Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
File:                     _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json)
Hash identifier:          PsozFpmZB1JFr7V7zmZ/sI0UzJ6Cl5rMcvDBBnOcEqE=
Subject key identifier:   6B:AE:8F:68:A6:4D:D4:80:CA:FA:52:C3:CE:A4:4A:E4:B7:CC:16:A5
Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30
Certificate issuer:       /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530
Certificate serial:       14C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
Manifest number:          14B5
Signing time:             Fri 28 Mar 2025 16:58:01 +0000
Manifest this update:     Fri 28 Mar 2025 16:58:01 +0000
Manifest next update:     Fri 04 Apr 2025 16:58:01 +0000
Files and hashes:         1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: QaMrE5Oh2EoBQh/JrQGww8YqQJIpE3cDMmuDf6laR8Q=)
                          2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: gSL+g9g3YpA7s5XesQRHZm3/7MvyodXEVF116j/i5W8=)
                          3: 3BA876C457A911E8A8A8B477C4F9AE02.roa (hash: bcEJ56A4BGIoa5B1+6LrUQhbZUOKKFrTO8YQb351Q9Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5315 (0x14c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0D9C
        Validity
            Not Before: Mar 28 16:58:01 2025 GMT
            Not After : Apr  4 16:58:01 2025 GMT
        Subject: CN=67e6d519-26b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:66:6f:93:af:b1:c2:ed:ce:da:4a:2f:dd:
                    d3:dc:d0:06:2c:80:3e:fc:18:b4:b4:a6:a5:26:e7:
                    bc:99:0e:40:51:dd:13:8b:5e:57:6d:bb:4c:4a:af:
                    f1:fc:12:f5:1b:7c:80:42:13:da:ba:b1:56:75:9f:
                    29:a8:56:5a:2e:ed:03:9f:bf:22:41:33:4e:cd:39:
                    a3:67:28:70:0f:ae:a3:35:15:95:39:94:2d:82:b9:
                    f2:2c:db:be:fd:18:97:f1:ed:43:8d:87:4c:88:13:
                    fa:8e:88:fa:0a:ae:b6:9b:fa:f2:86:45:40:86:cf:
                    c4:d9:12:e2:06:4d:cb:00:89:01:9b:48:c1:d5:20:
                    94:37:7a:58:b3:71:7e:17:78:fa:6d:ce:48:c7:cf:
                    b4:d9:0e:82:98:6a:e4:86:f1:bd:0b:fa:4a:91:77:
                    ec:db:3b:43:6d:74:17:b9:f0:9c:4f:87:32:3e:09:
                    91:92:1f:3d:3a:9c:d6:97:ed:6e:c4:48:5f:14:c8:
                    ca:17:e9:08:c0:cd:c4:2d:02:46:1f:ad:a2:8b:f4:
                    fd:c7:2b:0a:4b:25:be:25:25:b4:8a:b4:09:76:b8:
                    46:05:7c:56:b4:77:35:b1:db:0a:56:ba:5e:42:a1:
                    df:53:4b:64:76:fa:06:38:e2:24:38:8b:7a:35:da:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AE:8F:68:A6:4D:D4:80:CA:FA:52:C3:CE:A4:4A:E4:B7:CC:16:A5
            X509v3 Authority Key Identifier:
                keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:df:e8:59:37:d9:d0:a8:ed:5e:c2:39:42:65:81:b5:53:
         26:95:70:16:04:85:ed:fc:c3:d7:5e:dd:cf:13:01:f5:4b:ce:
         c9:7b:dd:ed:48:af:b8:3b:95:72:54:74:d2:72:b2:c2:93:cd:
         b7:22:11:d0:54:4e:33:3f:fc:fc:ac:dc:d6:64:43:b7:ee:ab:
         dc:09:20:d3:bf:ba:df:57:a5:1c:e5:e7:59:cd:7b:c2:8e:8d:
         cf:26:e0:47:5a:7a:e0:2a:a1:3f:38:66:90:fd:4c:88:b9:7a:
         3f:ae:a8:d4:a5:57:06:95:29:32:96:47:4f:91:3f:89:36:f0:
         8a:b3:f7:b0:60:05:4d:32:ba:f0:ad:f2:ec:cb:37:8c:e9:0d:
         dd:ff:5f:7f:68:c1:29:98:14:14:c0:8d:d8:f6:1b:86:6e:c1:
         e1:73:c0:d4:bc:36:24:d2:bd:80:f2:b7:3a:89:fb:61:f6:c4:
         32:01:df:dd:60:84:4b:be:cc:06:17:66:91:2b:bb:56:77:c9:
         78:04:c9:3b:ad:92:91:4b:6c:52:ce:25:5a:d4:5a:98:92:4e:
         88:4b:34:06:cb:3f:b3:90:3a:d0:c1:ea:6e:8e:40:3c:16:99:
         55:39:5a:c9:d7:c8:d9:af:fc:7f:c4:f6:42:1d:23:97:20:da:
         55:13:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:38:12 2025 by rpki-client