Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
File:                     mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json)
Hash identifier:          UdeSlNdEJr1TqE1xLZsLxwZwi0AcXG5SbIFOvUamZnY=
Subject key identifier:   33:54:0E:3F:79:F5:93:64:F8:C3:60:29:5D:8B:E9:51:0E:E4:A9:96
Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA
Certificate issuer:       /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA
Certificate serial:       0AA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
Manifest number:          0A9D
Signing time:             Fri 28 Mar 2025 19:44:58 +0000
Manifest this update:     Fri 28 Mar 2025 19:44:57 +0000
Manifest next update:     Fri 04 Apr 2025 19:44:57 +0000
Files and hashes:         1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: x7ulUNgl8nyMRHvLyrLmjdMbNVJZ++73/d1AbGaf3Og=)
                          2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: wVjOHBRTAFBzywxmlgqw2C8A1H3crVXb96hs+TBB5RU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2728 (0xaa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD378
        Validity
            Not Before: Mar 28 19:44:57 2025 GMT
            Not After : Apr  4 19:44:57 2025 GMT
        Subject: CN=67e6fc39-441b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:98:0d:ce:e4:ee:65:cf:f5:70:df:08:6b:
                    76:af:c9:0c:32:fd:d6:24:6c:fe:e8:8d:ed:0e:99:
                    6b:a8:95:96:2f:a0:1b:42:42:dd:37:5b:76:4a:de:
                    e4:a8:e7:3a:d3:42:78:79:a9:c5:8d:0c:bd:2a:a2:
                    5d:4d:a4:50:f0:0a:05:d3:26:f4:2c:0c:2f:72:5b:
                    36:9f:0e:ee:39:e5:e1:5e:44:fd:6a:1a:9b:e6:82:
                    2b:7d:ad:2e:84:27:ea:8b:c6:e5:d1:05:13:dd:4b:
                    e3:14:88:a7:2d:1f:33:58:0d:a5:1c:7a:40:db:de:
                    1a:37:14:a6:07:a8:2c:aa:22:aa:c4:2d:72:d9:36:
                    60:8c:3c:5e:0a:e9:aa:a6:cc:cf:77:5b:ed:62:16:
                    7a:37:87:96:9f:fd:8d:31:c2:bb:f1:7a:0f:80:c5:
                    10:07:8a:bd:ba:f1:06:29:c2:70:81:5c:f7:dc:2d:
                    3f:f0:f9:a1:79:a6:5c:a7:24:19:78:b8:2b:45:c3:
                    60:dc:7f:95:57:95:a6:fb:ad:bb:07:b0:b9:ca:19:
                    34:6d:79:d8:dc:0b:57:b5:a0:06:40:42:44:81:f3:
                    b1:a2:22:4d:51:4e:cb:75:56:b9:08:67:98:a6:3a:
                    2e:be:3f:b3:b4:5f:30:87:f0:77:22:30:2e:5e:e1:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:0E:3F:79:F5:93:64:F8:C3:60:29:5D:8B:E9:51:0E:E4:A9:96
            X509v3 Authority Key Identifier:
                keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b5:32:0f:4e:f9:7e:42:00:4d:87:66:36:95:b4:de:0e:44:
         16:89:02:76:6b:b7:2f:f5:cd:92:e8:39:72:40:bd:06:d8:84:
         aa:17:56:78:93:ff:b2:7b:8e:61:27:73:14:af:b9:2e:28:4f:
         38:bc:75:cf:e7:97:66:a5:6e:ea:f3:2e:c1:00:eb:a8:85:7a:
         fb:0a:0d:b2:12:1b:1a:74:3d:b4:c9:f8:e7:aa:96:4a:cc:1c:
         f3:4d:2e:66:fe:da:59:b7:7d:0b:42:f8:ba:39:37:ad:d4:17:
         64:d4:b5:56:60:06:c4:17:0b:dc:21:09:99:c7:f2:eb:a8:8d:
         c0:1f:14:09:79:2b:44:35:0e:9c:fb:dc:5a:90:77:fc:50:df:
         e1:ca:7c:b7:bd:39:b0:2a:31:79:c5:1c:d2:4b:ab:33:3d:7d:
         07:10:65:4f:8a:76:07:5e:78:66:4a:94:3d:b2:a4:58:cd:de:
         ba:75:a2:eb:97:d3:a6:ce:68:69:11:c5:76:b7:02:c3:4a:b4:
         cd:dc:f9:b8:06:b0:ad:96:90:f8:6b:4b:c2:43:d1:44:63:8b:
         8c:2b:de:e1:fd:a2:d3:8c:0f:1a:70:2f:71:a3:ca:1d:64:a4:
         48:fc:56:97:58:da:38:23:c9:40:6c:31:d9:19:84:89:ec:f0:
         b7:58:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----