Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
File:                     poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json)
Hash identifier:          LbfGqfYXa/ZtTb/S51DFJ0RvQnJj67spW1eQidj6S9k=
Subject key identifier:   EC:6A:38:8E:C5:AD:F2:55:DA:29:68:E2:65:AC:9D:0E:47:34:AC:B1
Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C
Certificate issuer:       /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
Manifest number:          1A
Signing time:             Sat 29 Mar 2025 07:14:23 +0000
Manifest this update:     Sat 29 Mar 2025 07:14:22 +0000
Manifest next update:     Sat 05 Apr 2025 07:14:22 +0000
Files and hashes:         1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: nndjuZQSjATYbinkiUrWOzKzqgo7MunDGdMwRDFkAqw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F1EE
        Validity
            Not Before: Mar 29 07:14:22 2025 GMT
            Not After : Apr  5 07:14:22 2025 GMT
        Subject: CN=67e79dcf-b3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:4e:a6:9e:36:57:41:6e:f1:5c:67:1d:27:
                    67:97:9c:26:32:c1:b0:35:01:4f:a0:4d:10:7b:a3:
                    72:8d:21:69:9b:15:6b:7e:aa:22:a8:28:f2:9e:a4:
                    d6:75:e3:e7:9e:6f:82:df:cc:e0:9a:5b:6a:f4:b5:
                    fd:6b:a9:35:aa:36:02:a6:eb:45:e0:0f:fa:bd:d2:
                    01:c5:a3:01:c5:b0:60:ff:30:6d:bf:bc:9f:51:2e:
                    14:87:7f:fb:05:13:c6:42:e4:4c:f1:4f:3b:d9:07:
                    4c:2d:a2:11:40:ff:a8:e3:51:a2:6f:84:68:b3:01:
                    0b:1f:08:87:16:ed:e7:06:f3:65:b7:2b:c8:38:2e:
                    ef:df:79:f6:d4:0a:6e:2a:5a:0a:33:bd:60:3c:fa:
                    3c:35:3c:3b:6a:c5:12:7f:30:bc:a2:00:cf:e7:d6:
                    4a:02:38:aa:b4:52:c7:10:32:76:a3:72:09:7e:8f:
                    d4:1e:f3:bc:a7:7b:fb:50:e9:bf:ad:d6:45:30:ce:
                    72:89:cf:a4:e1:de:22:d9:df:03:a3:e6:3a:e3:d1:
                    87:e2:df:d9:c6:6b:98:34:b7:87:6c:86:3a:2d:d6:
                    68:03:d2:9b:4a:18:c7:80:b4:08:16:bf:9e:51:cc:
                    95:54:fc:c8:44:36:e3:65:d3:dc:79:ec:c0:40:f8:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6A:38:8E:C5:AD:F2:55:DA:29:68:E2:65:AC:9D:0E:47:34:AC:B1
            X509v3 Authority Key Identifier:
                keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:1f:b0:ad:4c:d4:24:c6:24:f8:83:82:c3:6a:ac:a6:80:
         38:4b:5a:8d:6f:91:28:9a:a8:21:ab:14:25:b2:29:40:f3:d6:
         2b:ec:05:e0:ce:80:a2:d8:d2:3e:fc:56:ab:0d:46:4d:cd:57:
         cf:de:7b:7c:af:bc:90:93:50:44:e7:46:d3:1c:af:fc:a3:58:
         f7:20:ed:ee:ef:b4:be:3d:9d:c2:38:cc:ec:14:87:ee:e2:78:
         d1:9c:46:58:00:18:8b:05:7e:8f:43:7b:3d:1c:c5:85:be:5b:
         a3:38:9c:2b:bd:9a:a7:8b:bd:e3:db:3a:54:f3:60:02:15:5d:
         2b:09:e1:53:e1:25:70:ac:ce:f5:c5:c7:a1:81:a4:39:ce:47:
         97:51:9b:24:d3:71:f4:9f:3a:31:63:63:b9:fc:ce:52:c6:cc:
         ef:79:06:db:50:6f:ff:45:b5:6a:26:dd:1f:da:f6:a8:5a:6d:
         84:19:0d:d2:29:aa:35:dc:4e:c1:11:26:a7:57:a6:1d:ff:bd:
         79:23:4f:88:94:ad:d8:c5:69:a6:3e:c4:80:dc:fb:f5:c4:2d:
         5c:51:05:84:c7:93:85:ad:e1:02:f6:9d:58:de:3a:a3:f6:2a:
         12:7c:c4:70:07:27:bd:a9:77:20:a8:6d:01:77:fa:46:1c:73:
         cf:23:7c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:10:51 2025 by rpki-client