Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File:                     h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier:          3O9CWDDhxFWzDriOCvdCRSCjrH2HAmUV5fFm+fAJHOw=
Subject key identifier:   6B:B0:A1:DC:CB:49:19:06:A7:87:FF:3C:09:5C:2B:E2:F8:3E:36:D2
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number:          01A2
Signing time:             Fri 31 Jan 2025 02:43:49 +0000
Manifest this update:     Fri 31 Jan 2025 02:43:48 +0000
Manifest next update:     Fri 07 Feb 2025 02:43:48 +0000
Files and hashes:         1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: iSXjHhZreZWTosBzaFWzgdWj/b6jOGuxCkMzDxGDe1M=)
                          2: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: ywhvDJvQxyWr5M5HeSY6XX6kpPDyeGDW1U6yRs4SzyA=)
                          3: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: bgF9MEhNt9OhTuD+qzVTZBt1Y1hR4lpAcvN75ie3PMk=)
                          4: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: HEP7ygO7vwbJNA6a1Yh81guofjc2KZAgniicQPiMuwk=)
                          5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 4nca+zjw/oceArKoao4vA7g0YEPiT0qMny/vAkel68o=)
                          6: 319543069BBF11EDBFB6EE5DC4F9AE02.roa (hash: vZLrRb8D5tduBuTVKoErlXudBIz+MpXOKS0TeU5hY9o=)
                          7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: ua1AQMU7bCCk0fcUdLe1mRz8NyiPnpe550PawenVzJc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Jan 31 02:43:48 2025 GMT
            Not After : Feb  7 02:43:48 2025 GMT
        Subject: CN=679c38e5-4f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:83:42:e5:ae:10:3c:1b:f9:1c:a9:98:77:
                    27:9e:a3:2a:db:f0:2a:a6:79:78:10:c1:40:f8:7c:
                    02:59:3f:1c:0e:9b:8e:50:19:20:4e:02:9b:66:1d:
                    a2:54:05:56:78:ed:d0:24:3b:2a:a2:31:f4:27:1d:
                    de:4a:85:26:d3:b0:0b:43:65:53:4f:86:e5:9a:a2:
                    15:2a:92:73:46:61:32:9c:7a:7f:f3:be:6d:ce:c3:
                    03:f1:c4:78:bf:a1:ed:67:11:88:22:d3:37:a6:ad:
                    bf:e8:f1:b1:b5:22:a6:cc:5d:51:45:2d:4c:52:60:
                    b1:52:fa:6b:bb:24:c7:ec:29:c7:71:9a:57:84:53:
                    83:77:10:d5:0b:09:0d:54:58:ea:ef:ab:f1:4f:45:
                    61:3a:25:a3:93:e5:e1:fe:55:7f:2e:67:fd:df:2d:
                    34:f5:ac:8e:5c:3c:71:ba:35:03:ca:ed:55:14:0c:
                    1b:04:b3:a5:22:14:d2:9d:ec:2c:3a:25:a9:d4:6b:
                    65:f8:1a:a4:47:c4:fc:2c:7e:30:73:6d:44:d2:45:
                    a5:43:d4:d0:24:d0:ab:ea:c9:0c:c9:29:26:1a:ed:
                    cd:5c:9b:3e:28:ea:67:2f:21:46:99:62:d4:79:51:
                    c6:23:16:7c:a1:32:7b:29:a1:0c:e9:65:65:cc:a8:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B0:A1:DC:CB:49:19:06:A7:87:FF:3C:09:5C:2B:E2:F8:3E:36:D2
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1a:24:51:68:fe:d6:9f:5e:90:3c:a1:ad:48:6e:00:fe:9f:
         60:96:c5:2c:db:f6:26:10:da:87:22:cf:e9:8f:08:2a:20:85:
         79:59:60:ba:36:9f:7e:d2:69:c0:9e:c5:48:ff:d1:15:ef:b8:
         c9:4c:23:57:66:0e:8c:ae:3b:9a:e9:5a:f7:8c:84:6c:85:5b:
         c2:0b:d9:07:39:7c:b3:d5:b5:b7:64:43:0c:e5:9f:38:4e:c8:
         f1:dc:a9:f9:cd:ca:8b:51:80:a8:80:3e:45:bc:b7:a4:31:ba:
         41:5f:0b:bd:6d:74:9e:b4:e6:8b:be:f9:8d:6b:d9:74:a3:53:
         df:a4:d3:5e:2e:13:63:65:41:74:91:f5:5f:4e:f3:91:9f:12:
         c3:3f:fa:d9:9e:3f:41:21:ee:8a:2c:e1:fa:17:fe:3b:04:4c:
         c5:8d:a8:f6:39:53:c1:3c:24:78:cd:5f:13:74:78:25:cf:e6:
         2d:6d:03:f3:45:ce:79:a7:1e:3a:7b:23:5a:eb:10:01:8d:1b:
         01:3d:34:a0:59:79:e1:8e:d2:95:86:a1:f5:26:39:0e:8e:17:
         87:37:59:2b:18:49:40:0e:b6:89:5c:f4:19:b9:28:f4:9d:ed:
         b2:d9:e6:b1:df:99:ec:35:a0:9a:d1:28:aa:2f:79:1f:6f:23:
         5a:02:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----