Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          jlpeevZGdNiXxbJiYv8ag1SxePy4K/EP5zHop9Qr7mo=
Subject key identifier:   73:91:DD:21:02:88:6A:6C:CF:95:CE:A4:7D:91:84:AA:1A:FE:7F:30
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       0F63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          0F50
Signing time:             Fri 28 Mar 2025 17:41:36 +0000
Manifest this update:     Fri 28 Mar 2025 17:41:35 +0000
Manifest next update:     Fri 04 Apr 2025 17:41:35 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: xTZVeU/+ueYnMbThSa2dY3uC0h4bE3TBLAIQLPpH0+s=)
                          2: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: toGE1A/OdMY5M9Qhwiq2ImTCj+ZPDIr4Kaq8Wr4bXfQ=)
                          3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: Br+XcUlZRiAcfHjmZE5JSE6/gP4H9vutywM1XBBaAvI=)
                          4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: b5Owfwn6jPYwYgeFR1LD7MMPVgj0pI+xo1vVwUav/8Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB
        Validity
            Not Before: Mar 28 17:41:35 2025 GMT
            Not After : Apr  4 17:41:35 2025 GMT
        Subject: CN=67e6df50-6c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:f3:cf:78:b0:7c:83:93:01:bb:84:60:59:
                    3b:ab:07:04:55:2b:09:1d:50:8f:36:13:fa:30:63:
                    55:24:34:8f:75:0e:d9:83:e2:83:07:be:10:1b:6d:
                    d3:d8:69:7e:93:f8:c7:5e:4c:d1:bf:2f:0d:9a:10:
                    c7:7e:3b:24:03:e4:3f:97:b1:f7:29:65:94:01:e1:
                    ed:46:1d:f8:99:62:97:a2:8e:75:c4:eb:c3:1e:a4:
                    d2:ba:00:0f:e1:9a:1c:1d:44:20:c2:7b:02:f5:37:
                    5a:50:48:a5:7c:4b:e1:62:2f:db:44:cf:fb:a0:b2:
                    4d:6d:b9:ea:3b:dd:99:b8:d0:52:bc:4d:56:d2:c8:
                    f3:57:dc:27:a9:70:53:d6:f9:89:9e:0c:0f:0e:5c:
                    c9:f1:65:98:77:2b:7b:e7:2c:0e:4b:9a:87:2f:41:
                    aa:54:fc:2f:46:85:ff:17:47:b1:a2:b3:f6:19:0e:
                    84:6a:0f:47:45:84:b4:e8:ac:f5:a6:69:49:17:21:
                    82:60:82:8a:02:fe:3d:90:ab:2e:d7:bf:57:33:5d:
                    a0:4a:df:b0:70:84:9b:14:34:a1:c3:08:1f:f6:76:
                    20:29:31:2d:ca:7c:0f:9e:b9:c8:00:12:68:9b:dd:
                    dd:ff:a2:86:c1:9e:4f:33:53:9d:13:82:88:ee:22:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:91:DD:21:02:88:6A:6C:CF:95:CE:A4:7D:91:84:AA:1A:FE:7F:30
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:57:61:ba:55:bd:84:64:67:97:2d:e6:f0:af:38:e0:7d:
         21:6d:27:ad:d5:b3:b0:8c:cc:77:c8:98:48:97:fa:e1:a4:9d:
         e6:ab:e1:c8:fc:30:8b:43:f4:62:d7:71:88:4f:2b:31:7b:bc:
         8f:71:29:d3:6e:83:2d:fc:86:34:49:d7:20:81:00:86:8e:33:
         fb:ad:b9:00:00:d0:0f:3a:96:18:6c:9b:12:e7:25:aa:fc:8f:
         4a:0e:f2:9b:4c:0b:9a:b4:93:de:52:3f:e7:e0:c6:d5:55:56:
         d6:49:c6:d1:4f:a6:e4:b9:bf:c2:a4:4d:63:98:02:c9:de:6e:
         a2:58:f0:1a:c8:64:0c:81:50:3f:1c:74:b0:f3:1e:11:5b:28:
         13:23:06:e9:75:6b:cc:af:f3:85:20:1f:a6:f4:1d:a6:48:ee:
         df:b7:a7:4a:50:b8:c7:13:b1:10:68:fb:07:c9:89:0a:92:b9:
         c7:1a:3a:cb:55:4b:94:04:3f:11:d2:ae:16:b1:a6:2e:1a:39:
         1a:7b:4a:9b:18:40:ff:fb:d0:3d:c3:da:d0:b8:e2:ee:ad:b3:
         c4:7e:5a:d5:87:bd:07:1a:29:c7:bc:0c:18:dd:2b:a0:31:ad:
         c6:d2:be:53:73:e0:4f:3b:05:4d:15:fd:e6:57:02:78:e7:97:
         53:f3:b3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----