Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
File:                     Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json)
Hash identifier:          7dQhskRTRmiIwFsbT804kGBQ3zUMybHLZcqzGsVbm94=
Subject key identifier:   21:88:63:8F:50:3C:45:32:EF:45:F4:B5:A6:32:97:EF:1A:D3:47:26
Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25
Certificate issuer:       /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
Manifest number:          0128
Signing time:             Fri 28 Mar 2025 22:03:05 +0000
Manifest this update:     Fri 28 Mar 2025 22:03:05 +0000
Manifest next update:     Fri 04 Apr 2025 22:03:05 +0000
Files and hashes:         1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: BJaCtqzpz/vkZFc8HfTYxuIYZ9zWJegzXBGFmOyaDyQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB
        Validity
            Not Before: Mar 28 22:03:05 2025 GMT
            Not After : Apr  4 22:03:05 2025 GMT
        Subject: CN=67e71c99-641a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:12:95:3b:33:1a:5b:dd:7f:b8:f9:d7:ab:
                    7e:da:c8:13:a3:f5:cc:d1:78:a7:bd:e3:ae:d3:c8:
                    75:66:31:27:40:ef:76:4d:d0:89:4d:78:0c:8f:ab:
                    eb:37:42:24:9b:22:4d:d5:59:a4:3c:9c:63:68:7d:
                    c1:e7:1b:7d:49:b1:f3:c3:e6:1d:a6:74:49:6a:79:
                    86:ea:fb:f2:c5:8b:34:92:fa:20:37:76:d8:fe:8c:
                    8b:d0:30:35:2c:02:a8:82:2a:04:66:f7:6e:18:3f:
                    56:48:e2:c6:5c:92:f5:a4:b4:03:20:3c:07:12:79:
                    a0:48:2a:ec:25:2e:70:ba:f0:f8:48:8a:10:51:78:
                    30:57:57:53:6c:8a:46:c2:a1:7a:d5:4f:ee:80:08:
                    e2:b7:b4:c5:41:3f:53:95:b7:de:21:84:44:a6:a1:
                    7c:a6:dd:66:09:d0:83:5b:e5:bb:9a:5b:52:9c:8d:
                    92:73:3f:5d:c6:c3:b9:27:07:53:66:cc:8a:e5:cc:
                    01:33:74:5f:3f:93:2a:72:af:b0:a0:bf:9e:85:5b:
                    c0:2f:d0:2f:f1:fd:8e:61:bc:7d:56:a2:bc:1f:ea:
                    3e:d3:a3:5b:e2:2f:ab:84:ea:90:9d:6d:44:bb:87:
                    c2:e1:72:fd:0f:a3:ee:be:c1:a1:57:29:0a:ef:3c:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:88:63:8F:50:3C:45:32:EF:45:F4:B5:A6:32:97:EF:1A:D3:47:26
            X509v3 Authority Key Identifier:
                keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:44:aa:3a:8e:82:c2:10:7a:47:15:c5:53:32:2c:b2:98:
         cb:5b:a7:0f:1b:95:e9:0c:f6:7a:8a:cf:0e:cc:9e:a5:3e:62:
         dc:44:0c:ad:9e:72:67:0d:7d:9f:60:2d:d2:f1:ed:07:27:0f:
         d2:49:b2:40:a0:52:c8:ef:69:d6:7c:6e:72:33:ce:2c:62:db:
         a1:5b:34:58:d1:7f:41:32:7a:9d:07:9f:31:57:2c:7c:20:78:
         8d:4c:a1:06:c2:ed:3d:b1:4c:19:f6:cb:a6:23:be:ba:45:35:
         9d:c6:d7:03:12:c4:70:a6:dc:59:39:f2:df:fe:96:e3:f6:bb:
         7c:27:bc:4a:1f:2e:69:a1:b3:60:80:23:9c:db:b7:d6:88:88:
         03:bc:e9:d8:92:a4:b4:15:24:a4:32:ae:cb:48:fc:51:a2:59:
         47:29:b6:01:ea:5c:8f:40:3b:eb:d5:be:da:06:33:c3:ea:62:
         c1:05:2b:40:c5:62:ec:df:99:ad:e7:f7:9c:1b:97:00:ea:e0:
         7c:e4:aa:ff:23:f4:61:91:83:d7:ff:b9:21:3f:c4:ae:62:e8:
         02:c0:8d:b6:3c:47:10:54:69:c9:b4:7f:42:b5:3b:09:e1:57:
         ee:bd:9a:78:1a:95:08:28:b3:73:8a:0f:51:16:54:0e:1f:26:
         22:c2:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:01 2025 by rpki-client