Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
File:                     CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json)
Hash identifier:          DANBBJXFb/TJtOyKshnEDM2lgFDaRTmYREVKqwDdz80=
Subject key identifier:   40:8E:E8:A2:45:39:9F:F5:74:E2:B5:E9:9E:F6:18:A9:A1:6A:AD:77
Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
Certificate issuer:       /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
Manifest number:          D9
Signing time:             Fri 31 Jan 2025 04:43:30 +0000
Manifest this update:     Fri 31 Jan 2025 04:43:29 +0000
Manifest next update:     Fri 07 Feb 2025 04:43:29 +0000
Files and hashes:         1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: X0z1N+a4/fANMRFzhB+AbTw7QSZPelQkrg757QldTVQ=)
                          2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: JewwegL8zF4TM37jWjT/0vufl48ueupuuJhXef1EC1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
        Validity
            Not Before: Jan 31 04:43:29 2025 GMT
            Not After : Feb  7 04:43:29 2025 GMT
        Subject: CN=679c54f1-fb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:08:b0:38:39:a6:96:fd:45:1e:9e:c0:26:
                    ee:b9:b1:f6:9b:04:2d:42:39:b6:68:27:50:37:ee:
                    62:7b:a8:71:b4:4d:56:82:c4:ee:85:42:73:be:3e:
                    f0:03:b9:aa:5d:89:cb:f7:64:89:f6:f3:db:ff:e4:
                    21:d6:c8:83:d1:68:92:bd:6a:ea:b8:20:b0:45:ff:
                    1e:70:63:ee:26:99:70:54:4d:0d:cb:2c:73:34:2c:
                    d4:6e:21:bf:3e:16:c2:ec:ea:5c:dc:94:22:c4:bf:
                    a4:ae:03:98:a9:7e:6b:c3:2a:44:7b:1d:a5:73:0a:
                    59:d6:bc:78:14:15:ef:f5:52:b0:13:af:93:23:ab:
                    e5:69:2d:63:98:ef:ec:d2:00:bb:0c:b8:f0:6d:5e:
                    b4:05:fc:39:a3:82:a1:21:fc:79:31:7f:7d:c9:96:
                    69:67:44:3d:a1:6e:4e:fb:7c:22:b8:97:28:78:39:
                    19:37:c1:9f:32:6e:8e:97:07:04:6e:93:a9:ee:88:
                    48:fc:79:6e:67:9b:4a:b7:6a:ee:de:b9:99:42:ef:
                    16:6e:72:f5:8d:ea:8c:9e:c4:c3:2a:d6:d2:15:8a:
                    fb:14:a0:30:f4:c5:fe:98:c9:d5:39:e3:2a:38:1f:
                    88:61:3d:d9:28:dc:b2:69:00:62:b4:bc:b6:38:01:
                    24:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8E:E8:A2:45:39:9F:F5:74:E2:B5:E9:9E:F6:18:A9:A1:6A:AD:77
            X509v3 Authority Key Identifier:
                keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:25:69:1c:3f:ab:7d:2a:67:21:d2:7e:74:20:70:58:c5:10:
         d5:09:62:94:d4:3b:a3:9e:71:a9:db:7c:c1:9d:1b:cd:3c:5e:
         fa:d2:87:08:85:de:a9:7e:98:5f:27:59:c3:6f:5e:8b:70:5f:
         a6:5a:b6:ba:b4:e4:d2:76:98:6b:57:c5:3a:1c:39:81:ad:b9:
         e8:12:32:da:70:49:75:70:6b:a4:73:63:57:4c:b6:f1:2a:1a:
         ba:2f:7c:b3:63:90:7a:38:8f:94:eb:b1:b2:e2:90:ac:bd:b4:
         3d:3d:7b:c7:c6:87:bd:ec:ad:a8:8b:27:f1:83:1b:90:04:39:
         c3:29:70:24:0c:6a:d5:7f:fc:9a:69:88:d0:1d:a5:eb:ce:8d:
         06:b5:35:52:6c:17:1a:f7:6b:b6:49:f3:d3:7a:eb:06:a0:ea:
         97:57:8d:8e:f4:98:af:48:0f:39:ea:18:b6:fa:74:95:d9:55:
         22:b5:ed:49:13:8f:d0:50:d5:16:6c:fb:0a:6b:b0:6c:0a:b5:
         51:d9:76:f5:58:bb:4b:c2:04:fa:c9:33:6d:63:2c:03:a5:96:
         69:a2:04:c7:47:a4:f1:93:7d:8b:7b:b4:b2:f8:3b:44:c2:02:
         39:89:a7:2f:a4:1a:47:ec:df:10:9d:9b:9e:07:69:47:1f:db:
         96:0e:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----