Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft
File:                     zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft (raw, json)
Hash identifier:          x0n6HJaW5uuMM4TgAA85eip0mc3jgjTkQVkPubUlb9Y=
Subject key identifier:   7B:AA:B7:C0:78:5A:73:63:7E:54:A4:FD:75:E5:8A:78:15:80:0E:F7
Authority key identifier: CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7
Certificate issuer:       /CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7
Certificate serial:       0F04
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft
Manifest number:          0EED
Signing time:             Mon 16 Dec 2024 17:33:24 +0000
Manifest this update:     Mon 16 Dec 2024 17:33:23 +0000
Manifest next update:     Mon 23 Dec 2024 17:33:23 +0000
Files and hashes:         1: zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl (hash: 4rNaSaYcaBuuY5WAB03m0iYsRyEDPRsQilbUXNPDsBc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3844 (0xf04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FECDA
        Validity
            Not Before: Dec 16 17:33:23 2024 GMT
            Not After : Dec 23 17:33:23 2024 GMT
        Subject: CN=67606463-1eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:4f:ca:bb:8b:12:6d:41:01:24:e4:af:12:
                    ce:0d:9e:3a:20:c6:98:02:7d:4a:13:58:7d:d5:ef:
                    92:c7:52:a5:c1:82:1b:2b:73:2b:17:7f:7c:c6:92:
                    9a:aa:d3:1f:0b:7f:f6:18:72:6a:54:34:17:10:3f:
                    a6:93:37:fe:71:b1:76:bf:f3:1e:e9:85:3c:30:74:
                    8f:8c:15:28:76:11:72:10:f5:d0:ac:59:97:5f:d9:
                    8d:2b:12:60:a0:ec:62:56:ce:53:c4:a5:6b:aa:41:
                    18:2c:2e:10:9c:24:50:c0:cb:8d:01:21:6f:04:08:
                    bc:39:38:3a:83:9b:f7:c4:aa:ed:f8:b6:44:67:eb:
                    7b:be:4e:bc:79:7c:bc:c7:a2:1d:61:91:6e:93:c8:
                    b4:97:49:e0:13:7a:4a:c0:c8:ad:a0:4a:9f:c7:49:
                    01:42:7d:81:6d:e5:0e:19:1c:0e:80:b0:e0:65:9f:
                    60:1a:33:87:40:9c:f5:47:44:31:49:b1:e1:a4:bd:
                    7d:e3:fb:88:c3:35:37:f3:6b:0a:62:25:63:05:a3:
                    1a:91:65:8f:54:c8:42:92:c8:a6:f3:ae:7e:b6:23:
                    6b:a2:7a:72:29:c5:f4:75:6c:02:38:28:3b:30:28:
                    56:78:87:70:cc:ab:a9:2f:48:bb:e4:8e:24:55:7c:
                    f5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AA:B7:C0:78:5A:73:63:7E:54:A4:FD:75:E5:8A:78:15:80:0E:F7
            X509v3 Authority Key Identifier:
                keyid:CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ae:e5:f5:ee:87:52:c4:59:98:69:05:71:fd:35:25:ea:2c:
         d5:b5:85:36:1b:0d:3d:95:05:34:e4:33:fc:c2:12:bd:27:7d:
         75:bc:b5:d2:71:96:56:c5:a5:b7:4c:59:ea:99:69:65:ac:bf:
         db:60:22:4e:12:1a:f5:93:74:07:fa:f9:a5:28:7a:7c:5e:69:
         3d:3e:11:6b:2e:97:15:7c:70:eb:2f:c3:c6:33:e1:2a:43:b3:
         d3:cf:9d:aa:77:8b:91:e9:41:29:81:22:aa:22:99:88:91:df:
         fe:7b:92:f9:2e:b7:c9:3f:d2:ec:dc:4d:cc:a5:ae:48:e8:59:
         01:b4:f9:25:5a:f9:f7:bd:4d:e6:fc:8a:1d:76:17:c3:fd:83:
         98:3c:f8:58:1e:16:37:ed:8e:17:b3:8c:6a:e1:65:ea:63:72:
         39:aa:78:1c:a0:49:a4:43:53:ec:36:15:09:33:86:95:27:14:
         f9:e2:45:35:3e:27:a8:05:e0:30:62:f1:83:6a:bd:7d:c3:cb:
         d2:48:14:a7:44:f8:7b:f3:65:0f:cd:2e:5d:d2:1e:94:d7:9c:
         28:f6:a6:96:bd:d8:6b:ff:95:32:f0:bc:d5:89:e3:38:06:ec:
         f5:a1:da:67:75:3f:2a:8c:67:00:66:27:da:a2:e5:4c:c4:af:
         5d:9c:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:03 2025 by rpki-client