Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
File:                     tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json)
Hash identifier:          mD8q+S7NxlCCFNSyKyQh1pM/oxvkVD8YZvtUl04TG4Q=
Subject key identifier:   83:FB:89:DA:D9:A6:8F:22:A2:19:9F:21:60:E2:37:CC:74:55:75:EC
Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
Certificate issuer:       /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
Manifest number:          D9
Signing time:             Sat 29 Mar 2025 04:57:33 +0000
Manifest this update:     Sat 29 Mar 2025 04:57:33 +0000
Manifest next update:     Sat 05 Apr 2025 04:57:33 +0000
Files and hashes:         1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: yv9DqNx8SB9TDH8kuYEAECOvc+3XW0kZt4Im6z1bY/Q=)
                          2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: V4rJ9+KQ3AK8oq6Dx/jnK6Kq8OonvPFz54Mtrt4dysM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E79C
        Validity
            Not Before: Mar 29 04:57:33 2025 GMT
            Not After : Apr  5 04:57:33 2025 GMT
        Subject: CN=67e77dbd-df73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:c7:e3:35:06:20:e2:00:aa:53:b8:d1:90:
                    d8:a6:7c:cc:8b:96:20:c6:24:1b:8d:a7:49:48:48:
                    90:72:74:8f:53:c1:79:8f:2b:fa:1a:31:18:7e:dd:
                    bb:d4:9a:50:e6:2f:ad:9d:4f:18:6b:03:d3:0a:99:
                    f2:ad:3a:3c:47:94:0a:15:59:cd:c3:43:10:e8:a1:
                    c4:ab:30:79:45:b0:0c:a8:de:e7:a2:2c:0c:b8:ce:
                    78:dd:20:54:08:35:b6:78:9e:d6:f7:2e:bf:a4:97:
                    7a:51:03:77:68:bb:bc:87:9a:ba:34:6f:f0:cd:76:
                    fd:28:17:95:67:86:0d:da:b5:1e:ba:a5:c2:25:80:
                    cc:4a:77:17:2b:7e:41:41:e7:8f:50:9d:1b:44:06:
                    47:3e:3a:2e:91:1b:94:04:48:8a:d6:0b:4a:30:12:
                    a4:9b:7e:81:f5:51:eb:2d:53:eb:4f:e5:a5:3a:76:
                    a4:8d:2a:cc:ca:28:da:8f:b8:83:0a:2e:ec:da:21:
                    6a:51:8e:af:0c:fd:f8:f8:d8:7b:94:17:46:fc:8e:
                    e5:a4:ea:2b:8f:5f:77:4f:b0:f7:ce:6f:36:db:e9:
                    53:68:92:c4:cf:2e:c0:e6:f4:91:c8:47:7c:2b:ed:
                    da:ea:cf:15:86:83:d0:5d:2a:07:24:ab:a4:64:6c:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FB:89:DA:D9:A6:8F:22:A2:19:9F:21:60:E2:37:CC:74:55:75:EC
            X509v3 Authority Key Identifier:
                keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b3:ca:d3:77:81:cd:90:5a:a6:e4:26:53:de:68:32:b8:fd:
         5b:20:54:13:3e:79:36:5c:50:b7:9a:a9:77:93:c9:58:a6:a5:
         45:e2:6a:dc:52:46:03:c8:99:91:18:07:b4:f8:56:e4:b6:86:
         30:e8:c1:9c:01:c9:a8:f0:d4:d8:91:4d:23:c8:0d:70:b6:b7:
         2d:97:dd:95:fc:c3:47:9e:9e:74:47:4c:3e:31:c5:1e:af:87:
         4d:cd:2c:a9:14:c4:d2:1e:b3:2e:69:af:9d:ec:8b:e8:62:87:
         94:3d:37:ee:a0:ce:76:cc:d7:45:fe:aa:68:9d:7b:ae:40:17:
         10:4e:61:a3:90:e0:65:74:1e:56:14:48:01:95:c3:00:be:19:
         ed:29:b6:c3:ce:d3:15:30:82:80:3d:89:bb:8b:4f:72:77:93:
         aa:35:43:68:b3:bf:6a:5f:ca:8d:0c:7d:83:91:ed:d4:ae:3a:
         24:30:0f:03:f9:59:74:63:97:37:05:cc:af:ea:bd:fb:93:dd:
         bd:88:b8:b9:f4:10:ac:29:06:e0:bd:1d:8e:6c:d4:a6:d7:d1:
         6d:55:2f:21:50:a7:d8:28:fd:4d:c5:53:28:bf:32:6e:9e:cb:
         65:c6:a2:80:4a:ae:4a:29:f1:d9:d7:43:c3:b8:53:16:00:0b:
         c3:6d:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:13 2025 by rpki-client