Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
File:                     1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json)
Hash identifier:          CAmT99bNHu91jk1BV+U0/IMrD+NsKmbl35UTssMChfY=
Subject key identifier:   25:5A:A8:B1:92:4C:DF:A9:3B:97:8E:A2:4E:19:4E:3A:A4:0D:AD:10
Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69
Certificate issuer:       /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
Manifest number:          8A
Signing time:             Fri 31 Jan 2025 05:56:12 +0000
Manifest this update:     Fri 31 Jan 2025 05:56:11 +0000
Manifest next update:     Fri 07 Feb 2025 05:56:11 +0000
Files and hashes:         1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: OaKZZ6SzEYw8CWiK6ilC4KIXthWaqi5UWDieWdLDysU=)
                          2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: m4oglPoB38SyEKwPfAbQcyjAIp/BCnugPm3RoOXoqoc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69
        Validity
            Not Before: Jan 31 05:56:11 2025 GMT
            Not After : Feb  7 05:56:11 2025 GMT
        Subject: CN=679c65fc-1970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:44:e0:7e:3b:61:93:da:81:9a:47:a0:db:
                    27:27:e2:36:61:13:6c:da:c9:3e:59:a1:33:fb:df:
                    1d:8c:9a:5d:22:f1:34:ef:33:dd:f1:c0:ee:54:64:
                    aa:b2:1c:dc:f2:5c:f5:f9:19:3b:5c:d2:9c:cd:05:
                    5d:47:d9:f8:2c:99:13:47:76:ef:3a:f2:4e:3f:43:
                    40:a8:90:2a:75:90:11:a1:b7:d7:96:a1:17:ea:fc:
                    0d:9d:97:4d:6d:23:94:f6:c9:08:41:b5:dd:1e:d6:
                    6e:db:16:78:d5:f8:59:e5:e0:1e:eb:7a:ed:46:6b:
                    77:61:34:9d:be:d9:7b:b6:3e:09:20:cb:78:af:4f:
                    2a:64:85:78:92:3b:29:47:dd:f1:c9:8f:96:96:13:
                    a4:80:e5:d5:99:5f:f4:82:49:10:9a:06:f0:a1:c9:
                    78:8c:3c:93:82:a5:c1:96:c2:75:ce:7d:f8:8a:28:
                    2c:0d:3f:3b:56:e0:7a:f3:ee:d2:5c:f2:15:cb:de:
                    7b:ea:c0:71:4e:23:31:06:e4:2a:64:f4:c1:ea:57:
                    5f:cd:a9:92:29:90:ad:76:d0:95:8e:3a:3a:68:ab:
                    61:c3:f3:a3:70:6a:be:9d:dd:39:69:68:20:eb:31:
                    cd:de:f0:fa:21:9e:30:36:ef:06:5f:c8:a3:d4:70:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5A:A8:B1:92:4C:DF:A9:3B:97:8E:A2:4E:19:4E:3A:A4:0D:AD:10
            X509v3 Authority Key Identifier:
                keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:f8:c7:37:19:79:98:65:24:d6:de:b3:b3:2a:2c:37:08:
         72:74:85:39:31:1d:28:f9:15:ae:bf:87:f7:9d:c5:33:06:c8:
         01:f8:bf:d0:39:8e:ab:57:44:b1:49:01:10:de:35:20:d9:2b:
         08:6d:10:d9:46:ae:41:16:85:62:81:12:7d:51:cf:ac:f4:44:
         3a:83:5c:60:68:eb:15:9b:9f:b7:14:06:4b:c1:2f:66:e4:f0:
         9e:16:83:0a:fc:73:88:9f:1a:91:43:a0:e7:8f:63:83:35:f5:
         91:bb:5f:6e:93:8e:3b:ed:29:b4:20:e2:d1:98:07:b0:b4:ee:
         15:4e:56:10:d1:58:5b:b9:9f:08:d2:3d:7e:0d:de:67:dc:f1:
         cc:bf:ec:d7:e8:70:db:ce:63:4d:9c:9e:40:91:37:b3:67:bd:
         0c:a6:f9:10:ba:17:c1:f2:1d:4a:c8:32:d7:0f:e8:ed:12:ad:
         b0:53:69:57:9d:ff:a7:2c:9d:af:b9:48:9e:60:ae:b6:02:2b:
         9e:34:c7:21:06:f0:8e:4c:81:ac:85:33:3c:af:d2:5a:48:3c:
         f6:4e:53:49:a4:ff:ba:1c:1f:61:80:f3:04:75:93:e0:2d:39:
         be:43:4e:4d:9c:da:9f:32:e2:99:1c:11:d9:c4:97:75:1a:57:
         7d:40:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----