Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File:                     pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier:          I/rOp9NOPRT7d6ZO/oRyRPWepm5o+vUBqr8OGbKSWtA=
Subject key identifier:   5E:92:7D:2B:A8:F4:5B:20:5D:04:8D:0D:46:DC:33:BB:73:F3:47:FA
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer:       /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number:          51
Signing time:             Sat 29 Mar 2025 06:34:44 +0000
Manifest this update:     Sat 29 Mar 2025 06:34:43 +0000
Manifest next update:     Sat 05 Apr 2025 06:34:43 +0000
Files and hashes:         1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: bWPoqUrwMSYAtSDxi4jJGGvIS3ENMKM0XVNVHwYaDLY=)
                          2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: u4w+Qp27Y9kvTk+tCZ+0s7VTT7TtAcdJXuu92GYJlRA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B48
        Validity
            Not Before: Mar 29 06:34:43 2025 GMT
            Not After : Apr  5 06:34:43 2025 GMT
        Subject: CN=67e79483-df86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:5d:4f:27:ce:1e:04:7a:2c:34:37:b0:77:
                    2f:3d:d7:7f:21:3e:11:21:62:9e:93:52:b9:62:b3:
                    ce:c1:bc:57:a5:af:2f:e6:39:ea:05:09:0e:ca:52:
                    48:6f:19:e5:6e:52:33:f8:58:16:86:2a:af:95:83:
                    58:7e:56:a1:f9:b3:60:0c:7f:db:c3:37:08:5a:68:
                    0e:38:b6:7e:93:02:70:e6:db:05:8e:e4:72:6b:0f:
                    58:14:8d:b2:51:93:db:3e:b0:8d:2a:dd:6a:39:42:
                    64:93:d0:71:0d:6d:9c:d0:2c:de:91:d1:02:2f:e1:
                    4a:62:c7:59:6b:9a:00:16:26:40:21:b0:b4:0c:16:
                    d3:65:29:8b:ab:4d:de:68:60:ac:18:1e:ff:74:fb:
                    c5:1a:73:d1:d5:62:f3:c5:df:51:fa:f3:d1:69:85:
                    4b:09:a6:50:fe:47:42:a2:ba:2e:a5:da:a8:3a:06:
                    41:e2:c0:62:dd:84:9d:49:63:2f:8a:c8:f5:1a:d4:
                    02:07:5f:07:99:a7:3b:24:33:c7:4e:59:19:d7:5e:
                    c9:3b:c7:87:55:aa:f2:1f:27:23:47:a7:e9:48:d3:
                    af:6a:ef:e8:66:b5:7d:58:72:12:0e:a0:9b:2d:9d:
                    c5:4f:2c:3b:72:3a:cb:00:ce:ba:18:61:14:dd:9c:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:92:7D:2B:A8:F4:5B:20:5D:04:8D:0D:46:DC:33:BB:73:F3:47:FA
            X509v3 Authority Key Identifier:
                keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d1:52:8f:2d:04:5d:02:75:e6:41:71:fd:d1:b0:0c:5b:60:
         56:05:ac:9a:9e:fa:84:b3:be:62:2f:9a:4f:fb:dc:9e:90:da:
         8f:28:1d:6c:36:f5:52:96:91:de:85:2f:ff:b3:73:51:8f:e2:
         e0:8f:56:f2:50:a7:8f:ce:2d:3b:05:4c:85:f5:69:be:0e:9e:
         aa:de:e0:6d:c3:1e:27:bc:92:38:67:01:1f:3f:51:9f:44:2f:
         96:6a:fd:fa:fa:8f:10:d6:c7:82:19:77:18:b7:8b:96:6d:0c:
         0e:f2:bf:b9:48:97:99:d0:95:4e:29:36:e7:a6:44:26:bb:2a:
         ba:19:54:85:19:08:e0:68:1e:29:0b:60:fa:5c:26:d0:70:dc:
         ee:fa:d2:17:03:8a:d4:7d:25:06:ee:98:af:13:c0:b1:31:94:
         30:37:b6:a0:01:60:35:e8:8a:bf:ac:23:26:cb:51:30:57:bd:
         89:14:cf:ff:d7:f6:e1:a2:44:61:12:b8:1f:8f:b3:ab:90:29:
         cc:2f:4a:39:2b:88:54:18:8c:a6:dd:04:d0:e4:58:75:43:5a:
         62:76:ba:6e:ea:70:60:c5:50:cc:80:56:a0:e4:c1:e9:53:52:
         d8:11:74:5f:5d:f8:74:3e:20:3c:dd:8f:f7:e1:d8:17:78:4d:
         92:47:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----