Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
File:                     fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json)
Hash identifier:          IEr8xIutVORlPdjH1RpJBwPukWjItdJBSRSe/0tAFtM=
Subject key identifier:   1B:95:1B:CC:06:67:95:4E:F2:B8:A7:68:84:77:8E:F1:E8:E9:E0:99
Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8
Certificate issuer:       /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
Certificate serial:       1089
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
Manifest number:          1080
Signing time:             Fri 31 Jan 2025 17:20:22 +0000
Manifest this update:     Fri 31 Jan 2025 17:20:21 +0000
Manifest next update:     Fri 07 Feb 2025 17:20:21 +0000
Files and hashes:         1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: Abnp1LjxHXzT7qp7YUsYH1/WoiJMhUaHOxRkjiunlbM=)
                          2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: mvO7yHkevsKcC0ytNQ/yXnGhsAYGTtTZqPPj/+jmmtg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4233 (0x1089)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
        Validity
            Not Before: Jan 31 17:20:21 2025 GMT
            Not After : Feb  7 17:20:21 2025 GMT
        Subject: CN=679d0655-2a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a3:9b:ac:97:47:36:dc:d0:83:2f:09:c4:1d:
                    3d:a1:1c:02:49:df:07:21:2e:d5:0a:76:d4:c1:61:
                    45:36:fb:c1:40:c1:c9:6e:19:6c:d7:62:47:d2:f6:
                    d1:17:e2:1a:ea:f8:e6:47:95:0b:57:14:1f:9b:0e:
                    d4:60:18:f1:de:0a:35:17:6e:79:88:95:f2:c3:b7:
                    d2:05:53:a2:f8:b2:12:2a:32:d7:27:3b:4f:59:34:
                    71:0f:6a:95:7a:43:1a:d5:1b:d7:de:17:89:e5:27:
                    39:55:56:a2:22:d7:5c:54:f3:25:92:4e:73:4c:d0:
                    9a:25:2e:46:a6:31:ef:19:a7:a9:be:2e:c9:80:92:
                    d0:7c:da:d1:da:7a:32:34:4a:dd:74:8d:d0:a4:20:
                    02:95:91:bc:19:e1:a0:e8:d8:b6:2a:f4:61:1e:52:
                    73:68:68:b3:c5:70:c5:ae:e9:ad:c2:a9:2d:e1:13:
                    e1:16:04:8f:d7:ad:30:08:0c:29:b2:a3:e1:ce:23:
                    75:36:ca:30:d1:a7:c9:13:0e:42:05:02:3b:04:39:
                    d8:58:e8:ff:ee:c6:3f:3b:3a:ce:17:36:2a:28:79:
                    78:a9:ab:53:d5:d4:b7:a9:8c:b8:c4:1c:7d:97:fa:
                    f6:42:18:55:fb:37:d8:d1:cf:b0:61:97:bf:f7:b7:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:95:1B:CC:06:67:95:4E:F2:B8:A7:68:84:77:8E:F1:E8:E9:E0:99
            X509v3 Authority Key Identifier:
                keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:fd:ba:fd:83:08:24:48:57:a0:82:26:67:53:68:e4:68:05:
         05:ff:d3:e7:a1:d5:2c:9b:1c:eb:93:ba:70:1d:b0:8b:4f:67:
         6c:c5:fa:a4:cc:cf:2f:ec:93:8b:f6:5f:59:84:b1:5d:d2:a8:
         26:fa:98:2a:3e:38:a1:4b:45:b6:d2:e8:54:90:2b:90:9a:35:
         9b:b0:b0:ca:5d:be:73:f5:70:05:12:fb:5c:a5:17:47:cc:b2:
         dc:e7:da:06:a2:a9:b4:88:41:3b:00:a4:5c:d5:a4:9f:4f:6f:
         f8:cc:f9:96:9d:cf:48:a8:7c:61:9c:11:f4:80:54:89:34:8e:
         84:9b:78:71:44:20:6b:41:b2:7a:c4:cb:8b:f9:16:d1:87:5e:
         f3:dc:e2:8a:0a:b2:4e:53:b6:e0:c2:86:57:c6:20:4d:7c:77:
         cb:5c:2e:8a:a8:79:0e:68:dc:1c:5b:da:1d:ec:fb:a5:bd:dd:
         f5:77:9d:13:64:a9:db:d2:59:04:6b:1f:6b:ae:40:90:e2:49:
         76:03:af:d5:fb:46:97:8d:35:05:5c:2b:2f:48:47:43:e7:db:
         94:a7:cc:fb:f0:b4:51:da:25:56:14:33:dd:bd:1e:0e:f8:ba:
         0f:63:38:72:b0:f9:c6:62:35:d1:e7:b4:7f:a0:3b:a8:6b:5e:
         4a:ab:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----