Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
File:                     uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft (raw, json)
Hash identifier:          ICrDYbWR46L89bm8WAN4CabrILuhHPlFPVJNThPgSfU=
Subject key identifier:   F9:0B:AB:4B:CE:86:98:B6:6C:9B:E4:EA:DD:B7:3D:24:AC:4A:07:F8
Authority key identifier: BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB
Certificate issuer:       /CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
Manifest number:          0127
Signing time:             Fri 31 Jan 2025 03:49:08 +0000
Manifest this update:     Fri 31 Jan 2025 03:49:07 +0000
Manifest next update:     Fri 07 Feb 2025 03:49:07 +0000
Files and hashes:         1: uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl (hash: nEbaJqC9Hg0tnMhukrOJjO95XAu5ZG3zc+6qnRI8/Hw=)
                          2: 859871F2215D11EE963E9A52C4F9AE02.roa (hash: HHHOwt/fdM7W7+F6fEKQDH5IL/vBD99o4H9HkpME2xk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113217/serialNumber=BB30078CF687787D3A5B3E534C089716A86B13BB
        Validity
            Not Before: Jan 31 03:49:07 2025 GMT
            Not After : Feb  7 03:49:07 2025 GMT
        Subject: CN=679c4834-49e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:ec:1f:59:72:76:58:1a:12:78:84:60:86:
                    6a:81:0a:ec:b1:e7:c7:f2:b1:46:f5:d8:9b:44:82:
                    96:e6:c9:37:f9:d7:ae:e7:84:b8:36:90:71:43:83:
                    c2:24:bd:ae:1c:42:34:e9:49:3b:41:a1:24:91:a6:
                    9d:bf:b4:61:6a:b2:7b:1e:a7:3f:58:d2:16:85:e6:
                    ea:37:0d:9a:e4:f6:4d:3b:c9:fb:29:6a:af:b5:d9:
                    09:10:84:c8:a6:64:a0:38:b8:37:63:70:b3:d0:ed:
                    37:c3:12:0b:d5:bd:d2:8a:1f:ad:f9:62:77:26:6f:
                    a8:f8:29:4f:ed:2d:1b:ba:af:f6:1e:a9:cc:95:d1:
                    7a:1a:9e:65:92:15:a8:55:83:06:91:95:47:7e:e9:
                    a4:21:cc:e1:04:33:32:51:27:fa:30:d6:08:ba:e9:
                    2b:7a:df:f4:f2:37:e9:27:17:e7:d7:43:4b:2c:d8:
                    bd:f4:4a:cb:fa:9b:a0:b9:64:8d:5f:6b:79:3c:82:
                    3e:ad:b7:3d:75:27:d3:ce:62:c7:0f:68:b0:e3:22:
                    a5:c8:a3:9f:b9:5d:f7:0d:7d:31:b7:50:c9:4e:65:
                    e1:20:10:54:3e:be:4b:52:f1:4d:a7:77:cd:ac:94:
                    b5:b0:85:33:cc:d6:e0:7b:4c:25:14:80:6f:23:d1:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0B:AB:4B:CE:86:98:B6:6C:9B:E4:EA:DD:B7:3D:24:AC:4A:07:F8
            X509v3 Authority Key Identifier:
                keyid:BB:30:07:8C:F6:87:78:7D:3A:5B:3E:53:4C:08:97:16:A8:6B:13:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uzAHjPaHeH06Wz5TTAiXFqhrE7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113217/D72196D0215C11EEBCB5B24EC4F9AE02/uzAHjPaHeH06Wz5TTAiXFqhrE7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:95:70:b0:f8:19:17:13:98:18:ab:e2:34:28:8a:62:5c:3e:
         f8:4a:cf:22:64:d5:e9:e8:b4:b2:a8:f1:8f:2e:37:66:a9:08:
         81:c2:a4:a1:54:ae:61:53:7f:90:fb:20:ee:96:cc:e7:cd:91:
         68:3c:43:72:65:40:ff:fc:2c:3c:56:53:96:3b:a1:4d:fd:cb:
         e0:3b:4a:70:08:8e:29:1c:71:52:68:2b:ab:d7:e9:02:b8:ba:
         ff:c1:9a:a1:9a:37:ed:3d:4d:6f:31:e1:b1:84:dd:03:a7:d0:
         c0:a7:bf:78:82:b3:7b:93:c6:08:0a:e2:32:34:75:bd:f2:98:
         04:39:b5:0d:a7:35:8b:9c:1e:79:22:ba:73:80:7d:ef:7d:5b:
         68:c6:eb:61:66:51:cd:cc:7d:79:d2:2d:00:74:5c:f9:1e:6c:
         ee:10:29:30:14:05:29:75:71:24:cd:88:eb:34:25:b0:f1:87:
         c9:5a:db:86:7d:74:54:a5:10:cb:c6:29:b4:82:00:39:97:f0:
         92:20:b1:6a:32:d2:08:90:e2:61:4b:c0:d7:ce:8d:55:bc:bb:
         6c:30:29:cb:a8:3a:b9:af:36:0c:99:e5:dc:51:f3:d2:64:46:
         15:95:bc:57:eb:05:c7:38:53:49:ec:e2:a8:bf:a3:1b:a5:ae:
         fb:63:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----