Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
File:                     9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json)
Hash identifier:          hYuqbliqfAS+SHo+F5U39VUwHopWbrW+oxhf4acF3mw=
Subject key identifier:   5A:04:3E:7C:F3:9C:99:A2:0F:EE:EC:46:64:15:D2:0F:6E:2A:6F:80
Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Certificate issuer:       /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Certificate serial:       0AD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
Manifest number:          0AC2
Signing time:             Fri 28 Mar 2025 19:40:16 +0000
Manifest this update:     Fri 28 Mar 2025 19:40:16 +0000
Manifest next update:     Fri 04 Apr 2025 19:40:16 +0000
Files and hashes:         1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: W/AnRgAj+GefvhvocCbK04tE/6JA+f12QqpNfuu4krw=)
                          2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=)
                          3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9EF3
        Validity
            Not Before: Mar 28 19:40:16 2025 GMT
            Not After : Apr  4 19:40:16 2025 GMT
        Subject: CN=67e6fb20-ba52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:87:02:d1:5b:64:1c:07:f2:8c:64:d2:c3:
                    33:96:c5:48:1a:6a:23:16:08:41:44:45:32:30:c4:
                    d7:b5:69:6f:82:d1:b1:70:bb:63:7a:f4:ee:c7:7e:
                    13:58:09:4b:20:45:13:e1:4b:bd:0e:6d:47:09:79:
                    bf:02:c4:b4:f1:af:d3:c3:30:ef:2b:cb:13:fa:2b:
                    8c:f0:4b:ad:9e:b4:e7:3f:ca:d5:d5:c5:31:8c:f1:
                    9d:6b:47:24:e0:a8:cc:a3:5c:37:94:0c:70:9c:d1:
                    68:eb:ca:d4:3d:30:5f:80:80:84:d5:de:9e:6d:62:
                    f4:5a:27:6c:4c:6b:1e:61:89:72:bb:2d:16:9c:78:
                    17:c8:7f:d8:92:bc:37:d7:37:3f:47:f8:8c:53:9c:
                    5f:63:80:bc:82:1b:36:d5:c5:15:f7:7c:b2:54:15:
                    44:4b:b8:ed:80:68:fb:a9:3c:10:a2:34:c4:7c:72:
                    44:e7:e4:ed:1c:2c:f8:9a:2e:04:9d:a8:c9:e6:4e:
                    69:78:ad:df:2c:bb:ac:57:47:a3:4b:3f:bd:38:bc:
                    cb:b1:9a:61:99:78:ab:71:ac:40:43:f7:9a:90:af:
                    d3:dd:e5:dd:05:1f:b7:fa:93:e1:69:37:16:0a:30:
                    8b:03:1d:d3:65:d5:9b:b8:6d:e4:f4:96:cb:01:49:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:3E:7C:F3:9C:99:A2:0F:EE:EC:46:64:15:D2:0F:6E:2A:6F:80
            X509v3 Authority Key Identifier:
                keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c7:39:db:af:79:2c:d6:f6:69:ee:89:eb:cd:70:32:90:ae:
         70:c9:ba:1c:f8:db:e1:bc:64:64:ee:f8:a6:62:66:6f:a3:ba:
         70:77:53:84:74:6b:0c:ac:86:38:e1:86:39:a3:ed:56:29:0a:
         7f:4f:8a:ab:f0:b2:54:03:57:05:fc:0c:44:28:0c:08:38:94:
         86:79:77:a3:e3:c8:b4:dd:f6:70:dc:13:5f:ce:40:0d:9f:81:
         3f:4e:71:df:1c:f3:04:67:3d:2c:4f:c8:0c:fb:ea:51:d3:07:
         16:41:14:e3:41:34:39:62:8b:b5:c5:8a:ef:4b:3e:5d:88:10:
         14:82:a3:39:7f:56:d3:dd:ad:62:de:24:cb:b2:8a:eb:58:dd:
         35:07:9f:ed:99:06:0f:63:ca:8f:bd:e2:4e:3a:bb:96:8a:c5:
         83:4c:60:29:a1:bb:3f:b4:87:6e:82:d9:a6:a9:e4:cb:47:df:
         ae:a7:5b:5a:2b:bd:2e:81:28:6d:db:22:bd:6e:30:7a:c5:0a:
         f2:2c:19:06:86:88:60:57:17:b0:44:ec:c7:56:44:de:56:16:
         d4:47:7c:4a:8a:78:d3:88:5f:5b:a0:aa:8a:13:60:26:0c:ab:
         ba:37:4b:67:76:24:91:a9:fa:37:62:99:b4:58:a0:0f:c6:b5:
         77:b3:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:58:57 2025 by rpki-client