Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
File:                     PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json)
Hash identifier:          MpylhHgYsTQxJkTiNiv1ZFSei7+BiKjBZBvq5+KjBZ8=
Subject key identifier:   E9:EE:A8:E1:7E:3A:28:2B:DE:A2:69:D1:EB:EA:DF:E7:AD:C6:60:15
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Certificate issuer:       /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial:       03CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
Manifest number:          03BC
Signing time:             Sat 29 Mar 2025 00:55:15 +0000
Manifest this update:     Sat 29 Mar 2025 00:55:14 +0000
Manifest next update:     Sat 05 Apr 2025 00:55:14 +0000
Files and hashes:         1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: TcHhdyOlSb+LH+rmmPnBUD3oB6ztkM29zDb1HFXdKyo=)
                          2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: 6+2Lk4Xai3HUwAmjg8bW8UOOypYan1IgfWd2mzH9/MA=)
                          3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: P2hgHU8XOvbHIrBabwcVzNSzMatmcwCF4tAzz5uDO10=)
                          4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 4y99R2661TzfOkabp7/pgfm0pWxC4+jDx6PFu0Fa6p8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91596C4
        Validity
            Not Before: Mar 29 00:55:14 2025 GMT
            Not After : Apr  5 00:55:14 2025 GMT
        Subject: CN=67e744f3-57a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:02:41:61:b0:9b:c4:be:a4:e8:de:ba:16:
                    6d:64:91:28:d1:aa:fc:1d:5b:28:73:1e:17:0f:f4:
                    a7:34:07:fc:df:c8:1f:3c:5c:2a:36:f0:73:34:66:
                    c3:f3:bb:13:b1:8a:7b:44:a6:6c:41:09:2c:40:42:
                    c7:ef:1a:89:24:60:11:55:0d:a9:c0:f0:f3:5e:1a:
                    75:27:be:e8:54:4e:56:aa:b6:ee:a1:40:2e:5e:77:
                    12:53:9e:2f:47:ad:aa:48:29:42:b2:c0:39:49:d6:
                    68:a5:0d:3b:1e:94:0e:38:f9:a5:2c:46:15:bf:f8:
                    d6:42:4d:92:a8:3f:ab:63:95:71:a5:d5:c9:94:c8:
                    0d:9c:7a:74:7b:e3:05:8f:47:81:4c:c2:09:fa:eb:
                    13:3b:7c:47:cb:a4:e5:c0:10:2d:f0:a1:f0:51:ac:
                    03:18:ab:6d:43:85:23:2c:86:d6:96:e2:4f:b3:a3:
                    be:ce:91:18:4c:8b:d3:09:c1:c4:82:77:55:99:56:
                    c0:3b:a2:92:44:dd:aa:c2:d4:16:54:4f:60:25:86:
                    a8:42:4a:4d:84:cc:52:7d:5a:79:d7:e2:2a:b4:1b:
                    4b:40:d5:d8:b5:8f:f6:ab:1f:1d:db:78:dd:ac:33:
                    26:18:92:0b:39:19:9e:af:0c:a3:ba:e8:ea:75:0c:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EE:A8:E1:7E:3A:28:2B:DE:A2:69:D1:EB:EA:DF:E7:AD:C6:60:15
            X509v3 Authority Key Identifier:
                keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:95:14:51:97:05:7b:50:cc:90:d9:79:13:2c:20:db:6c:
         3c:0f:70:3b:65:c9:3a:8e:b3:59:f0:e3:3e:56:df:dc:3c:2b:
         a0:9a:6d:2b:7a:57:23:63:d5:12:77:e2:81:b1:ce:09:12:a5:
         c8:13:6d:25:00:88:ef:0a:5d:f4:d2:a6:7d:ca:27:35:8a:8c:
         e4:d6:a1:eb:3f:41:74:4c:48:fe:17:bf:bb:63:c2:15:f9:db:
         7e:b5:18:90:95:a5:f2:a7:61:fe:e3:91:9a:27:3e:33:f5:40:
         06:f1:b3:95:99:5a:99:96:2c:44:d0:9e:49:3b:0e:72:aa:93:
         e0:13:cc:86:42:ca:63:52:1a:0b:3f:c1:27:bf:7e:6d:a5:4e:
         23:b3:92:31:ec:d0:d0:12:c2:31:7a:0f:41:19:6f:b0:41:30:
         b9:f1:5d:bf:e8:8e:0f:f1:88:cb:80:f6:d0:42:7b:1c:ff:31:
         ec:51:7c:0a:f1:49:6b:ec:ca:c9:45:ac:48:4d:c4:ce:75:bf:
         d5:81:dd:3d:c3:52:a6:31:7b:58:5a:ef:53:61:6e:92:15:b4:
         4a:f5:37:86:a7:fc:33:e7:b9:60:bc:70:02:ad:db:54:75:ea:
         a6:c8:93:ad:95:d3:84:4c:61:f4:5c:3a:6f:28:89:92:4f:90:
         85:83:c4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----