Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
File:                     9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json)
Hash identifier:          YNyiqJVaVEs8MCzhiguzE1aiOAWjUjSm21phrA6kZUg=
Subject key identifier:   95:95:2C:C1:FE:25:13:70:A6:3C:C6:EB:47:9E:2D:96:E8:2B:BF:AA
Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D
Certificate issuer:       /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D
Certificate serial:       04EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
Manifest number:          04E7
Signing time:             Sat 29 Mar 2025 00:00:18 +0000
Manifest this update:     Sat 29 Mar 2025 00:00:17 +0000
Manifest next update:     Sat 05 Apr 2025 00:00:17 +0000
Files and hashes:         1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: fxtPTRKOWjU/uZnJCRCAdyZdXpNbVmfvznUVhDUAnss=)
                          2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: K4jESE87qttWdzH55euloSsk0IBNZb6PG/YPIPEToao=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91852BA
        Validity
            Not Before: Mar 29 00:00:17 2025 GMT
            Not After : Apr  5 00:00:17 2025 GMT
        Subject: CN=67e73812-1a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c0:4a:6f:52:09:d7:65:27:bc:43:06:25:12:
                    cf:bb:6d:48:4f:7e:df:d2:6d:a9:5a:b3:2d:4c:3c:
                    48:66:9e:60:f1:60:4b:46:58:29:a2:b5:c3:cd:90:
                    6c:dd:e2:47:6a:e4:97:76:0e:05:db:ca:b2:e9:94:
                    67:72:a3:7d:f1:d5:b0:53:68:67:62:dd:7e:0a:13:
                    2b:9c:26:00:4a:fa:ec:fb:97:ff:51:d7:13:80:63:
                    8c:35:b9:67:59:a2:9c:14:2b:31:2b:d3:ef:f6:68:
                    90:12:98:6a:3b:74:f9:b3:e7:b3:c7:05:56:4e:0c:
                    a8:72:98:78:b7:ee:ef:a3:89:9d:5c:57:03:13:69:
                    31:89:74:ac:6f:0f:b5:c8:04:5a:41:8a:4b:ce:41:
                    dc:f0:94:85:a0:bb:bd:70:7e:99:0b:e4:bd:74:76:
                    63:fc:16:83:76:7a:af:74:98:9b:3a:2d:24:ce:b4:
                    72:08:c5:ac:05:ae:d9:a4:b3:0c:47:30:c0:20:f5:
                    50:6b:c9:24:c0:b6:b3:30:ce:6c:e2:96:30:b7:b3:
                    6c:fe:f5:ee:0b:49:4a:49:83:f9:08:a3:bb:7b:b0:
                    84:44:a8:0a:78:d1:48:92:69:3e:1f:92:e0:47:98:
                    86:ef:30:98:19:d0:fd:36:1a:b2:d8:b8:c4:af:49:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:95:2C:C1:FE:25:13:70:A6:3C:C6:EB:47:9E:2D:96:E8:2B:BF:AA
            X509v3 Authority Key Identifier:
                keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:d0:3d:2b:44:8d:17:19:11:38:18:f1:d1:34:26:35:97:
         46:92:d9:46:db:59:3f:79:09:25:f3:02:f2:fc:8e:a9:b6:2a:
         79:c5:f1:58:73:d2:ff:92:2a:f0:1e:fe:26:b8:42:1f:87:60:
         bb:26:5f:6b:dd:04:79:10:eb:7f:8a:ff:13:e2:32:ef:6c:9c:
         e0:58:0d:fa:d4:3a:e7:d2:87:2d:6c:d9:bc:bd:2a:0f:b3:40:
         64:d9:20:28:fe:05:bc:f6:d2:6e:b5:8a:77:1c:f5:6c:5f:ba:
         60:35:c9:61:aa:3d:0f:2e:58:96:25:18:61:00:13:79:4f:47:
         53:12:8a:2e:3f:3e:b7:f0:b1:d9:31:6d:93:ad:ee:18:ab:f8:
         36:74:21:e6:e6:61:08:0f:6e:2e:1a:54:6a:7a:43:0a:8a:63:
         ba:38:1d:5d:4f:b7:ab:08:3e:c2:01:6c:d2:f9:74:c1:90:e4:
         ef:39:c5:23:df:f9:0c:5c:d2:65:c6:61:74:36:b8:12:c9:a3:
         c0:41:5a:e1:ef:93:6e:7c:0a:fd:b0:09:22:e1:70:48:8e:f1:
         8d:22:f1:ad:be:8b:e0:8a:42:6e:75:9c:3e:4b:79:5d:51:33:
         e9:13:d3:9c:fa:be:10:f6:62:a2:07:14:b9:b3:71:9d:4c:1c:
         46:89:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----