Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
File:                     7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json)
Hash identifier:          POH4oBhPGphV2nM4D0uNcAfFn7nHAMqum9j0/rml24U=
Subject key identifier:   3A:8C:3F:1D:F2:7D:53:76:A3:97:51:E1:36:F8:BB:EA:76:35:7B:15
Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8
Certificate issuer:       /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8
Certificate serial:       0B36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
Manifest number:          0B32
Signing time:             Fri 28 Mar 2025 19:21:52 +0000
Manifest this update:     Fri 28 Mar 2025 19:21:52 +0000
Manifest next update:     Fri 04 Apr 2025 19:21:52 +0000
Files and hashes:         1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: b7f3PQVyz16q6ltoeIaP/jFOogYsb0MM/MgGdWgXfOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167307
        Validity
            Not Before: Mar 28 19:21:52 2025 GMT
            Not After : Apr  4 19:21:52 2025 GMT
        Subject: CN=67e6f6d0-7b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:51:87:bb:a5:9c:2b:7b:8d:84:05:f5:cc:
                    6b:f1:61:11:aa:16:cb:da:6a:37:0b:88:63:39:ba:
                    76:d7:e0:38:97:a9:f0:b9:fe:17:cf:44:e3:8c:76:
                    77:35:b2:e7:9d:a6:4c:e2:43:7a:82:65:76:71:17:
                    6d:68:25:24:38:2a:0d:10:36:27:ae:67:a0:77:41:
                    1d:b7:0d:cc:66:c6:ae:f2:8c:f1:14:a6:97:69:39:
                    76:51:7d:9e:de:0b:6a:71:80:c0:9b:0b:97:44:e6:
                    3b:58:4c:64:eb:df:52:64:08:e3:0b:0d:60:51:b4:
                    70:12:57:76:45:5a:8f:b6:b1:0d:2f:df:b6:eb:63:
                    66:ca:3e:8f:13:2d:f0:2f:80:58:86:0f:e1:26:7c:
                    ca:b8:9a:39:6a:26:1d:3a:ca:bd:6e:1f:ac:cf:98:
                    b7:c7:42:ba:9a:b9:45:81:a1:a6:da:78:a4:ad:8d:
                    9e:04:96:f4:15:93:48:82:7f:50:36:b9:12:03:0f:
                    c1:16:ce:b3:13:87:ec:85:ad:06:ec:8b:61:18:39:
                    66:b8:17:f1:98:eb:5f:3f:3f:ff:dd:8b:db:77:b8:
                    a2:be:7a:b9:a5:f8:f1:bb:63:99:dd:6b:a1:93:4b:
                    c9:50:d8:e6:38:b1:cb:c8:5d:06:7b:bf:73:53:a4:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8C:3F:1D:F2:7D:53:76:A3:97:51:E1:36:F8:BB:EA:76:35:7B:15
            X509v3 Authority Key Identifier:
                keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a2:dc:3e:80:d7:ca:bd:1e:df:c1:c7:d8:07:40:04:ed:4e:
         7d:c7:4f:f7:e8:ed:93:de:e7:2f:64:13:a1:23:5b:b3:e7:59:
         1d:2a:57:4a:6f:51:4c:68:df:af:1d:7f:54:39:b5:3a:92:fb:
         19:7e:86:e8:af:dc:fc:8b:d8:9a:2f:8f:8a:95:b3:d8:cb:e6:
         94:4d:b9:f0:d4:37:1d:25:5f:e4:c3:05:03:ba:2c:a7:1d:a1:
         60:73:b5:1b:24:ec:dc:25:6b:17:95:80:fe:df:99:aa:53:0d:
         79:09:50:8e:8c:29:b4:f1:ec:8c:84:4a:22:61:b2:48:34:42:
         b5:cf:d4:3c:3b:97:f0:de:7e:2a:f1:c3:ff:94:6c:1d:a6:2f:
         d2:2a:56:58:da:87:9a:53:e2:1a:22:64:af:e5:e5:26:64:86:
         ce:e3:1f:09:73:73:7c:1d:66:4c:40:ad:5e:7e:dc:ff:89:b0:
         22:49:34:cd:82:8e:77:f0:b1:a3:2e:98:79:33:38:37:0a:ca:
         47:28:32:82:0a:e2:c2:1f:b2:d9:a9:ae:f9:ea:92:b3:17:e7:
         ad:d1:b3:94:88:16:ac:58:e3:66:58:54:3f:2f:65:fe:94:a6:
         7b:b5:96:30:db:4c:65:2d:ab:8e:24:b3:1e:d0:43:9b:8a:a2:
         79:39:f5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:13:45 2025 by rpki-client