Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
File:                     uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json)
Hash identifier:          aVthjmJCF6IPrsfeBBEephKTN04y+NjGle+KjvWTBbU=
Subject key identifier:   FB:AC:F5:94:B2:BF:6D:2A:63:BC:7F:0F:A0:86:87:9E:B3:76:3F:59
Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
Certificate issuer:       /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
Manifest number:          022F
Signing time:             Sat 29 Mar 2025 02:11:17 +0000
Manifest this update:     Sat 29 Mar 2025 02:11:17 +0000
Manifest next update:     Sat 05 Apr 2025 02:11:17 +0000
Files and hashes:         1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: cjYVdi/6WdbVXV2N/8QPKWuZ6730NFcq5EXsuYpA5xU=)
                          2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: Mjvz0g/6VHNBx1WBrf/RAQ24UJcGDEU3e3YasLXb4ZU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4C6
        Validity
            Not Before: Mar 29 02:11:17 2025 GMT
            Not After : Apr  5 02:11:17 2025 GMT
        Subject: CN=67e756c5-0df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:31:92:48:da:3b:5b:91:c0:e1:aa:b2:8c:
                    99:a4:dc:cc:d9:59:cd:50:14:17:b5:37:74:8e:70:
                    13:1f:55:98:1d:3c:ee:df:d1:92:3c:51:90:13:19:
                    38:49:a6:20:de:26:80:de:3a:0f:86:a9:19:46:97:
                    e1:57:5d:81:cf:4c:26:25:2f:6d:26:83:7b:39:c6:
                    fc:4b:79:ed:23:a1:54:a3:12:0e:cd:76:34:b8:24:
                    a4:9e:aa:65:99:0a:b5:66:fd:d9:4f:fc:4d:e7:1b:
                    6f:ef:20:ea:c9:d5:0f:8f:e5:63:0c:29:60:6c:cf:
                    bb:ea:5a:f8:b9:42:dc:ef:14:be:d3:35:86:f3:32:
                    4b:27:06:f6:3e:d7:99:51:08:b7:2f:39:0c:92:a7:
                    97:7d:d8:81:9f:0a:74:c9:0c:0c:71:81:6c:c5:19:
                    5d:a8:ae:63:9e:8d:59:20:5e:2e:96:0f:44:02:7a:
                    65:a5:42:20:29:b4:92:8d:19:50:70:32:d9:aa:10:
                    e2:9f:de:71:77:1f:28:87:e1:a4:ec:d0:df:ae:54:
                    f3:34:b0:10:93:ce:8a:70:28:c0:a1:1a:8c:29:d3:
                    0d:e4:27:5b:4c:fd:1b:6f:76:9c:e1:e9:e9:f3:c9:
                    a8:4d:cf:a9:12:1f:27:c6:12:ac:db:05:9a:ce:5b:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AC:F5:94:B2:BF:6D:2A:63:BC:7F:0F:A0:86:87:9E:B3:76:3F:59
            X509v3 Authority Key Identifier:
                keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:9f:13:b0:59:bd:78:4c:08:3a:2f:a5:5d:73:8a:78:a5:
         d9:84:f2:39:ce:f2:55:3a:bc:20:4e:24:a2:95:2b:da:54:56:
         4f:25:86:ce:90:ce:bb:45:e0:f9:e9:54:64:a6:79:70:7f:1e:
         20:80:53:4b:c9:cb:11:86:db:65:21:da:ef:b8:99:9f:df:6f:
         8d:38:0a:ce:99:af:14:1b:a7:90:94:40:ba:ee:5f:54:32:31:
         f6:87:1a:2e:fe:e6:58:f3:40:a0:fd:46:24:5a:ea:93:61:68:
         76:55:0c:c0:45:de:e7:e9:cc:75:35:ab:2e:78:1c:49:bc:e3:
         a6:9e:90:6e:1a:73:1b:4d:7c:87:7c:34:37:e1:c6:57:bb:85:
         8d:db:76:9b:95:ac:06:d9:59:e7:b7:d4:7d:c1:7e:4a:63:10:
         79:91:49:cc:a8:54:f8:67:68:b8:1f:26:fe:35:5d:b3:e5:0a:
         79:89:49:de:8b:db:6b:f6:73:87:92:f6:c4:5c:e8:9c:a1:7d:
         bb:00:0b:cc:0f:24:8f:bc:25:b9:87:7f:6f:30:ae:a7:9e:44:
         ea:e1:68:f7:b0:4f:7f:77:87:de:8c:f7:a1:2e:c2:c6:3a:ed:
         2c:a2:7c:e5:72:9a:ad:b0:6c:7a:d4:29:30:28:7b:1c:0a:de:
         b3:3f:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----