Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          /F2Itndqe5yjfKFWR8TuruMtABAiLV+FKXX94EKcPcM=
Subject key identifier:   46:27:A6:F5:6E:2F:51:FD:C3:40:EA:77:AB:11:D1:27:B0:5A:85:40
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          010B
Signing time:             Sat 29 Mar 2025 04:27:12 +0000
Manifest this update:     Sat 29 Mar 2025 04:27:12 +0000
Manifest next update:     Sat 05 Apr 2025 04:27:12 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: teUU6cIvLPs1wyJH5L/6Gi/mduk4NTA8Njji9T9uKTM=)
                          2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=)
                          3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD
        Validity
            Not Before: Mar 29 04:27:12 2025 GMT
            Not After : Apr  5 04:27:12 2025 GMT
        Subject: CN=67e776a0-22a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:4d:9f:2e:b0:ea:d7:a1:48:5e:d2:53:f1:
                    82:ac:48:11:6f:3c:e3:45:02:1a:e1:1f:53:5b:b2:
                    50:55:13:78:40:57:01:89:c8:07:06:4b:24:79:8c:
                    81:8a:da:f1:f7:3b:00:84:e4:da:99:75:0d:e4:a1:
                    2e:2d:f6:ec:00:61:f5:31:fa:db:37:a7:53:75:c9:
                    ef:b7:8c:de:80:e1:a0:3f:7e:de:ed:18:e0:74:42:
                    df:9b:6c:41:b7:df:6b:9b:ca:c8:23:55:fb:5a:42:
                    fe:5f:ce:54:f3:9b:c7:11:39:0f:a2:94:de:a7:57:
                    0e:da:81:1a:55:05:76:16:39:4e:00:3b:e5:f0:79:
                    a2:1f:b6:bb:2a:2e:50:93:24:d1:b7:58:60:c2:2b:
                    08:81:16:27:8c:7a:b4:a8:fa:2b:78:79:b4:61:91:
                    99:4a:4d:44:69:64:ad:1f:5b:9c:f9:f9:66:27:88:
                    f9:52:8e:31:53:cc:11:5f:1a:25:48:d5:88:9f:f7:
                    f2:cd:24:9e:54:11:87:d6:ef:48:0f:f0:8f:2e:c8:
                    85:cf:37:88:b4:51:b7:73:9e:64:f5:68:ab:7d:72:
                    96:42:a2:6b:a6:38:37:1d:cb:26:04:a7:b5:e9:22:
                    e6:c9:e9:c7:fb:2a:34:17:56:34:ef:53:9a:10:bb:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:27:A6:F5:6E:2F:51:FD:C3:40:EA:77:AB:11:D1:27:B0:5A:85:40
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:53:59:c3:df:a9:12:9a:b8:e9:96:8b:b6:c7:23:8a:26:1d:
         c9:77:b3:d5:56:fe:b0:b4:ff:20:0a:c6:99:59:70:0d:53:59:
         90:09:d5:72:25:35:ec:50:0e:46:fc:bb:b4:54:3a:ec:8c:13:
         ed:cc:83:81:05:a4:1f:d2:00:e6:45:18:89:08:0d:bc:4c:08:
         1b:04:11:aa:f0:a1:e6:d0:61:8d:94:4a:ed:c2:75:5f:69:71:
         8e:50:98:5c:3f:fb:c1:5c:9a:d7:6d:66:cb:e9:e5:bb:b8:4b:
         62:30:a6:5d:30:e5:2c:6a:e4:8a:dd:e9:10:e4:f7:8b:e9:c1:
         b1:4c:f4:b5:f2:3a:cf:46:19:3d:a9:15:2b:1b:c6:3e:f7:8e:
         97:0a:c5:bd:6c:7e:f1:f1:5d:40:9a:69:3c:82:53:48:45:25:
         80:4c:fd:a7:91:af:3b:f6:1c:45:b2:f0:f1:03:b4:40:37:ff:
         13:45:50:9c:aa:9d:dc:c0:ab:94:eb:8b:25:dc:59:a7:3e:4f:
         53:9e:76:ea:b4:9f:fb:f9:ec:c6:3b:26:e9:97:9d:73:be:ef:
         7b:0e:22:6e:0a:0d:ad:4f:56:39:ce:f3:13:09:fc:12:17:7c:
         fc:fb:7b:19:c3:33:1e:5d:20:ab:ea:c6:c7:89:dd:e3:65:49:
         9f:51:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----