Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File:                     yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier:          aNWi9UWmes9yeJeZPusutZEicGXYwiUoHbicq21EjMc=
Subject key identifier:   65:31:8E:2E:C3:EB:4B:38:19:A6:91:15:17:B0:AD:5A:F9:A3:F6:1F
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer:       /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial:       0F3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number:          0F27
Signing time:             Fri 31 Jan 2025 17:35:29 +0000
Manifest this update:     Fri 31 Jan 2025 17:35:29 +0000
Manifest next update:     Fri 07 Feb 2025 17:35:29 +0000
Files and hashes:         1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: +RX3RekDHcTyKABPhXgVzwWujD6oEzbGTKp1wEp76j8=)
                          2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: PcZWjC6UVwgJAg7JfBerYqiOjHVIHel2AtVeK/QvypU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3899 (0xf3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
        Validity
            Not Before: Jan 31 17:35:29 2025 GMT
            Not After : Feb  7 17:35:29 2025 GMT
        Subject: CN=679d09e1-b168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:07:b1:6e:9f:a8:69:3f:51:a3:8c:21:fc:
                    b4:06:fb:22:60:d3:46:9f:72:23:f4:45:9d:1f:cb:
                    25:50:23:dd:d5:fb:04:92:0b:aa:a8:9d:5d:26:06:
                    33:b8:d1:fd:e1:2e:df:33:08:80:73:6b:65:d8:5b:
                    96:73:cc:29:f5:9c:6b:c0:0b:2b:60:87:2f:f7:8f:
                    62:10:1f:b2:71:e2:47:94:8f:a6:94:2f:91:43:b7:
                    cd:99:cc:65:4e:68:2f:c0:41:aa:0b:19:6c:27:63:
                    a3:99:e5:90:c2:2b:f2:39:62:b1:97:ea:56:14:a4:
                    b2:4f:0a:93:f7:06:b0:8d:95:1e:86:10:3e:63:64:
                    3c:db:20:c5:bb:07:63:6f:1c:7a:ec:6d:da:18:39:
                    4e:a5:26:c8:13:1b:39:f6:90:15:5c:c0:e0:38:63:
                    70:5d:4e:bd:07:19:cd:9b:d7:61:fd:56:c9:f6:2a:
                    18:af:96:eb:69:e6:99:9d:ed:ac:3e:a3:1a:a6:b7:
                    8e:8d:ec:cc:25:66:59:c0:92:cd:83:c9:06:4d:0c:
                    60:5c:dc:65:8c:a6:63:b0:31:77:88:b4:95:77:05:
                    d6:06:19:35:10:49:e3:05:63:c7:11:63:84:bb:5c:
                    72:f7:a7:c8:7d:a7:35:88:76:5f:8b:c3:33:d3:b2:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:31:8E:2E:C3:EB:4B:38:19:A6:91:15:17:B0:AD:5A:F9:A3:F6:1F
            X509v3 Authority Key Identifier:
                keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:46:4c:54:8b:eb:12:c8:31:ea:df:d3:01:d7:30:80:47:31:
         fe:e5:27:ce:1c:0d:f7:37:38:ec:b0:c3:d3:a1:f1:ed:e2:e6:
         90:c5:d9:ca:d5:66:ac:07:6b:44:0e:c6:37:0a:24:9a:91:33:
         95:ec:dd:7b:06:a3:f2:e9:cf:2f:27:c3:6f:bc:70:f6:24:b4:
         1d:2b:a0:25:fb:92:e6:ad:b5:ce:97:0f:10:e9:0b:ef:fc:d5:
         00:d4:81:2e:d7:5b:e7:d5:61:04:da:2c:07:0b:d1:d2:2c:68:
         c0:22:24:ae:ac:c2:fa:6f:8b:bb:4c:e6:d2:67:34:95:08:54:
         92:72:9b:66:ad:58:0e:21:0e:b4:f1:26:03:61:da:42:09:20:
         d1:5a:65:41:26:87:46:74:8e:59:e9:e2:2c:76:cf:3b:8a:8b:
         25:f8:93:f2:d7:3e:42:b6:e9:1b:e8:12:fa:7b:2b:6d:24:9d:
         af:a9:06:69:08:e2:15:db:46:fa:60:83:87:99:14:11:5b:ee:
         fb:6a:14:fb:8e:ba:29:7c:35:7a:3f:ed:e7:0a:b8:ae:5b:5a:
         22:37:9d:33:b6:2a:80:2c:76:1c:15:ab:8d:8d:39:98:30:6a:
         13:c6:7a:49:99:5d:7f:91:27:3c:aa:8b:fb:4d:8c:ca:dc:34:
         6e:22:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----