Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
File:                     83VHbzI13D1SUXHivpIRY45JCEc.mft (raw, json)
Hash identifier:          mlp8LLBRZkzRteA+tpe5CwlbN6nBWUnFjNveiGEzJX4=
Subject key identifier:   9A:75:B3:07:DC:9B:77:73:98:6D:C7:54:D9:C2:FD:D0:AD:47:D4:81
Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
Certificate issuer:       /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
Manifest number:          1F
Signing time:             Sat 29 Mar 2025 07:15:36 +0000
Manifest this update:     Sat 29 Mar 2025 07:15:35 +0000
Manifest next update:     Sat 05 Apr 2025 07:15:35 +0000
Files and hashes:         1: 83VHbzI13D1SUXHivpIRY45JCEc.crl (hash: Rap/2gBE3h2OaHMlWTvcPlODx8LRnzgCXrunnxJepHA=)
                          2: BA8DB662085911F082EDFD31C4F9AE02.roa (hash: rPwsbk1iK8m/wIOTQ5ToBttJBfvQLb/F94KXTbHXYq0=)
                          3: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (hash: J1402rtf9QBVmnV/qIlsF0PgfqX7oUx84mIB0uPW1NA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F9
        Validity
            Not Before: Mar 29 07:15:35 2025 GMT
            Not After : Apr  5 07:15:35 2025 GMT
        Subject: CN=67e79e18-30f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:14:86:dd:e0:b0:a3:9b:57:d6:b4:e8:ef:
                    3b:f3:2d:bc:a2:b8:74:01:60:42:b7:b4:8a:13:5c:
                    75:fb:ac:50:f5:1c:d1:d6:1f:b3:48:dc:32:8d:ec:
                    21:11:c8:83:66:88:e2:f6:c0:3f:a9:4b:44:ff:8e:
                    f3:60:60:63:d4:6b:3c:11:dd:eb:be:6f:98:72:fe:
                    6c:70:1c:cc:2f:5a:06:cb:76:df:a2:18:06:32:f9:
                    c8:c8:b7:f1:c0:e1:a0:bd:06:08:7e:2a:b5:69:db:
                    33:44:c0:b0:45:d9:b1:40:05:ec:fa:1a:90:fc:8b:
                    45:ba:b4:52:1b:eb:5b:4b:aa:b8:18:b7:04:7a:1f:
                    9b:77:71:7d:bc:3c:d1:31:72:35:a5:bc:11:20:ad:
                    72:62:b2:67:af:f5:80:24:66:4b:81:73:0b:0e:2b:
                    0b:6d:c3:a0:40:ec:a3:a9:ac:99:a2:dc:99:77:ae:
                    34:78:9a:5e:01:a5:59:57:b4:27:c3:6b:a2:0e:84:
                    e8:76:fe:93:f2:9b:9e:bd:96:09:04:d2:ce:4b:d0:
                    ae:ac:72:ea:39:1d:d0:17:f5:9c:55:5e:90:ec:03:
                    9b:b4:a7:97:48:2e:7d:02:b3:c9:7d:54:68:f7:c6:
                    97:92:f1:19:80:74:63:16:c5:63:f8:ad:79:df:bf:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:75:B3:07:DC:9B:77:73:98:6D:C7:54:D9:C2:FD:D0:AD:47:D4:81
            X509v3 Authority Key Identifier:
                keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:49:17:69:03:4e:7e:c7:cf:f8:5b:a2:a0:68:20:38:c3:ed:
         35:00:a2:f0:62:d5:b3:b6:be:32:3c:8d:76:8d:3b:dd:64:21:
         67:61:da:fc:b4:48:03:c7:65:53:cd:82:e0:4b:64:a4:d3:79:
         b9:2e:79:fc:6a:f8:94:a5:84:d8:05:79:68:6b:d1:42:ff:e6:
         51:93:fa:04:d4:6f:23:d4:63:8b:2c:a7:f7:e4:df:82:c0:29:
         e2:9d:da:0b:99:03:de:7f:5a:14:ba:e3:6a:e4:6a:e3:26:aa:
         21:72:8d:bd:7f:a0:15:66:13:f8:29:63:71:00:da:d1:e7:16:
         dc:8c:2a:ab:1c:54:b1:ee:65:82:28:1a:d3:2b:d9:23:fc:fe:
         20:d1:3d:86:df:2b:f3:a1:37:a0:18:ef:a5:04:04:69:c0:da:
         52:06:d6:39:d6:c6:2c:0e:bc:25:42:aa:6f:78:7e:c6:a5:07:
         53:ae:bd:5f:1d:8b:f8:3d:73:e3:47:ee:84:52:23:66:35:e3:
         a1:5d:53:49:b4:72:f9:0d:d3:55:a5:ea:15:ba:5c:b2:79:2f:
         df:ff:ce:d0:7c:62:80:50:d9:08:98:45:e8:9a:05:be:d2:21:
         79:a1:b2:2d:7e:9f:b3:0f:43:54:2b:9a:3d:99:b2:50:8b:34:
         52:5e:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:39:51 2025 by rpki-client