Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File:                     7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier:          s+3yWGxJHTLRQ1TdSh9g+L4FRsswfXtfUgH/4ZUPXUU=
Subject key identifier:   36:6A:B6:E3:7A:5F:9A:61:67:E3:EE:5C:BB:89:34:D0:DF:90:F5:32
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer:       /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number:          E6
Signing time:             Sat 29 Mar 2025 04:52:09 +0000
Manifest this update:     Sat 29 Mar 2025 04:52:09 +0000
Manifest next update:     Sat 05 Apr 2025 04:52:09 +0000
Files and hashes:         1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: D6judBAlFhd4ntsUzXuGfGEclfemiCbE7sTXKM1vXBs=)
                          2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF
        Validity
            Not Before: Mar 29 04:52:09 2025 GMT
            Not After : Apr  5 04:52:09 2025 GMT
        Subject: CN=67e77c79-c826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:1b:23:1f:17:12:20:c1:7f:a3:51:ee:ba:
                    5b:09:9f:04:92:be:0f:c3:1f:9c:3e:8e:cf:43:88:
                    dd:10:2b:12:07:d5:3d:ee:0c:95:0b:18:3c:e2:9c:
                    0f:4b:61:a8:99:6d:63:bf:b3:7e:8f:dc:ab:2a:22:
                    9a:3c:82:c7:5a:54:5c:da:72:d4:65:63:be:89:0f:
                    ba:c8:08:ab:31:c9:00:8d:44:bd:b9:1b:8c:b6:fa:
                    c9:33:07:ba:b1:ec:75:69:24:31:aa:d6:ff:a1:5e:
                    c1:00:95:74:17:bb:8d:a1:24:d9:fb:95:dc:88:02:
                    9c:86:9d:0d:b6:83:5f:ef:92:6a:eb:63:9f:38:97:
                    0d:9d:1b:13:80:72:60:89:98:cc:fa:ee:b1:7c:b2:
                    ed:05:29:ab:88:49:f7:0a:3a:04:21:c5:16:cc:23:
                    8c:6d:98:3d:c7:47:19:8f:36:3c:52:19:d5:0e:d4:
                    f5:bb:f5:3e:f7:52:ed:06:c3:4b:10:9e:68:fb:3f:
                    25:c7:a4:91:c8:f3:43:f3:c2:f0:a1:ea:fa:c6:86:
                    c7:06:7d:30:a6:0e:4d:56:6c:be:4d:ca:25:24:e4:
                    ee:2e:96:b6:41:68:32:fb:34:7d:63:81:7b:b4:1c:
                    ad:ee:53:aa:96:13:2e:e1:b6:27:b8:15:1d:bc:42:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6A:B6:E3:7A:5F:9A:61:67:E3:EE:5C:BB:89:34:D0:DF:90:F5:32
            X509v3 Authority Key Identifier:
                keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:56:3b:4d:5a:c0:c7:05:76:43:dc:c2:42:04:1c:84:79:d6:
         fb:58:97:c0:e6:dd:98:3d:eb:15:e0:5b:65:3a:45:fa:27:51:
         82:65:5a:73:0b:ec:ae:25:fd:79:b3:c2:b9:75:97:cb:b3:4e:
         6a:aa:a5:ca:5b:c5:5f:66:95:50:b4:4f:8d:21:23:a2:2b:bb:
         94:6c:b9:65:f4:c6:05:2c:72:42:55:79:2b:35:b5:7b:3f:9c:
         ad:48:b2:a2:b0:a3:b5:37:b5:59:09:73:1b:63:53:81:84:ce:
         b6:5b:d2:eb:05:e9:95:11:22:06:47:b3:aa:7a:8a:56:0f:89:
         fb:e4:33:62:5f:89:ac:1c:73:72:d3:2f:e5:7c:47:40:d2:a1:
         ed:c6:37:51:e6:73:fe:2a:b3:f4:61:ab:40:57:34:39:09:12:
         4a:40:04:3d:fa:0f:61:e3:f1:71:db:a5:e3:24:76:66:b1:03:
         69:74:03:fa:7a:7a:80:bd:87:f0:94:4b:56:2c:96:e9:a6:10:
         1b:60:9f:cd:d7:8d:ad:3c:6c:ba:8b:75:eb:74:66:39:73:5e:
         ef:c8:94:2b:17:b4:c0:7c:40:b0:2e:2a:ef:22:b6:6b:d1:d5:
         e6:8a:1b:92:a3:e4:bc:9a:85:0f:c6:33:a2:d9:1b:1c:22:64:
         ac:5d:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:37 2025 by rpki-client