Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
File:                     -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json)
Hash identifier:          zzhhmvVtmlSp9LavCGVfZt3/5b5ZyXH9gl7+ewf0iJw=
Subject key identifier:   79:34:A5:42:C9:7B:9B:2E:1A:E8:33:A9:2F:D9:71:A1:32:4C:2A:19
Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
Certificate issuer:       /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Certificate serial:       2336
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
Manifest number:          231C
Signing time:             Fri 28 Mar 2025 15:55:50 +0000
Manifest this update:     Fri 28 Mar 2025 15:55:50 +0000
Manifest next update:     Fri 04 Apr 2025 15:55:50 +0000
Files and hashes:         1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: 5JHWjJU2KiZUCxTNrgVTYwic05JRKYOjX9Y9TS8LcEk=)
                          2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: SVFtlSzgsbl94LKJE/MqOpvXoyEaSOVfShQjoppkD5M=)
                          3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: SmF6p3k95KsM+SMEI2F1sl2qA3ioWO3N9renwiZgrBM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9014 (0x2336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196BD8
        Validity
            Not Before: Mar 28 15:55:50 2025 GMT
            Not After : Apr  4 15:55:50 2025 GMT
        Subject: CN=67e6c686-8d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:f5:4d:10:3b:ce:a1:79:41:b3:25:a6:52:
                    cb:00:82:06:7b:43:a9:fb:bf:93:f1:8b:2e:ce:fc:
                    79:a3:f8:b0:b1:01:e6:ba:7e:3a:ac:f6:e1:bc:05:
                    48:97:34:49:7a:38:7d:28:f5:5c:83:75:f0:17:73:
                    7f:37:f9:90:9a:df:29:c4:9c:d7:b9:fe:59:d2:87:
                    e6:a2:c0:6e:d7:d6:bd:29:fd:3f:9a:00:46:f1:44:
                    23:a5:b2:07:0e:b1:51:a2:4a:de:04:48:e3:83:f8:
                    80:77:4d:50:3d:ad:ff:5f:71:96:66:72:0e:b3:29:
                    55:b5:d3:19:fe:73:17:f0:6c:50:50:cd:8f:56:64:
                    c6:16:81:16:67:01:7f:2a:1f:21:57:42:a0:b2:bc:
                    ab:db:92:92:dc:1c:55:21:83:fb:65:09:a7:01:04:
                    78:f7:dd:11:98:2a:12:c0:c9:e5:0c:80:b9:ef:a2:
                    b7:de:0a:da:06:0d:1f:a2:57:bc:f3:4b:d7:90:da:
                    70:ad:60:0d:a6:8c:58:d6:78:2c:29:2c:da:52:c8:
                    d9:53:ac:28:83:4e:16:69:88:a5:24:bd:cb:d6:f0:
                    9f:ee:f9:fe:4d:b6:dc:d4:67:b7:ba:9c:07:e0:4f:
                    62:70:bf:11:5e:be:ce:27:90:1e:05:b3:3a:8e:e4:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:34:A5:42:C9:7B:9B:2E:1A:E8:33:A9:2F:D9:71:A1:32:4C:2A:19
            X509v3 Authority Key Identifier:
                keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:61:3c:2c:82:ad:3c:10:45:28:b6:93:ef:6c:2f:17:dc:
         63:1f:0f:83:15:01:4c:e8:c8:0c:fe:0f:03:bc:b3:44:dc:c8:
         ab:bf:76:64:bc:7b:47:2e:b7:0e:37:a2:d0:61:be:42:40:e2:
         ef:1f:65:db:21:a2:91:fe:9b:f6:ce:f3:3b:e5:45:79:bc:2a:
         28:90:ce:b9:2b:04:45:ab:5c:57:19:52:cd:1d:7f:66:d4:e0:
         7b:99:54:63:ca:b8:4b:eb:45:53:43:c4:48:36:a0:8f:9c:fe:
         66:a3:33:00:6a:2a:9a:b4:7a:ac:e0:50:ad:39:74:d1:23:87:
         23:67:a0:af:b5:d8:5b:68:67:66:60:e8:1e:d0:00:76:02:da:
         a1:d9:47:ce:2c:b4:54:45:9e:10:8f:29:5d:a6:18:96:7e:82:
         d1:a9:f6:48:8c:8e:56:03:e8:7d:94:92:f9:11:92:49:07:93:
         fb:f4:fc:bf:d0:ec:22:36:67:46:a1:67:21:f3:65:7b:33:a3:
         07:35:d7:04:1c:91:65:6e:9b:57:da:bb:5a:04:db:a2:9a:a9:
         b1:d5:2f:81:37:01:00:f1:d6:21:81:b7:68:67:17:cb:fa:ec:
         02:99:be:03:2e:88:c0:36:85:43:ff:37:bf:3f:5a:7f:39:a9:
         91:cb:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----