Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
File:                     8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json)
Hash identifier:          3gJDtenpsfYq8U24cBF74ctS6TB3Vw3KYyS0PIoWrDY=
Subject key identifier:   81:5E:6D:2D:E0:88:C1:DF:CF:6E:50:C0:35:8C:50:0A:21:77:4D:E2
Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
Certificate issuer:       /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
Certificate serial:       0F30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
Manifest number:          0F13
Signing time:             Fri 31 Jan 2025 17:37:42 +0000
Manifest this update:     Fri 31 Jan 2025 17:37:41 +0000
Manifest next update:     Fri 07 Feb 2025 17:37:41 +0000
Files and hashes:         1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: hZpu/BWjDsHqknmNpei8Gxrbee6CxyxYRtGa8xFvsu8=)
                          2: 8EB1A5A6B60D11EF851AB93EC4F9AE02.roa (hash: z+iYrp3Fl6H/S1Iz2QAKw7YAE0hIiyy9pKAJWHruEzw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3888 (0xf30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
        Validity
            Not Before: Jan 31 17:37:41 2025 GMT
            Not After : Feb  7 17:37:41 2025 GMT
        Subject: CN=679d0a66-f8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:b7:35:8c:1d:bd:6e:99:1d:b2:e0:5a:f0:
                    af:d1:91:02:f1:79:c7:70:d5:f8:77:ef:5c:01:6b:
                    75:05:30:14:43:c0:bc:4a:05:86:ee:54:a4:85:11:
                    70:a9:a9:1e:a0:aa:4c:01:f5:c6:26:33:05:49:82:
                    4c:60:54:70:1f:0f:1c:e0:b4:97:69:fc:6d:47:d9:
                    30:36:29:60:36:c9:b2:ff:0a:d9:ca:a6:39:0c:01:
                    29:ea:0b:d8:a0:ae:cc:e6:11:db:fd:44:25:df:48:
                    1b:f3:65:76:e3:37:89:1a:6a:b0:c0:07:b3:5b:5d:
                    81:af:b3:d9:a3:07:19:d6:9a:5b:ca:8a:81:93:ea:
                    19:ce:5a:dd:cf:a8:5f:30:06:1e:6a:1e:a3:24:c4:
                    94:fb:ba:a8:c4:2d:dc:d3:6b:f8:b2:16:5c:db:75:
                    a8:91:5a:7e:8b:91:b4:b3:da:4b:e3:d5:ed:f5:f4:
                    5d:ee:51:c9:72:ee:a8:16:40:57:f8:87:97:36:cb:
                    70:f3:9f:c1:02:21:0d:cd:30:c2:31:92:99:97:1d:
                    5b:e3:66:86:f2:be:bb:87:d0:84:d5:50:b1:0e:34:
                    16:34:f2:e4:3e:20:84:2c:29:a5:68:c0:9d:d7:ee:
                    0a:8b:82:79:69:62:03:45:41:93:44:a4:bd:1b:a0:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:6D:2D:E0:88:C1:DF:CF:6E:50:C0:35:8C:50:0A:21:77:4D:E2
            X509v3 Authority Key Identifier:
                keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:57:aa:f6:cc:e1:c0:bb:b9:ce:fb:2d:cf:c0:8e:6d:ab:89:
         a8:a5:40:67:ab:b5:e6:52:cb:4a:16:b1:55:b0:8f:13:ef:75:
         0b:8d:53:c0:2f:e6:00:bd:4e:38:38:d2:7e:21:aa:88:f9:a7:
         77:c7:a3:94:ad:2f:b0:af:f5:2e:83:fc:6c:b0:75:5e:bb:f5:
         75:3d:01:91:43:c5:fd:ab:b2:95:db:ca:30:cb:7e:e0:a3:12:
         c3:a9:1c:80:ae:95:3a:8a:b1:1f:e9:46:18:38:a1:68:e0:48:
         cf:1c:aa:fb:62:2d:99:d5:4d:40:a6:13:f5:4d:71:76:13:66:
         b0:91:cc:52:55:9c:23:17:5c:ce:2a:f0:56:89:5d:95:c5:9e:
         a2:b3:24:8f:73:fb:5c:61:11:86:dc:00:b1:69:0f:d2:86:b1:
         1b:b8:e8:b0:85:8a:9d:f2:7b:8b:be:26:52:7d:86:d4:a2:08:
         ae:c1:14:9d:68:06:fc:f8:5c:69:17:e9:e2:e3:17:ce:cf:6e:
         55:9b:7b:42:37:ef:44:c4:9d:99:3a:c8:40:b1:73:02:77:dc:
         74:c1:9f:91:b7:22:8a:ad:e1:58:2a:9d:2b:23:0d:81:4d:eb:
         25:ce:d5:bd:54:59:0f:50:2d:b7:ea:70:b6:31:55:3e:fd:35:
         59:a1:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----