Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.mft
File:                     m_V0315_mb1Da6pQUvjKjPsxork.mft (raw, json)
Hash identifier:          8CHbIiaPcnjaybZBqAt2e5KU5nwNk7o9KCktqOi+ZgY=
Subject key identifier:   30:93:08:95:D7:E5:16:A2:F3:48:2F:AD:6F:8C:AA:17:A7:DB:4A:71
Authority key identifier: 9B:F5:74:DF:5E:7F:99:BD:43:6B:AA:50:52:F8:CA:8C:FB:31:A2:B9
Certificate issuer:       /CN=A9155374/serialNumber=9BF574DF5E7F99BD436BAA5052F8CA8CFB31A2B9
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.mft
Manifest number:          078F
Signing time:             Fri 28 Mar 2025 21:33:44 +0000
Manifest this update:     Fri 28 Mar 2025 21:33:43 +0000
Manifest next update:     Fri 04 Apr 2025 21:33:43 +0000
Files and hashes:         1: m_V0315_mb1Da6pQUvjKjPsxork.crl (hash: MxKzd40o1Lf+1rWc4fM5vTithd53eYiOaOhti/Xc9Rg=)
                          2: 334C06CE012C11EBA97D451DC4F9AE02.roa (hash: laoioFpup0/R4a51Kz+uVq1E8ssrCy6169Ky/npe8Zo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155374
        Validity
            Not Before: Mar 28 21:33:43 2025 GMT
            Not After : Apr  4 21:33:43 2025 GMT
        Subject: CN=67e715b8-93c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:3d:0d:cd:70:e2:f1:06:2f:cd:d3:3a:24:
                    eb:04:92:04:86:7f:15:62:0d:26:9b:c3:a3:0f:bf:
                    30:e2:4a:54:0f:01:4e:09:53:67:7d:9a:5b:aa:95:
                    ab:f6:be:97:58:b3:34:ad:ef:0d:e3:37:96:2e:07:
                    58:a8:a7:13:6d:e2:cc:cb:4a:a8:93:4a:16:09:c6:
                    48:7f:ba:1e:11:78:9d:f7:a0:84:89:18:08:23:aa:
                    76:2c:ac:9b:2a:6f:3c:e9:30:ce:3c:64:90:13:46:
                    e6:10:a9:b3:94:98:0e:12:23:a0:a4:03:51:a7:8a:
                    8a:dc:d3:5d:48:9d:d6:80:72:b4:15:63:97:ab:04:
                    26:5f:c5:9e:d6:01:89:ef:39:7c:40:e4:c1:99:76:
                    10:80:f2:4d:d8:3b:27:24:63:82:1c:6d:0e:9d:fa:
                    8d:68:97:db:92:fc:74:ba:80:2f:b6:fa:ed:1d:f8:
                    ad:d1:76:ad:d5:9d:10:11:df:8c:a9:94:93:3e:be:
                    58:01:d3:37:56:d3:ae:ae:6d:de:73:15:74:88:70:
                    c6:22:c1:49:8b:7e:03:3b:6d:98:b5:77:ec:76:a1:
                    26:73:b7:d4:c8:2b:8f:6c:c4:63:01:b5:1a:2a:33:
                    5f:e1:7c:e7:b1:b3:9c:d9:aa:02:9c:4e:1b:be:90:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:93:08:95:D7:E5:16:A2:F3:48:2F:AD:6F:8C:AA:17:A7:DB:4A:71
            X509v3 Authority Key Identifier:
                keyid:9B:F5:74:DF:5E:7F:99:BD:43:6B:AA:50:52:F8:CA:8C:FB:31:A2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:11:09:6b:a3:69:ef:38:78:d8:e1:a7:30:c5:1c:b4:48:
         8a:88:b7:33:ab:cd:8d:4e:be:3c:8a:9f:7a:0e:5c:1a:ff:d6:
         32:c2:37:78:e1:11:1f:4a:98:e7:11:8c:b2:a1:fb:9d:e5:78:
         df:3d:a2:8f:21:80:87:5d:3e:80:aa:34:c9:75:5f:8c:3a:43:
         4f:de:fc:16:c7:21:76:02:ef:23:34:3e:9b:08:b4:84:25:60:
         ac:d6:b1:1b:e2:14:81:ce:9e:13:d6:c3:00:92:16:84:7d:6f:
         f5:ea:02:46:c1:fa:5d:6e:f0:3c:0c:ba:cb:2a:78:d7:f0:94:
         03:5a:34:69:a5:44:11:12:07:af:5d:37:6d:26:63:94:04:11:
         9c:bd:4b:e1:b8:fa:c4:56:b4:5c:de:35:d1:eb:28:82:63:d7:
         b7:44:72:7b:2b:6f:2e:26:50:bd:c1:62:c3:59:3e:73:9c:37:
         63:f4:09:db:2e:c0:66:50:8b:fb:8e:d5:b8:9a:47:e2:97:07:
         6c:4c:e8:d9:e8:03:92:5e:91:54:69:60:d8:24:28:d0:cf:f5:
         5b:4a:a4:44:f1:c8:a4:25:5d:45:0b:ac:69:a7:d4:72:c7:db:
         b3:bc:c5:c0:33:45:3b:25:0c:06:50:bf:c6:91:d5:0a:7f:74:
         8a:e5:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----