Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File:                     ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier:          FQDalzh19qLb/pXIKL1Br6m7fHBiEmPhuaAiiV1G6wY=
Subject key identifier:   E9:E8:FE:FA:2A:0B:28:1E:91:29:4E:B4:F7:D0:FF:8C:21:88:19:9F
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer:       /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial:       03BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number:          03B0
Signing time:             Fri 31 Jan 2025 00:48:00 +0000
Manifest this update:     Fri 31 Jan 2025 00:47:59 +0000
Manifest next update:     Fri 07 Feb 2025 00:47:59 +0000
Files and hashes:         1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: /NyJqrcYtWdD9kWfL3iiAa9uTyeeV7MY0eilrdZvXSQ=)
                          2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: TeNDnRuuYAnbCLS3WXII+1iDKTVyNVShsBnh2Tnr5KY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
        Validity
            Not Before: Jan 31 00:47:59 2025 GMT
            Not After : Feb  7 00:47:59 2025 GMT
        Subject: CN=679c1dc0-c2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:5a:e5:44:62:fe:82:a6:e8:e1:b8:09:8c:
                    d2:f6:cf:46:e1:fc:78:3d:1c:11:87:72:04:d2:1e:
                    b7:eb:7f:53:c7:5d:72:f4:9f:00:e2:10:a2:61:7e:
                    be:5c:a4:46:48:43:e9:61:81:3e:69:2c:6d:be:96:
                    55:0f:c0:60:58:18:3a:1b:a9:9b:23:1b:88:0d:1b:
                    4b:7d:7e:0d:e4:99:b9:e9:f3:69:01:89:12:b5:87:
                    f8:cd:c8:75:de:8f:e1:38:8b:ae:8b:13:c8:a4:bf:
                    11:aa:b0:98:6e:07:1d:aa:d6:ee:42:c5:a2:2b:92:
                    f0:6d:03:5d:05:39:3e:f3:e5:d7:0e:55:76:20:4c:
                    27:28:d2:f3:78:64:fd:09:7d:22:57:7a:91:86:b9:
                    c7:14:63:a1:32:c1:c1:96:68:fd:eb:a6:12:90:d9:
                    90:ca:06:a2:d5:08:3c:57:21:4a:70:84:e6:de:dd:
                    bb:0a:00:34:23:c8:cf:20:76:9c:f9:a2:7c:1a:03:
                    3b:f0:74:7c:99:46:15:c9:ae:41:26:bb:02:c1:c4:
                    6b:97:bb:08:ae:e2:14:83:4e:b3:29:6a:bf:eb:71:
                    93:2c:50:81:1c:64:4e:3b:37:8c:c5:22:9f:f5:6c:
                    f3:04:8f:2b:ec:32:6c:fc:f6:59:12:f2:0f:b7:d6:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E8:FE:FA:2A:0B:28:1E:91:29:4E:B4:F7:D0:FF:8C:21:88:19:9F
            X509v3 Authority Key Identifier:
                keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:59:da:25:63:94:95:04:27:31:ec:59:b3:7e:06:90:f3:
         6f:72:cf:93:04:b3:b8:5d:45:1d:d4:0c:08:60:64:cf:40:8b:
         7c:75:6a:f2:c9:7d:ae:22:2a:b0:b8:0f:26:c8:9a:78:61:52:
         7e:2c:86:0d:d4:3d:72:40:eb:de:88:d9:01:c5:88:8e:f5:2f:
         39:2d:23:a5:ba:08:b1:8b:01:7d:a2:46:bd:f0:6d:13:5a:79:
         60:d0:1a:03:68:23:a0:a0:39:b4:b0:a9:c8:ab:56:a9:a0:5c:
         2a:bf:46:68:7e:de:e3:9d:68:ae:d2:b2:33:7d:fe:7a:5e:65:
         a0:48:77:b9:92:6e:e0:85:73:77:5f:18:65:df:50:72:c3:12:
         0c:3c:d3:c6:21:7d:cc:4b:d6:9d:15:cf:7b:57:dc:ff:12:d3:
         29:b8:5d:eb:a0:7d:76:10:3b:e9:e7:1c:13:e9:38:51:26:5c:
         42:b1:53:07:47:4e:1a:b2:11:28:b3:5a:dc:25:e5:2a:9b:ff:
         1c:57:40:ef:6b:f1:d7:08:f2:eb:fc:0f:24:54:1f:7f:0a:76:
         27:71:df:8a:bf:ea:3c:25:45:94:d6:6c:01:3d:5b:ac:4e:c3:
         d1:1d:3e:78:1b:7f:27:e9:8e:b1:0f:a6:ca:bf:b2:a7:f4:f3:
         58:bd:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----