Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File:                     TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier:          bWJNThnOYEB14NTEj0M70u9b1Rlrm+DulCLA21WM8Kc=
Subject key identifier:   70:68:31:60:D0:66:27:5B:1D:52:2D:7D:A8:66:62:A2:87:5D:49:0E
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number:          8E
Signing time:             Fri 31 Jan 2025 05:38:02 +0000
Manifest this update:     Fri 31 Jan 2025 05:38:01 +0000
Manifest next update:     Fri 07 Feb 2025 05:38:01 +0000
Files and hashes:         1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: AcmdzQvplqd+T9olhF+YhKkCYeMIH0B6g7oMpQBRBb0=)
                          2: EB0C7BBC293D11EFB7D44673C4F9AE02.roa (hash: IKl6nPyJLn/aAgur/HiMQsyDMgBlGZzK35JGFF29/M4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Jan 31 05:38:01 2025 GMT
            Not After : Feb  7 05:38:01 2025 GMT
        Subject: CN=679c61b9-ccf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5b:e3:43:b9:b0:a9:7b:97:1b:f7:45:81:c0:
                    ac:a7:33:53:29:f9:55:d0:0e:91:06:fb:69:3a:a6:
                    c8:6b:54:4d:a5:81:50:87:e0:4f:a8:b2:ae:88:2c:
                    8d:54:2d:6e:92:75:9f:bf:ef:53:54:b8:5d:ed:4e:
                    8e:b6:2c:f4:9b:04:58:2e:de:a0:bd:c8:63:ab:45:
                    00:7d:94:57:b0:34:ab:2d:13:6c:e9:f7:75:4d:e0:
                    b1:cc:ec:68:a4:2f:81:7c:74:bb:73:33:fc:90:3b:
                    f0:e0:d6:0e:43:25:cb:6d:42:19:78:1b:af:54:fd:
                    23:c3:ea:35:49:77:1c:80:a9:40:4f:5a:02:f6:98:
                    64:df:a9:ee:7d:44:0f:33:30:cc:94:73:bd:30:2c:
                    12:4d:ce:18:fb:fe:5c:71:34:bc:00:fe:eb:bb:5a:
                    e4:7a:07:2a:5b:3d:e8:32:75:93:a1:66:cb:50:07:
                    0e:e0:b6:fb:fe:b5:87:c8:2a:4c:bb:bd:0c:b1:a8:
                    18:7a:d5:43:79:b2:52:14:67:fe:e0:b4:a6:3c:b0:
                    0e:05:ea:dd:13:75:c2:53:50:81:1e:41:4f:61:d8:
                    57:2d:21:f3:c0:e8:c4:62:c8:d0:fb:09:1a:79:67:
                    d4:6d:cb:f8:a9:eb:49:32:aa:91:c3:4e:f8:b0:2d:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:68:31:60:D0:66:27:5B:1D:52:2D:7D:A8:66:62:A2:87:5D:49:0E
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:22:4d:24:48:db:a1:71:f1:a1:31:52:25:35:b5:70:c6:f6:
         7f:f9:d6:ae:46:87:47:45:21:9c:98:5d:d3:18:a1:c9:3d:94:
         db:5e:1b:4c:c8:68:7f:34:2d:11:6d:31:c0:64:8e:ff:24:89:
         7c:17:70:5f:17:b6:19:f8:4e:fc:c5:29:ba:a6:a6:e1:5d:b6:
         d3:d0:cf:4b:58:5e:d2:fb:b5:f3:f0:15:c1:f3:cb:ca:79:19:
         80:1f:67:ee:fe:23:6f:55:3f:4f:f3:5c:c4:c0:b1:d0:7d:45:
         ac:9a:a8:1b:35:13:97:71:20:35:ec:0f:b5:53:6c:8f:aa:8b:
         ef:38:1e:05:cb:03:4d:a2:5f:98:92:a5:95:a1:a0:20:87:8e:
         a2:b8:c1:ea:ed:bf:f5:95:97:5e:a0:a6:98:8b:a4:55:da:1c:
         1d:ae:64:aa:9f:7d:ed:35:45:13:00:2e:29:99:1a:43:36:cc:
         6e:d2:20:e4:31:28:1e:8f:45:98:a4:81:eb:b5:1d:01:84:31:
         ab:39:e4:4e:fa:57:ae:c8:59:e6:45:af:67:fd:66:8d:0a:8c:
         32:e6:d7:2d:32:b1:24:4a:a9:6c:50:37:0b:66:8e:cb:2a:c2:
         c6:a2:8e:09:39:42:0d:39:78:bf:fe:92:5c:62:27:0c:00:b1:
         3e:81:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----