Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
File:                     TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json)
Hash identifier:          aAndYOVpyINvsSX/xgUmzYEfbDY41AgKn4MYAeW0x1c=
Subject key identifier:   48:79:73:0A:62:AF:BD:3D:65:CF:37:1C:77:BF:D8:A3:BA:57:24:A2
Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46
Certificate issuer:       /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
Manifest number:          7B
Signing time:             Fri 31 Jan 2025 05:45:24 +0000
Manifest this update:     Fri 31 Jan 2025 05:45:24 +0000
Manifest next update:     Fri 07 Feb 2025 05:45:24 +0000
Files and hashes:         1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: n184lSstkLCdcmi9RLBkhQvtPErtSMmSLwz85EDDR2U=)
                          2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: +BYuc5eNV9QVdOv8+l4kTKaLYQnJEvaUX1OVi3Uj8pM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
        Validity
            Not Before: Jan 31 05:45:24 2025 GMT
            Not After : Feb  7 05:45:24 2025 GMT
        Subject: CN=679c6374-0e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:e6:4b:b4:49:0d:bf:59:11:34:4c:89:f3:
                    af:ea:51:c0:38:4f:3e:23:1e:94:69:bb:64:f0:b7:
                    3a:03:04:f8:03:20:56:84:0b:85:83:62:72:5d:2b:
                    1b:b0:79:38:da:d0:4a:3a:40:fb:1e:99:c4:25:13:
                    6f:f2:e3:57:30:36:b1:2a:a7:62:cb:e8:6b:61:b4:
                    5d:50:02:c3:e9:2b:fa:29:ac:1d:f3:49:d4:db:d8:
                    02:c2:2e:03:36:e8:96:9c:5a:e7:bc:78:79:4e:4f:
                    7c:ba:94:65:e3:65:f9:43:ba:84:4c:5e:26:e2:ff:
                    40:20:fa:ba:66:85:a3:fa:19:ce:7e:ae:05:b2:27:
                    18:b9:78:c8:b3:82:52:1b:98:44:62:7c:29:a7:a1:
                    fa:3f:67:d4:55:fd:08:cd:47:b5:d8:18:28:f0:6e:
                    42:88:c2:c2:4e:87:53:2f:18:61:61:19:c6:de:4c:
                    f6:37:4f:93:6b:d1:81:e0:00:0a:37:61:ac:ef:0f:
                    d2:e1:5a:03:e2:38:b4:a1:fe:d1:15:05:c4:c8:61:
                    d2:6c:5a:98:85:5c:1a:f3:1c:1b:e0:dd:9c:0a:b4:
                    97:21:8a:86:a9:9b:ba:f3:65:f3:ab:08:2d:73:d4:
                    d6:96:ec:d5:ae:0c:50:5f:df:fe:03:bc:2a:17:4b:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:73:0A:62:AF:BD:3D:65:CF:37:1C:77:BF:D8:A3:BA:57:24:A2
            X509v3 Authority Key Identifier:
                keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8d:17:0b:bb:36:c1:c6:96:9b:33:01:5b:88:60:76:08:07:
         3f:19:04:51:70:99:82:3f:73:d1:3f:3d:b1:39:25:06:96:38:
         b1:c0:f5:6c:f8:08:5f:00:b4:53:50:59:85:db:f9:90:87:84:
         44:43:dc:cb:67:2d:04:b2:cf:62:c9:0b:79:53:b6:71:1a:9c:
         21:4b:d6:63:5e:2f:4c:54:d5:05:2f:dc:df:1d:9e:af:20:dc:
         a6:00:ee:22:7d:06:d5:29:e3:b2:3a:3d:2c:e2:87:ad:af:a0:
         8b:5a:bf:99:07:cf:28:de:4b:c0:69:5f:57:77:a8:48:92:13:
         4f:57:da:29:9f:61:b9:68:9f:9e:a9:3c:60:d1:f4:75:4e:52:
         7d:69:5a:0b:f5:9c:d3:04:ef:82:ea:d5:47:c6:7e:be:e1:8e:
         68:a9:36:54:b8:78:5f:ce:5a:de:2e:12:f4:46:8a:b1:27:ea:
         4a:c6:eb:a7:a3:bd:c8:fa:8d:99:01:84:26:7c:03:68:7d:57:
         34:fa:e9:ec:ae:b1:c3:e3:9a:d7:15:ab:10:2f:07:f7:c2:06:
         f3:f7:33:db:76:c0:9c:9d:3f:6f:9b:5b:11:f5:e4:94:d1:02:
         32:95:cf:fd:f4:14:9f:46:ea:7d:dd:29:04:f3:86:6c:00:e9:
         26:df:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----