Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
File:                     mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json)
Hash identifier:          or00t2m0eIOEDIiyjzTQTZ0jhl6tAYw5sI4MsPnnOvo=
Subject key identifier:   BF:DB:AE:7D:AF:A9:C4:BD:B2:40:69:45:8E:A5:5A:89:4E:D5:36:6D
Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
Certificate issuer:       /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Certificate serial:       04E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
Manifest number:          04DA
Signing time:             Sat 29 Mar 2025 00:02:24 +0000
Manifest this update:     Sat 29 Mar 2025 00:02:23 +0000
Manifest next update:     Sat 05 Apr 2025 00:02:23 +0000
Files and hashes:         1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: c63GqjOLFf9mvaA6/qQD8uXUR4fD4Jk/hnep+QkWoY0=)
                          2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=)
                          3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: f0fj2CiJrQsqOvPb5aCJ72sWUs4weqyglPKr75EglVo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4707
        Validity
            Not Before: Mar 29 00:02:23 2025 GMT
            Not After : Apr  5 00:02:23 2025 GMT
        Subject: CN=67e7388f-9d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:92:3f:d3:bb:68:94:d6:ca:ef:dd:9f:2d:
                    ad:28:96:6c:37:f8:bf:88:86:b7:8c:b0:fc:7b:5f:
                    50:1c:fa:80:d5:ed:b4:1e:12:4e:de:ab:72:57:6c:
                    e3:51:02:05:9d:15:74:0e:f9:ee:6f:1d:47:cb:8e:
                    0e:91:8a:3e:55:a9:14:b4:72:17:5d:f3:54:7d:43:
                    03:6b:69:e9:b0:44:f7:1d:f1:d9:78:02:a1:92:1a:
                    04:5c:fc:fd:a9:f7:7e:6a:7b:01:87:c9:4e:e9:79:
                    c4:39:81:a1:7b:d1:6f:bc:ba:eb:12:0e:90:46:80:
                    66:61:80:f3:b3:da:8e:01:05:33:d6:97:d9:46:5e:
                    d9:5f:47:7b:7c:85:79:34:fb:20:91:9d:bc:d9:08:
                    4f:a8:41:b4:ea:c7:a0:3a:e9:f2:e0:e1:29:7e:85:
                    81:aa:23:30:bf:26:15:be:8c:b6:48:4d:9d:31:94:
                    81:09:75:6a:66:69:32:8b:e5:81:65:5f:a3:46:9d:
                    07:5e:5d:fa:24:51:81:0e:00:f6:ac:7a:cc:3d:b5:
                    14:a2:10:c7:07:a0:09:83:1a:78:ca:90:2c:aa:65:
                    cc:20:10:42:4d:76:15:1d:18:e1:97:1c:dd:41:70:
                    a2:7e:e0:2c:56:0f:ea:3a:2d:92:d1:1d:a5:b0:43:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DB:AE:7D:AF:A9:C4:BD:B2:40:69:45:8E:A5:5A:89:4E:D5:36:6D
            X509v3 Authority Key Identifier:
                keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:66:50:fa:7c:d9:6e:0b:9e:14:14:bc:a6:05:f3:d3:5e:29:
         7f:a0:bd:ae:14:26:c8:a0:87:20:e2:47:e3:f3:32:7b:d1:3c:
         6f:88:1c:2c:72:fd:d8:b7:3f:79:df:c5:ee:f3:2e:3a:17:39:
         ab:15:d6:11:e1:09:47:70:5f:4e:a9:a1:7b:b5:09:12:67:31:
         bc:83:ae:40:08:11:81:ea:e6:3a:32:37:75:ee:79:c3:cf:87:
         1b:07:45:7a:e7:94:a6:b2:ff:f9:d3:ab:50:83:1a:78:18:5c:
         1e:7b:f6:6a:76:72:1c:0c:a0:67:44:d3:8a:af:b1:41:a0:21:
         1d:b1:0d:9b:85:6f:3e:e8:50:87:39:62:99:a7:1d:c6:5e:e2:
         7b:6b:45:b7:74:79:a4:2b:96:a5:e8:62:e6:bf:07:b5:04:d1:
         33:de:b3:52:5e:88:c6:63:5d:66:fc:65:05:d6:1b:ed:2e:39:
         3c:d9:e1:f4:e3:32:44:3a:60:42:4f:ba:63:de:55:a8:53:90:
         b3:62:79:6c:f2:ee:6d:f8:c8:d6:d0:bf:4f:7f:5f:01:c6:61:
         10:f2:5c:01:9d:12:b3:3e:e4:6c:8c:a1:24:4c:32:f5:1a:84:
         49:e0:61:3d:50:a7:37:f6:e1:b2:92:98:d6:ad:35:93:03:30:
         4e:1d:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:50:28 2025 by rpki-client