Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
File:                     18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json)
Hash identifier:          JEbdSRUSoiqo1R9AVrdjZnE0wCGGCMIcDkzZx/EsJxA=
Subject key identifier:   60:7C:40:70:1E:B8:0C:A0:8E:0C:D5:F5:5F:A0:61:03:77:BF:0E:E2
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
Manifest number:          AC
Signing time:             Sat 29 Mar 2025 05:28:33 +0000
Manifest this update:     Sat 29 Mar 2025 05:28:33 +0000
Manifest next update:     Sat 05 Apr 2025 05:28:32 +0000
Files and hashes:         1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: cMOOLK38OznRUq3KcRGs7grFzsudSl8ObQA+QlvtiYI=)
                          2: 13294E34F1F411EFA2B4CF73C4F9AE02.roa (hash: DAtInmCwbWzQcrNZi58XkRTqQ2PUuny0QfI6d1fbYeI=)
                          3: 35A11C66086C11EFB8BD7815C4F9AE02.roa (hash: jx27R9R8a3ve62AOIqb5E0ou30ap1JUun3eJwYMuDqE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776
        Validity
            Not Before: Mar 29 05:28:33 2025 GMT
            Not After : Apr  5 05:28:32 2025 GMT
        Subject: CN=67e78501-3c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:aa:8e:fe:91:e0:62:18:ef:f3:ec:60:b0:
                    29:fc:38:52:25:fc:83:e2:e7:09:c2:bf:f1:7f:6b:
                    50:c7:c5:f5:2c:19:64:5d:92:40:c8:60:9a:dc:29:
                    34:f6:f0:62:b2:f1:b4:90:34:c8:82:79:22:ef:5c:
                    ba:82:39:e6:e0:cc:0c:c4:ff:41:3d:82:ab:12:18:
                    3f:32:97:0e:28:f8:f4:bf:87:d4:f3:53:98:1c:3a:
                    f5:71:c5:03:52:04:a2:ff:fe:0f:0b:64:d2:ed:c6:
                    2a:8c:e5:70:f1:79:50:75:7b:c5:26:aa:88:1e:8a:
                    a0:82:22:22:86:27:53:73:35:41:e9:2b:dd:13:16:
                    7a:0d:72:18:b8:91:eb:98:b2:f0:51:11:83:c6:9a:
                    6c:67:aa:c5:61:bb:d4:90:f9:cc:4b:d9:fd:52:4a:
                    41:1d:0e:8b:8b:07:96:50:49:66:19:8a:9e:76:5a:
                    c2:49:17:69:98:45:04:f9:69:21:1b:17:bb:6e:4b:
                    e7:5d:89:a4:86:38:95:47:ae:f9:d3:96:93:07:9d:
                    9e:5c:eb:58:47:05:9e:d0:29:e6:44:c0:78:be:ec:
                    24:4f:b6:22:89:01:04:08:07:72:e8:f3:7f:af:f8:
                    08:1b:fb:df:9b:38:6a:37:ec:61:c7:43:36:b1:3b:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7C:40:70:1E:B8:0C:A0:8E:0C:D5:F5:5F:A0:61:03:77:BF:0E:E2
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e8:26:fc:a4:da:99:1d:62:c8:5f:d9:61:eb:86:5d:30:f4:
         e4:cb:56:3c:b6:9e:58:7f:1f:b3:8d:68:c8:ab:83:f0:2c:76:
         40:78:e5:2b:97:9d:a3:cc:d3:e5:0d:d4:9c:68:b2:eb:87:c0:
         1a:54:fd:8b:a4:81:8e:aa:11:17:a8:6b:a5:c4:8e:80:c2:a1:
         10:40:4e:d3:63:5a:e6:08:79:03:58:c5:44:51:83:7a:6b:63:
         e6:62:a2:94:94:cd:55:43:09:3e:1d:37:ba:8f:90:4e:0c:01:
         b0:cf:ac:5c:21:7e:de:1c:fb:97:35:c1:f2:64:e7:45:93:da:
         b1:b8:bf:7b:88:49:a9:28:e2:02:a1:f7:b4:e5:23:22:e4:5a:
         ba:55:ab:15:3b:bf:9c:14:83:c7:e8:59:d7:d5:d6:77:47:2d:
         0b:19:0d:73:32:6d:89:c3:a8:9c:f2:e2:5f:9d:d0:07:b9:13:
         7c:8f:fa:14:b2:d4:48:cd:6c:0f:86:b4:83:a4:82:64:1b:e9:
         15:60:95:5d:a9:d9:3f:9b:7f:5d:6f:b7:76:2d:24:1e:80:d0:
         96:bd:a3:4d:cc:12:89:c7:1b:22:20:d2:b6:9b:25:87:2d:37:
         ec:50:a4:59:44:9f:a5:52:aa:24:27:f0:3d:f0:eb:d2:ab:b7:
         5a:b1:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----