Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
File:                     loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json)
Hash identifier:          bawid1yrTvfVEPlDYh7J+4DtMuf3MQawjRKRfHC8paA=
Subject key identifier:   93:66:26:C3:9A:FE:43:D9:31:33:02:3E:A6:7D:68:FC:60:C6:26:66
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Certificate issuer:       /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
Manifest number:          76
Signing time:             Sat 29 Mar 2025 06:02:44 +0000
Manifest this update:     Sat 29 Mar 2025 06:02:44 +0000
Manifest next update:     Sat 05 Apr 2025 06:02:44 +0000
Files and hashes:         1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: E1puQte4O7Twj9QEI9l8+tVm2L+ZrScBCTCc3sPpQKo=)
                          2: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: FQoFMhaO39gGEcc2pn8CyPB8yz5sPKJ5LS8scOVr+nU=)
                          3: 06B76AE05AC911EF9DF4275AC4F9AE02.roa (hash: p2h51oKfWEnIrxeQceDN5JWcokM71oAHp5D24ePE5rk=)
                          4: 06237AC45AC911EF9DF4275AC4F9AE02.roa (hash: X3F/CNUdhflmAgi4adN4rn0epV3fDuvZOIzQJHOvlz4=)
                          5: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: UGCPOMHQWDHdKMVZEIClF1yCBQsAp0GOZkBRwsHoCKc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DF25
        Validity
            Not Before: Mar 29 06:02:44 2025 GMT
            Not After : Apr  5 06:02:44 2025 GMT
        Subject: CN=67e78d04-55be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:d4:59:d7:15:21:ed:90:be:03:b4:98:07:
                    fc:87:5c:04:d1:3d:6a:47:d0:47:56:9a:41:3c:f5:
                    37:31:25:d0:eb:89:0e:00:2c:df:02:2b:29:cc:c3:
                    40:64:24:48:2c:7b:ab:96:76:cc:99:06:ed:07:c8:
                    8c:ba:fe:a9:9d:88:30:a2:ed:f0:51:1d:df:5e:4c:
                    3e:00:8a:67:63:a5:cc:33:ed:54:e7:ef:50:b3:e1:
                    13:e0:b1:c4:8e:b1:c3:18:64:db:2d:36:0b:7f:93:
                    34:d4:62:ad:1f:ec:34:59:de:d3:3a:74:b1:f5:4d:
                    1f:a2:fa:23:e0:ca:73:bb:75:68:b7:f1:f8:b2:8c:
                    25:b2:72:c2:e6:96:00:74:21:c1:bf:7b:22:3f:1e:
                    4b:3d:22:20:bf:85:c2:58:47:12:83:f5:35:a4:55:
                    73:39:c2:cc:83:14:80:d9:ef:0b:f9:28:b4:c2:c9:
                    5a:6d:e4:e9:44:11:b1:0a:c3:10:c1:68:e6:21:f6:
                    84:81:72:5a:37:c7:89:0d:29:47:1e:65:c1:97:91:
                    63:ba:04:de:f9:59:f1:9c:1a:16:56:bc:7a:4c:18:
                    1d:12:7a:54:99:5c:31:26:15:2d:e0:9f:9c:1a:32:
                    b6:26:80:5e:e2:53:87:7f:19:ee:61:e2:7b:44:a1:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:66:26:C3:9A:FE:43:D9:31:33:02:3E:A6:7D:68:FC:60:C6:26:66
            X509v3 Authority Key Identifier:
                keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:d6:65:53:90:3b:42:46:be:66:e4:7f:30:99:e2:5a:25:
         cc:51:e3:84:4d:55:aa:ba:9f:da:8c:67:41:2c:84:4c:53:1c:
         d0:97:67:1c:67:37:11:85:ca:2c:0a:60:40:b5:79:97:ef:3c:
         4b:60:19:26:70:28:62:99:26:2a:5d:d9:24:30:a7:5f:f4:5e:
         bb:a9:d0:89:1c:88:ae:47:c5:85:a8:3a:f7:65:69:7b:92:71:
         3d:b9:70:9b:a8:8a:02:eb:4b:d2:0e:8c:15:9f:71:5d:b3:96:
         52:be:22:1b:21:66:46:41:56:96:d6:77:dd:40:21:4b:26:18:
         d4:ac:21:6c:19:83:41:4d:1a:77:02:e8:50:98:b7:24:5b:3c:
         de:13:2b:b7:55:78:7e:08:2c:3f:60:1b:38:97:8a:03:69:21:
         eb:3b:3f:70:3d:6b:04:a8:2d:45:0e:12:3e:08:b8:0e:21:42:
         ac:79:04:2c:19:01:9e:1a:98:b2:e9:8e:1c:09:e2:67:2c:c9:
         d5:7a:26:0d:20:3c:40:56:e2:1b:fe:a4:45:70:5f:a2:07:ab:
         2b:bf:41:35:b9:57:99:be:90:39:e8:c5:f0:7a:cd:5b:5a:d1:
         07:93:1c:c9:33:d6:09:57:d6:a2:a2:f2:35:24:af:02:ff:4d:
         39:aa:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:45 2025 by rpki-client