Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File:                     N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier:          kIFSZnut1zAQIfpd9Bx4KFgerTAGzHDKIeYEAqCxiig=
Subject key identifier:   47:E9:03:73:AF:7E:1C:D7:79:FA:2A:05:12:F5:1E:AE:8A:FF:72:A8
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       0508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number:          04F6
Signing time:             Thu 30 Jan 2025 23:46:07 +0000
Manifest this update:     Thu 30 Jan 2025 23:46:07 +0000
Manifest next update:     Thu 06 Feb 2025 23:46:06 +0000
Files and hashes:         1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: R5NVQhrdl8fVTN0hp61SSwiznx5exuRw9BBd1ZlM64I=)
                          2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: zKaqQd3iJgLKWX9/7WECXgXE4p9Cwusvs6IFZGknjWw=)
                          3: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: 5Bhb6kl3vdn8fYxxshtaRagRNNeIbPt2YFCw1ehb0QI=)
                          4: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: mIo6Fk+1HKcj+3gplmKqRStq1177bdJCp9mw6ZHAc2E=)
                          5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: d0OGg+KUHm/8K/0LGDoFYn0QqVu4VxbAlNDpkl0DNzM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: Jan 30 23:46:07 2025 GMT
            Not After : Feb  6 23:46:06 2025 GMT
        Subject: CN=679c0f3f-7b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:bc:ed:0d:2f:bc:29:df:09:e4:6a:3d:d9:
                    10:20:84:ea:45:24:21:b0:28:8e:a7:87:b9:47:f1:
                    82:be:7a:6a:f5:94:6b:46:e9:4b:61:71:4b:b0:4f:
                    db:6d:bf:96:bf:60:67:d1:26:dc:0a:47:ed:7c:e4:
                    bc:d9:62:7d:09:d8:7e:b2:74:69:4f:48:84:42:29:
                    aa:26:a6:99:94:f0:c3:52:a2:e5:e2:27:8b:41:e7:
                    2f:2c:2d:a4:13:6f:1e:e2:ed:3c:d4:ae:cb:29:3f:
                    85:3f:81:7d:bb:30:4a:8c:f9:4c:a9:6b:5a:9f:91:
                    89:d1:52:24:d6:40:48:a3:9a:06:9c:f8:99:b4:a8:
                    fe:33:2f:78:d7:8c:ef:4d:9c:6c:e2:fc:8c:b3:80:
                    62:7c:19:27:52:aa:8d:f0:45:35:fe:8d:b8:a6:64:
                    74:3e:ab:33:cb:7c:35:84:f4:c5:00:c5:44:c2:36:
                    f3:2a:3e:0d:7d:c2:24:af:98:09:7e:a9:98:6a:c6:
                    7f:ea:e6:c2:ea:9a:e6:5a:d3:db:8c:10:33:5f:11:
                    ed:74:8f:b4:79:f5:32:f9:61:49:fc:4f:5c:e3:46:
                    ef:84:33:78:95:51:ef:00:ce:a4:91:38:6e:4a:01:
                    71:af:a7:84:4b:f4:f6:6d:d3:2e:3e:5d:de:73:96:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E9:03:73:AF:7E:1C:D7:79:FA:2A:05:12:F5:1E:AE:8A:FF:72:A8
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:99:43:0e:97:fd:6c:57:36:3d:f3:df:c3:81:aa:0f:ae:80:
         13:23:12:52:01:15:ab:6e:2d:cd:2f:3b:5c:a2:c8:82:a0:fa:
         b7:03:fd:5f:64:35:99:1a:44:c4:31:dd:34:bc:a1:b2:65:d7:
         4d:27:33:36:a7:17:54:e0:73:48:5a:5c:d0:d5:d2:83:65:f7:
         26:c3:61:29:f6:15:f6:bc:ef:7b:d5:4b:c7:21:01:3d:41:b9:
         fd:ca:e3:47:33:a5:0a:0f:1e:eb:74:fb:48:e5:2c:28:d9:09:
         5b:c0:1e:eb:26:08:e4:25:85:db:4f:af:e6:26:17:43:fd:78:
         91:12:2d:2f:1e:6f:ec:83:b4:d1:3a:7e:ee:87:67:e4:f2:17:
         25:57:f9:d8:c9:36:4d:22:23:f0:af:9c:1e:b2:48:9a:2d:86:
         e3:a2:93:d6:07:ab:a0:53:a3:a9:d9:ed:8d:96:8c:54:84:f2:
         74:46:72:24:06:cc:e8:83:2f:d6:39:22:8b:d5:24:7a:bb:41:
         a3:9d:d7:2e:ec:49:26:46:55:c5:d9:9c:20:03:79:74:ee:21:
         e2:b8:e8:32:9d:b0:4c:ac:63:53:fc:f8:1b:e2:c7:58:15:05:
         c0:7c:ae:6f:32:22:ce:4e:68:59:f6:64:7d:12:9c:d9:55:fb:
         b8:0a:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----