Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File:                     diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier:          t2dKIzK4o69FmPPlKkRX9ZvYQ/4VehUAwZ6/9VixIbo=
Subject key identifier:   C4:C3:AA:96:DC:25:F8:A6:B0:4C:B4:5D:03:BB:85:6B:CA:7E:2E:19
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer:       /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number:          0B
Signing time:             Fri 31 Jan 2025 07:12:12 +0000
Manifest this update:     Fri 31 Jan 2025 07:12:12 +0000
Manifest next update:     Fri 07 Feb 2025 07:12:12 +0000
Files and hashes:         1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: wgzC4zk/GVhaDacHcQcd1vmJLlH6sAxRs1hv2Od11HU=)
                          2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: HTX8AzlBVBkYFaGVRN5GWHgC9HxdFLqil4uBj/GLN6g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
        Validity
            Not Before: Jan 31 07:12:12 2025 GMT
            Not After : Feb  7 07:12:12 2025 GMT
        Subject: CN=679c77cc-a2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:c7:fa:e9:48:b8:01:f9:99:43:cb:16:49:
                    84:cb:84:9d:a3:5c:41:1f:09:af:2c:94:a2:9e:c2:
                    02:8b:b8:76:21:ca:0a:1c:a9:1f:c2:2c:e3:2d:fb:
                    db:ea:22:a5:99:2a:75:a0:21:2d:70:3d:87:10:77:
                    da:3e:e6:d0:99:cf:d7:1c:1e:6e:4c:34:3f:54:78:
                    8a:f2:ea:3c:b0:a8:f7:4c:2a:cf:40:61:b2:b5:f0:
                    28:ac:43:aa:21:61:94:f3:81:cf:ff:ac:2d:35:45:
                    0a:cb:fc:d5:94:d8:93:3a:3f:31:98:4f:c6:77:a3:
                    18:22:a2:6a:f4:5c:fb:d9:a9:66:6f:7b:5e:76:dd:
                    81:da:2d:ef:21:23:99:0b:ba:00:1c:1f:b8:a0:80:
                    18:02:f5:44:40:a0:da:d5:88:17:30:a7:b9:a8:db:
                    7d:1b:55:3b:a1:33:c7:61:da:73:a6:8a:6d:73:f3:
                    74:77:27:48:d1:ba:1f:11:33:a0:bf:0f:0d:9b:65:
                    17:5e:5a:27:25:47:37:e8:be:fc:7c:cd:ad:bc:db:
                    d1:55:eb:3d:3b:52:0d:0b:5f:64:6e:fe:96:9c:eb:
                    1c:b4:f3:86:7b:f3:86:ad:32:f8:4f:f5:6f:3b:08:
                    0f:59:31:21:ab:e0:54:41:92:f7:2b:6f:b4:c1:0f:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C3:AA:96:DC:25:F8:A6:B0:4C:B4:5D:03:BB:85:6B:CA:7E:2E:19
            X509v3 Authority Key Identifier:
                keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:61:d1:4d:b5:33:81:7f:a0:56:96:b4:89:ab:4d:e0:a5:f2:
         8e:de:32:49:e3:d0:18:89:f4:03:83:0c:39:57:f8:61:d5:c8:
         10:e9:4d:8c:1d:68:73:c9:e9:19:0e:b5:b0:0c:1f:16:f3:b6:
         3a:19:d8:c1:60:83:6a:d7:0f:6d:1a:54:60:90:f7:0f:6f:ff:
         85:5a:67:72:4b:1b:93:97:fe:b5:e0:cb:4e:41:f7:99:ac:74:
         c0:5e:12:df:81:02:b1:ee:19:39:d2:5f:45:2a:5a:66:47:6a:
         8b:b2:ef:10:48:c9:9b:b1:f5:ee:7f:c5:53:5d:92:a9:dc:53:
         e4:10:fc:48:bd:30:fd:89:37:6a:98:0c:03:e6:be:87:3a:bc:
         0e:63:ba:89:5e:2d:1a:21:57:45:2e:44:98:6d:96:1e:57:76:
         0a:dd:ce:6f:e1:f6:83:bc:c5:67:a7:3f:f8:1b:68:87:85:2f:
         3d:01:67:ae:aa:f0:8b:55:a9:d3:c7:1d:a8:f3:6a:00:80:cc:
         ff:15:2c:a8:e0:ca:69:90:10:a2:4c:e0:59:bd:f8:65:72:c3:
         63:83:40:87:05:55:3b:77:24:63:03:17:a3:f8:e5:cf:79:36:
         10:10:6c:54:19:27:e2:fb:4b:d1:09:36:74:cc:56:44:8d:30:
         ac:b4:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----