Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
File:                     EOFLjOUpYxKozRGO6q9tt-Rup9s.mft (raw, json)
Hash identifier:          nBGci5f8WHzYy5h96S9BFBzY41v+PkbS9Ea2AXmoIpw=
Subject key identifier:   CE:49:AF:8A:A6:5F:20:1D:4A:50:BD:7C:59:C3:62:C5:73:70:C0:3C
Authority key identifier: 10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB
Certificate issuer:       /CN=A913914F/serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB
Certificate serial:       0286
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
Manifest number:          027F
Signing time:             Fri 31 Jan 2025 01:43:01 +0000
Manifest this update:     Fri 31 Jan 2025 01:43:00 +0000
Manifest next update:     Fri 07 Feb 2025 01:43:00 +0000
Files and hashes:         1: EOFLjOUpYxKozRGO6q9tt-Rup9s.crl (hash: rM8JeevRFPrV+PeeAFGcaCKcKkCXBMMyyQc2IKGWzSo=)
                          2: 8D57BBAAC0B811EEA3B71039C4F9AE02.roa (hash: WiH1FUNL9JStyDVza2qR9pAjLEVBVipRErQnDykrPNk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913914F/serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB
        Validity
            Not Before: Jan 31 01:43:00 2025 GMT
            Not After : Feb  7 01:43:00 2025 GMT
        Subject: CN=679c2aa5-abab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:c6:22:e8:8f:79:1e:63:9e:83:e5:fa:3f:
                    d5:f8:e5:e1:8a:84:fb:72:9e:3d:6e:81:f7:e5:87:
                    bf:a6:68:f2:02:ca:65:92:89:72:36:96:9b:68:f3:
                    7b:30:3d:4f:e0:24:0a:cd:e5:64:04:2b:30:f8:7d:
                    84:aa:f8:4b:07:17:76:f5:fd:be:13:f5:d7:44:15:
                    a0:bb:19:b1:b0:18:96:4c:70:93:62:30:90:8b:9c:
                    cd:de:0e:17:21:c8:9d:fb:a5:39:41:6f:fe:ec:31:
                    d1:55:3d:6c:a4:fb:01:f7:7f:b0:8d:92:2b:65:5a:
                    9b:3d:86:18:32:98:65:83:21:7e:6a:c3:8d:d2:56:
                    5f:39:b5:21:56:5a:6f:84:3f:a2:d1:16:4c:72:bd:
                    71:5a:9c:a7:de:3d:20:2f:3d:20:a5:6e:3d:74:31:
                    fe:a0:7e:c4:a7:36:fb:25:c0:8d:16:00:c4:f5:32:
                    ac:5d:75:55:8b:e3:03:cd:0f:4d:bb:b4:38:27:05:
                    eb:32:32:f1:d3:61:12:49:98:b6:84:03:2c:96:57:
                    f8:4e:02:a5:4e:22:ca:09:08:39:0d:19:0b:28:0c:
                    a3:6f:a1:14:e4:6e:3d:94:21:53:f5:e0:2a:7e:fc:
                    50:7d:11:d9:48:e7:de:5e:f1:4d:99:82:0b:5b:74:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:49:AF:8A:A6:5F:20:1D:4A:50:BD:7C:59:C3:62:C5:73:70:C0:3C
            X509v3 Authority Key Identifier:
                keyid:10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:b3:39:5c:fc:89:a2:9a:ee:8e:29:2f:cd:94:39:88:32:
         0e:d5:17:25:b5:97:b5:e9:b7:d8:b6:f7:f5:0e:da:aa:68:8e:
         c2:73:e9:14:2f:c0:59:5e:04:fd:17:df:a8:da:c9:ee:93:1d:
         01:e1:1f:0c:b5:65:cf:09:95:e6:01:64:27:40:8c:b6:9c:02:
         05:0b:35:68:79:a5:62:72:40:7e:4b:d8:ff:f0:e8:e7:57:f5:
         d9:eb:00:c2:c4:df:b1:0f:67:46:5f:96:c1:33:63:b6:86:d6:
         f2:ac:bd:cd:14:13:db:cd:bd:e2:ec:a9:02:48:80:9a:ae:c3:
         2f:2d:93:77:bc:fe:58:af:df:61:ba:29:93:04:d1:e6:45:97:
         37:08:9e:a3:22:79:98:e0:46:36:3e:23:68:c1:6a:80:cf:1a:
         56:5b:7d:e6:fe:84:8d:4f:7e:da:e5:4d:9f:00:a5:e9:a0:fc:
         77:c7:73:c4:1f:15:a6:74:d5:20:22:35:dc:b4:dc:de:ab:83:
         2b:30:e3:65:9c:30:4a:52:96:e5:b5:44:b6:ca:56:49:1a:19:
         26:27:96:23:fa:ec:02:ab:4d:8f:15:30:6f:2a:24:1d:1a:56:
         1c:d4:62:d7:92:4d:c4:87:79:83:7d:2f:15:e4:7c:94:5f:de:
         7d:3f:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----