Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
File:                     dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json)
Hash identifier:          oxRk30+g7NHlCFh1unIdLmhhwA2GMlRPry0Leqv2ANQ=
Subject key identifier:   83:6A:65:72:8E:E9:65:19:49:0E:BC:0F:8F:65:5C:02:6D:AB:37:46
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Certificate issuer:       /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial:       0C28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
Manifest number:          0BFE
Signing time:             Fri 28 Mar 2025 18:58:40 +0000
Manifest this update:     Fri 28 Mar 2025 18:58:40 +0000
Manifest next update:     Fri 04 Apr 2025 18:58:40 +0000
Files and hashes:         1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: VXlnlzd6IXTINPlubk2w6PE3XqmuyhzEiEci+xLDaqI=)
                          2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: DROTwTMk5DUvv23krOsjnKxfQT0TAHld0vTq/cxjBfM=)
                          3: AF625B0680FA11EC96280855C4F9AE02.roa (hash: z4WcPtmsy3sGBTXhyRrnZ77SzocIV0s6o5lPO+EbUAY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3112 (0xc28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4463
        Validity
            Not Before: Mar 28 18:58:40 2025 GMT
            Not After : Apr  4 18:58:40 2025 GMT
        Subject: CN=67e6f160-9434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:d0:62:6c:a6:a3:12:8c:63:86:eb:a8:1a:
                    43:14:98:51:80:17:d1:ac:fb:c3:ad:3a:18:87:1d:
                    b1:8b:ab:63:7c:96:2d:06:dd:21:bc:2a:23:69:8f:
                    a4:6e:90:dd:59:0d:9b:38:86:42:bd:2a:fa:87:bf:
                    d5:9b:36:29:bb:79:ac:d5:75:5f:f2:0a:d8:0f:d9:
                    f2:3f:dc:ed:f9:14:d5:06:b2:ca:d8:67:8f:93:da:
                    f6:32:b2:bf:68:78:1b:4c:ff:b6:ae:57:d5:c5:04:
                    6a:e6:7e:cb:12:ca:b3:1d:d1:34:7f:b7:52:07:37:
                    55:4d:9c:29:e7:ae:c9:7b:2a:c3:37:11:9d:82:1c:
                    c8:34:95:ae:6f:70:d4:5c:92:40:3b:ba:44:33:d9:
                    f4:5d:8a:77:e6:ac:16:9e:7d:c7:d9:17:bc:ef:2a:
                    d9:01:e6:15:97:f0:65:78:44:c1:5a:c6:2c:56:4a:
                    3c:46:09:44:79:5d:c8:db:08:22:cc:d0:ef:63:3d:
                    33:34:7c:16:6d:2e:f8:98:ce:6f:c9:be:80:42:7e:
                    b0:2c:80:4a:e0:9a:3a:64:72:07:c1:2e:87:31:17:
                    6e:60:b0:6e:ce:c0:ed:f9:17:2d:92:9a:66:00:74:
                    30:1a:b0:ae:67:c3:90:b7:c2:b2:93:85:33:8e:bd:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6A:65:72:8E:E9:65:19:49:0E:BC:0F:8F:65:5C:02:6D:AB:37:46
            X509v3 Authority Key Identifier:
                keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fb:4c:47:32:f5:91:33:45:b0:0b:25:2a:2d:db:4e:70:c4:
         fd:bf:94:b4:a9:55:0f:4c:dc:e8:e9:19:df:65:fc:02:fb:89:
         27:ed:86:54:91:78:a8:5b:fd:d4:62:0d:91:7f:6f:35:5f:93:
         b8:50:fd:62:54:91:c0:84:2a:91:97:0c:12:b1:ec:e4:32:e2:
         3a:18:29:cd:a8:6f:9a:f2:b1:29:65:b2:6a:35:d5:7f:0c:d1:
         df:ec:99:1a:4a:ab:2a:ff:4e:81:5d:11:91:62:29:f9:88:fc:
         e2:b2:be:0c:2e:61:4d:8f:49:b9:8b:6c:7d:6b:6a:d8:f8:43:
         a2:d9:8e:7e:34:bb:2d:73:6e:48:74:7f:04:ac:9d:ad:71:bd:
         73:d7:e7:6e:92:d8:b2:29:f5:00:ec:fa:5c:78:4f:c3:93:ca:
         07:93:fa:0c:07:86:00:3b:18:18:05:d3:a2:05:86:6c:b1:2b:
         d0:6b:c3:bc:b8:f1:1e:c0:5f:9b:61:92:f2:bb:44:aa:6d:a0:
         bd:c5:a3:d9:26:91:05:47:af:d1:7b:76:23:32:85:04:cb:b9:
         88:a8:7f:d1:ae:77:f2:97:d9:7e:62:20:0b:29:e7:c4:37:1c:
         dc:12:e0:11:8a:02:9a:10:ea:22:64:fb:71:9b:f4:77:91:8e:
         a8:8e:8d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:10 2025 by rpki-client