Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft
File:                     R1tipfIz7QWscth4EjThCb86kIw.mft (raw, json)
Hash identifier:          /7y13unVE4Dhe05wc2ZhkN5gaw1VU7uOJsbsg+TOPC8=
Subject key identifier:   EA:7B:08:DD:85:27:32:44:0C:EE:6F:F1:BC:C8:C7:48:72:53:30:BD
Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C
Certificate issuer:       /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
Certificate serial:       06C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft
Manifest number:          06A1
Signing time:             Fri 28 Mar 2025 22:34:50 +0000
Manifest this update:     Fri 28 Mar 2025 22:34:49 +0000
Manifest next update:     Fri 04 Apr 2025 22:34:49 +0000
Files and hashes:         1: R1tipfIz7QWscth4EjThCb86kIw.crl (hash: hzgbYEMTFWR3zrRa4iymI7MDXF99OVTGE6AX1CdE4ag=)
                          2: 277D6F8A92FC11EE9104E34AC4F9AE02.roa (hash: Y63HpsRvYL/5i6ST/DVFn929os6gpGVpLFx16SbSFmk=)
                          3: E36FB86EC09A11ECB9687037C4F9AE02.roa (hash: Ib+XazX+Qxi5XJo4rC4mxroM+7vsfCjFEjXXwhdqb+s=)
                          4: BE497906E5E311EEB87FAA36C4F9AE02.roa (hash: k1lEv2cHDDWdD60iIseLu7lRMH41febzqKklPn0n+tA=)
                          5: 26FB999C92FC11EE9104E34AC4F9AE02.roa (hash: NBz1TRw0/NeMKLoDGjeCvyyLAZyG71SuKvi7RBEyTO4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729 (0x6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C911D
        Validity
            Not Before: Mar 28 22:34:49 2025 GMT
            Not After : Apr  4 22:34:49 2025 GMT
        Subject: CN=67e72409-56a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:34:b4:56:08:4e:cb:00:79:29:93:8f:f8:
                    c0:14:26:ac:7c:bb:3b:2f:a9:2d:cc:db:c7:e8:33:
                    44:76:ad:6d:18:18:0d:de:d4:31:f6:29:17:87:74:
                    b6:63:00:c0:a9:2b:2f:a3:50:9a:c2:b4:df:83:fa:
                    4b:1b:a9:fb:7d:ed:f0:d0:29:de:50:60:e1:67:37:
                    0c:4f:59:fa:75:50:ae:86:b1:4d:1b:2f:0e:d1:f5:
                    5a:7e:ba:17:a3:59:4a:b4:06:b5:b4:7b:31:32:46:
                    e1:fd:72:7d:58:94:41:a8:8d:1b:99:d5:ae:3b:27:
                    1f:ba:6a:8c:d5:8a:63:53:fb:1c:91:27:d4:3c:ae:
                    ed:b0:12:b1:7e:9e:2f:66:df:3d:45:18:87:20:65:
                    d9:c9:a3:63:78:11:fb:15:f7:13:a8:f6:9c:b5:aa:
                    12:5c:86:c2:7f:f7:10:d5:9e:01:d8:08:0a:6f:fb:
                    ec:2a:d5:87:10:e6:f6:f4:24:04:43:a4:d8:bd:f3:
                    fb:77:21:40:a8:fe:86:cd:0b:62:8c:e1:93:b5:03:
                    a6:eb:5e:e5:67:e2:58:2a:d7:12:10:bb:c9:de:ce:
                    ed:d4:67:a6:43:31:18:42:46:20:da:0d:d9:f0:87:
                    cb:2f:e7:4a:be:64:22:12:95:d0:ae:02:8a:8e:b5:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7B:08:DD:85:27:32:44:0C:EE:6F:F1:BC:C8:C7:48:72:53:30:BD
            X509v3 Authority Key Identifier:
                keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:09:54:d4:c3:1f:16:d8:0a:ba:48:fa:6b:90:61:d0:13:
         10:0f:91:4b:36:ec:59:20:eb:f5:a4:92:09:07:9d:1f:90:72:
         8d:f2:8e:28:1d:cb:2a:10:5b:0d:a7:0b:45:3d:20:b7:92:35:
         45:d8:54:50:9e:ab:6a:cc:ff:ad:d7:14:67:4c:23:3b:cc:3b:
         98:f8:77:f0:f7:c6:c4:d6:83:d9:80:97:34:86:c8:cc:46:97:
         2d:aa:de:d4:37:f0:77:82:5b:03:95:90:59:0a:51:82:55:85:
         63:15:94:12:7f:e0:ca:43:6d:44:23:1d:53:88:6b:75:16:46:
         69:91:ec:ec:32:37:11:99:f4:78:50:bb:d6:86:24:30:b4:9a:
         eb:4b:d9:46:ef:62:41:9f:0d:4f:62:b6:07:bb:82:d1:e1:ca:
         ab:61:4b:1b:41:cd:b7:a8:a2:0b:72:f6:d0:cc:46:81:c3:32:
         d7:6d:15:43:fb:77:83:98:a2:02:60:59:45:b8:18:ea:81:cd:
         31:c1:22:e2:8e:27:ef:38:f0:64:2e:43:b0:cb:94:99:fd:c2:
         cb:ad:98:eb:54:7b:06:42:95:35:98:5d:bb:23:73:11:e2:e8:
         cc:76:c8:8e:4f:aa:60:76:1c:26:93:d1:c0:3e:de:a9:2d:b8:
         6f:a4:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:38:07 2025 by rpki-client