Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
File:                     w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft (raw, json)
Hash identifier:          jEoJQ4ZI++pNlUgmoDOyNV91Z3KXFe+obmsFCv7oiz4=
Subject key identifier:   48:7B:94:17:AF:6E:D3:EC:0A:8A:BF:A5:9A:85:C6:B2:DD:67:13:27
Authority key identifier: C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49
Certificate issuer:       /CN=A91557F2/serialNumber=C3F8FCE162A10558626379E8C019732A243E6349
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
Manifest number:          07F3
Signing time:             Fri 28 Mar 2025 22:21:28 +0000
Manifest this update:     Fri 28 Mar 2025 22:21:28 +0000
Manifest next update:     Fri 04 Apr 2025 22:21:28 +0000
Files and hashes:         1: w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl (hash: R5ztm0q6XQf7ccCH3Ej6jRuMC839OVY4UoCeWvfQvlI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F2
        Validity
            Not Before: Mar 28 22:21:28 2025 GMT
            Not After : Apr  4 22:21:28 2025 GMT
        Subject: CN=67e720e8-3986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:ba:9c:02:7c:c6:66:54:51:8b:c2:80:41:
                    6f:09:5c:3f:1b:23:7a:8d:36:d4:f4:29:a2:50:fd:
                    63:45:f6:8f:1e:7a:1b:07:72:14:07:23:0c:ef:3c:
                    c6:2d:8b:44:6a:a8:e5:4c:90:51:a7:2e:dc:10:44:
                    2c:93:28:2d:83:ab:1a:d2:01:82:19:c3:10:19:56:
                    5a:2c:01:48:1a:f0:d1:5a:ce:4c:23:3f:44:b3:1c:
                    9d:e7:bf:65:6e:5c:ee:01:7a:2c:09:85:ba:87:6d:
                    8f:86:63:e1:b7:1a:41:f5:6b:24:4e:4e:4d:c1:90:
                    5f:bc:37:47:66:89:b7:d4:e9:5f:a1:95:34:b5:6f:
                    c2:8c:fd:e9:15:d8:4e:e5:89:98:bd:be:a7:05:4e:
                    88:1f:f4:28:6c:ba:a4:0e:c2:95:9f:1d:ae:d0:60:
                    6c:13:b5:c1:4e:1b:04:7c:e1:c4:bd:8b:ff:b3:3d:
                    32:5a:1e:ea:13:7f:6e:cc:6b:ec:c6:bf:d3:12:f8:
                    d5:b4:11:06:2e:a1:88:67:d8:b8:a1:08:69:49:93:
                    b7:73:77:9b:e5:dc:87:9d:ca:cb:56:15:33:d2:6a:
                    bb:fa:a6:94:97:c7:f7:ce:d9:9b:99:30:04:02:b7:
                    fd:e1:f9:ea:70:ee:b6:89:c4:3c:bb:65:29:de:29:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7B:94:17:AF:6E:D3:EC:0A:8A:BF:A5:9A:85:C6:B2:DD:67:13:27
            X509v3 Authority Key Identifier:
                keyid:C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:40:5a:5c:9c:88:02:c9:5b:7d:f6:97:c9:82:f7:34:be:a4:
         3c:9f:3e:fc:3c:21:e5:ec:ba:58:de:79:ca:ba:c1:84:e4:6b:
         1f:93:08:0b:56:e3:9f:77:1f:1d:4d:b1:fa:2e:57:92:a3:68:
         f6:f0:5f:8d:8a:c0:84:e6:ac:5d:92:d3:d8:3d:b1:21:a4:b1:
         bc:e5:e4:de:83:0d:de:04:e2:65:2a:5f:d3:d5:4e:c8:cf:80:
         75:76:95:fe:33:d1:82:d5:11:d3:d7:3a:0b:16:8a:f1:61:c4:
         a6:d2:e9:fa:d3:e5:0f:1b:36:4d:06:dc:a7:8a:7d:b4:60:76:
         6f:03:76:16:bf:a0:3d:bd:df:6b:d7:9e:84:8e:0e:cf:68:6e:
         aa:d7:57:ce:61:26:19:6d:56:be:bc:8d:6e:28:eb:51:64:50:
         59:c5:69:b3:48:1a:33:94:af:3c:7d:9c:d9:87:90:72:48:c0:
         c5:b3:fe:04:a6:ac:8b:01:61:91:a5:d2:98:83:a1:82:75:bc:
         9e:4a:e8:a9:7a:2f:7e:68:60:1e:09:3d:bd:2d:94:8e:bd:11:
         af:27:0e:ea:8a:8a:20:a8:1f:17:99:84:d5:58:5a:31:19:93:
         c1:79:ab:79:85:65:86:30:6b:8b:74:e7:7f:d2:71:9d:7e:78:
         d6:50:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:36:29 2025 by rpki-client