMT
        Subject: CN=67e77886-81db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:46:55:3c:a0:36:6f:da:ee:d5:ea:86:4f:c7:
                    b8:a0:e1:15:ec:db:ae:f7:1d:7f:58:7b:d9:a0:66:
                    2a:ea:7c:6b:cd:b7:b2:40:64:6c:c3:05:cf:1b:0c:
                    b3:e7:3e:9a:68:0f:d0:2b:4f:7c:35:38:12:37:f4:
                    07:59:78:3e:6a:9e:5c:c6:96:d6:99:67:e2:c0:6d:
                    3e:43:d9:28:5c:aa:08:73:b0:68:2e:29:66:ec:8c:
                    90:65:2b:37:01:d5:8b:a4:7e:7c:c5:78:33:1c:c6:
                    8a:a8:40:13:09:c8:d2:08:fe:18:e9:ca:8b:86:fb:
                    d4:65:00:dc:2e:dc:e9:0d:a2:1a:88:bf:c7:46:11:
                    4a:ae:6e:0d:5f:58:75:8b:eb:cc:d0:a7:35:ba:b0:
                    6b:9e:db:fc:66:0e:a9:fd:c4:d6:bb:76:54:48:14:
                    89:b0:ad:89:54:7a:0d:22:6e:88:64:f6:e1:00:93:
                    f8:dd:39:41:c0:55:fd:74:d1:80:4f:42:b7:a7:a8:
                    b7:af:a5:24:94:76:ad:4b:e4:75:15:aa:a9:63:42:
                    2f:6a:b0:5f:cd:71:30:f0:17:2c:4a:e5:f4:ed:50:
                    a6:8e:dd:29:c7:92:38:d0:0a:28:d3:9e:b7:21:e2:
                    ae:5e:a6:19:2b:44:df:66:bb:b7:0d:59:2c:7d:5f:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:17:7B:37:51:D7:C6:3B:EE:FD:57:36:B3:85:A0:2B:DF:6A:E1:C9
            X509v3 Authority Key Identifier:
                keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:48:bd:b7:a9:9d:84:c4:fd:4c:55:59:b5:03:9f:55:1c:99:
         85:d1:13:a8:9f:d4:21:18:d2:78:3b:b5:41:ac:14:fc:93:e6:
         9a:09:eb:5a:5e:c8:73:f8:63:b5:66:fb:0e:e1:89:a0:4d:05:
         a5:d3:bf:5a:a4:ff:43:51:54:44:71:5f:18:49:fa:cc:82:09:
         74:21:d7:e3:93:bb:05:f0:89:6f:44:bc:a8:fa:85:5d:51:9c:
         6d:08:e2:3f:1f:12:57:68:9b:00:b1:54:38:20:5e:81:c2:5e:
         a6:e0:49:72:20:ad:f4:5d:cc:38:6a:1a:4b:8f:20:96:66:b1:
         d9:72:a6:62:93:f6:2f:5a:2f:da:bd:6e:10:9c:d6:e3:b8:9e:
         e9:81:29:68:94:da:bc:69:1f:30:f5:7f:ba:38:c6:e2:43:cf:
         44:3a:bf:b9:bd:ca:6d:d2:e9:39:3c:5a:de:f6:ab:13:11:96:
         88:7c:cd:ca:bb:36:f0:67:b3:e0:3e:e9:a4:47:ce:1d:de:13:
         b0:e6:fb:85:7d:61:04:a0:1f:0b:65:e1:73:6e:bd:a2:af:a1:
         bb:4a:b9:8d:5f:e9:f3:c6:83:76:93:25:d8:c9:30:7e:25:88:
         18:98:7f:2a:a6:a1:c0:f0:79:92:29:b9:56:6b:23:b9:5d:8b:
         f1:43:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:58:30 2025 by rpki-client