Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
File:                     EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json)
Hash identifier:          YoS6gm0p/d4nOZNT49Xhb/3pcPVI8S2Nygd0wWje3V0=
Subject key identifier:   EA:7B:19:99:C2:AA:E7:CB:3C:20:3C:41:87:EB:44:AD:C2:30:49:9E
Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5
Certificate issuer:       /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
Manifest number:          15
Signing time:             Sat 29 Mar 2025 07:20:51 +0000
Manifest this update:     Sat 29 Mar 2025 07:20:51 +0000
Manifest next update:     Sat 05 Apr 2025 07:20:51 +0000
Files and hashes:         1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: l/xwc8BfyqKT+/8XfA5rfmAeQYSoG0nnY5SyNHN++Zs=)
                          2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: TAYiLVNUfBDudM++NA0KlcXDtTA+39+D4En0/M5r2I8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A030C
        Validity
            Not Before: Mar 29 07:20:51 2025 GMT
            Not After : Apr  5 07:20:51 2025 GMT
        Subject: CN=67e79f53-a56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:42:de:62:43:46:b0:a1:24:04:ab:41:a7:
                    b8:0d:83:b2:e7:c0:00:81:a1:27:48:ef:5f:0e:ba:
                    56:4a:9c:45:d2:a2:33:24:a7:86:da:62:07:77:2e:
                    b6:df:38:59:f0:ab:4a:e1:d6:6a:e5:09:57:fe:bd:
                    9e:57:14:c9:99:af:3c:79:11:ad:30:5b:6c:2b:e2:
                    da:35:45:e0:b2:20:4c:ad:2c:90:b4:0f:d8:39:da:
                    4d:46:ca:93:63:37:20:da:95:f1:3e:03:8e:94:3f:
                    f1:7c:f3:86:ff:41:de:fa:5a:24:d5:72:13:b9:00:
                    1b:39:98:eb:e6:7a:57:ba:4e:5c:b1:22:cc:7f:05:
                    2c:11:a4:86:9e:57:68:07:1e:38:24:6a:7a:08:25:
                    25:2b:5f:7d:7e:7c:85:5b:bc:7d:18:79:b5:9d:a8:
                    04:78:db:9e:b1:fe:6f:a5:f7:e7:c3:8a:16:63:e3:
                    02:e8:35:fd:2c:a4:97:32:de:85:03:75:86:17:a2:
                    66:84:ff:12:9a:a9:2a:09:bb:6a:a0:fc:14:ec:7f:
                    09:4a:05:11:78:59:d8:d6:01:d7:8e:a9:78:fa:70:
                    2f:13:64:cf:2c:36:34:c1:dd:e4:67:7f:67:c7:2e:
                    f2:32:b2:b9:60:3f:ad:c7:78:92:52:1d:26:21:bf:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7B:19:99:C2:AA:E7:CB:3C:20:3C:41:87:EB:44:AD:C2:30:49:9E
            X509v3 Authority Key Identifier:
                keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d6:3d:6b:19:e9:8b:a0:3b:6f:9d:1d:99:17:ff:dd:ec:87:
         d8:af:5f:3b:81:54:c2:48:da:1a:b0:91:79:2a:df:fc:73:a1:
         3e:52:4f:53:bb:b9:3f:96:b3:c8:bf:6b:f1:07:80:5f:be:ee:
         56:6c:3f:6a:20:dc:78:56:87:6b:ad:db:0c:e7:10:bb:bc:de:
         eb:95:bd:dc:78:d5:b4:87:28:45:97:4b:44:8e:7e:e5:7a:95:
         e4:a8:7f:de:83:1e:1d:3a:e2:bf:b5:74:ca:32:dd:b2:62:e1:
         44:b7:a8:65:c2:80:0b:4e:e0:cc:33:1a:5d:eb:2d:f3:3f:a6:
         83:b8:1e:59:c7:31:73:01:23:32:fe:7c:f3:4d:1b:11:7b:b2:
         c4:7c:8b:29:7f:db:a4:3d:27:89:f6:45:18:35:0b:2d:f7:36:
         fa:95:5d:d0:47:48:e2:d3:3c:98:ce:1e:f8:52:f2:3c:f8:c4:
         07:1f:69:9e:4b:ca:97:ee:43:78:79:12:06:19:74:c8:4a:b5:
         e0:98:0e:2f:c2:d5:92:d0:cf:24:33:ef:fe:0d:b0:0b:63:ce:
         ef:60:bf:52:07:f2:f5:a0:57:0c:f4:7e:ea:b6:ba:75:cc:60:
         9c:91:3f:ee:c8:9f:fc:12:c8:b9:70:40:15:f6:aa:4a:94:3d:
         8c:27:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:28:39 2025 by rpki-client