Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft
File:                     oDlpuv_Weqt11JODf6HHxp_7Jxc.mft (raw, json)
Hash identifier:          EIireAsjPDN6GhpO99pThk7xoPXRR5LlAB9UBbfcRDY=
Subject key identifier:   FD:03:73:22:AD:65:AF:9B:D2:3D:C7:58:B3:72:52:19:B8:AC:5F:65
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Certificate issuer:       /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial:       2A67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft
Manifest number:          29FF
Signing time:             Fri 28 Mar 2025 15:41:45 +0000
Manifest this update:     Fri 28 Mar 2025 15:41:45 +0000
Manifest next update:     Fri 04 Apr 2025 15:41:45 +0000
Files and hashes:         1: oDlpuv_Weqt11JODf6HHxp_7Jxc.crl (hash: dSIjpCrkvyXqPtfdB6zopJ/qgKf5CTnhcx27fKnqzqA=)
                          2: EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa (hash: dg5P0bOa9bfh+0q6pRKAhwC/a/FidA3if8bbm6m10Kw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10855 (0x2a67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA496, serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
        Validity
            Not Before: Mar 28 15:41:45 2025 GMT
            Not After : Apr  4 15:41:45 2025 GMT
        Subject: CN=67e6c339-5c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:0f:b2:c0:10:f3:31:4f:17:b4:ff:af:ae:
                    92:e2:d0:cf:b7:16:39:b0:6f:09:93:ab:2a:a7:eb:
                    13:e6:27:dd:6f:44:82:85:5d:ad:60:db:87:13:c6:
                    ec:cc:74:81:14:29:2c:b0:76:26:2a:16:5a:37:a4:
                    fd:69:36:45:ea:9f:13:9c:13:35:e4:a1:bd:1c:76:
                    76:bb:04:37:89:2b:4c:2b:f6:64:c1:40:5c:32:c1:
                    9b:5a:ac:17:39:2d:0f:f3:07:2f:8d:2a:07:ce:9b:
                    ce:3e:65:2c:11:64:57:78:69:85:7b:cf:af:57:21:
                    7f:c4:e4:66:e8:b7:2e:a6:5f:c4:65:86:4d:0d:6b:
                    4c:fa:30:bd:ef:02:65:ed:80:ec:04:c9:db:59:09:
                    38:10:c3:e0:51:aa:67:d5:fd:d5:1e:e9:79:d3:01:
                    5b:28:b9:c5:f8:e7:bb:31:17:ac:4f:65:f6:8e:f2:
                    f7:c0:f8:1a:c4:71:f0:04:29:f6:4c:02:12:cd:22:
                    c2:bb:44:2a:a0:8b:29:61:12:84:80:b9:23:77:78:
                    82:9c:c2:4b:98:36:80:d2:8d:e5:3a:5f:cb:a1:4a:
                    fc:75:39:fc:4b:ab:f6:f3:44:c0:7f:d8:57:5a:0f:
                    e3:11:0e:9e:16:91:b3:4e:dc:51:a9:11:a8:44:4c:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:03:73:22:AD:65:AF:9B:D2:3D:C7:58:B3:72:52:19:B8:AC:5F:65
            X509v3 Authority Key Identifier:
                keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:80:6b:ab:45:c0:54:be:42:d2:89:6a:e6:14:25:6a:77:ef:
         fc:b4:b8:3e:52:9d:58:c0:64:9b:e7:3a:79:fb:dc:37:e3:0a:
         28:0c:ab:22:58:b4:b4:ca:09:9e:7a:a6:1c:44:41:5b:d8:67:
         7d:1a:0f:5f:b8:81:00:db:a7:f5:70:13:63:26:b2:3e:0f:18:
         c1:40:8a:b0:d1:c8:57:6c:f6:6b:a3:c4:83:e3:a2:28:39:c8:
         1b:7f:a9:57:1d:f9:fd:9b:cc:4e:e5:e8:82:a4:7d:c8:03:0f:
         6a:64:6b:a0:c7:70:56:3d:9e:ab:8b:ac:9d:db:7a:03:ee:d0:
         2c:ac:31:7a:93:47:22:e2:04:9d:30:47:20:81:59:b0:fc:c7:
         a5:21:cd:9f:9e:3f:83:70:d4:6b:4a:72:83:0a:59:79:c3:e6:
         1d:c6:77:2f:6b:33:49:78:20:63:e4:c6:16:67:a8:dd:31:3f:
         ca:eb:ab:26:5b:ae:02:84:7a:82:95:d1:98:f0:a0:90:39:53:
         9e:ab:91:7b:16:20:a4:fb:52:ce:af:4f:48:d2:cb:3f:54:d8:
         0b:b0:93:19:3d:e1:49:86:ec:b3:b8:a1:c2:6e:79:4a:37:53:
         d2:22:52:6c:b4:3b:3a:8c:5c:02:48:a8:48:71:ac:22:62:46:
         a2:53:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----