Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File:                     4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier:          HJD1wt+e5n3Dvx7i2GZ2WyAqRCiwnjH7KATND4v5Mag=
Subject key identifier:   03:FF:AC:27:E6:BB:2D:0B:FF:53:EE:D8:C2:DF:8F:F4:1A:00:74:F8
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer:       /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial:       0715
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number:          070C
Signing time:             Thu 30 Jan 2025 21:48:02 +0000
Manifest this update:     Thu 30 Jan 2025 21:48:01 +0000
Manifest next update:     Thu 06 Feb 2025 21:48:01 +0000
Files and hashes:         1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: OCVwhoi85Sbq3TF+tgOhkyTM8hzba/YMknqryGkTacI=)
                          2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: By6Dq5HHVlEkvf0nTtSM0kJMMOYfz+8LI2/AK8Ixb68=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813 (0x715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
        Validity
            Not Before: Jan 30 21:48:01 2025 GMT
            Not After : Feb  6 21:48:01 2025 GMT
        Subject: CN=679bf392-48c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:d5:9f:ba:3a:57:6a:c7:b5:b9:d3:2d:47:
                    97:2c:e5:9b:32:cb:8d:eb:71:72:f0:70:ad:ed:6b:
                    5e:64:d5:f9:38:26:f6:52:84:58:07:f2:b2:e3:4a:
                    25:9c:a2:a8:a4:ab:13:d3:a8:7e:fd:3c:8d:a9:d4:
                    b4:78:57:58:af:89:24:92:a9:30:0b:fe:82:62:b0:
                    da:9f:28:c6:6f:01:76:79:44:b2:d6:6f:f6:0e:cc:
                    88:00:27:43:e6:04:f6:15:c8:44:eb:0d:d0:19:08:
                    54:c5:e5:0b:4e:99:59:eb:15:2a:e0:d3:23:0d:d5:
                    5f:02:c5:a1:b9:fe:e5:8e:d9:1c:77:44:85:28:06:
                    66:99:f7:d7:01:b7:94:a0:9c:79:97:a7:6f:c1:90:
                    8a:08:bc:29:cb:2a:3d:0d:ba:5b:52:ad:65:44:e5:
                    3b:c8:df:a2:4a:a7:bc:3f:f0:35:6b:d9:fa:d1:8b:
                    af:3f:c6:49:ab:21:b0:d5:f9:30:b5:ee:19:f4:ec:
                    09:c0:0f:6a:36:06:01:57:70:1a:57:be:8e:fa:2f:
                    05:87:7f:6d:20:93:e4:a3:05:fe:1c:5d:1a:f1:fd:
                    d0:31:cd:bc:65:ab:36:cf:37:c6:3c:10:89:40:54:
                    1c:64:13:e4:16:d9:0b:fb:cd:fd:68:23:47:2d:7f:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FF:AC:27:E6:BB:2D:0B:FF:53:EE:D8:C2:DF:8F:F4:1A:00:74:F8
            X509v3 Authority Key Identifier:
                keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0e:02:d7:51:f7:cd:88:46:b9:fb:7e:dd:3a:a3:4b:3e:9f:
         5b:53:a0:2d:29:34:96:cb:c1:34:45:66:79:b8:74:ab:1c:5c:
         6c:b8:9b:99:e3:2e:3d:c9:b7:9b:ad:76:c1:8d:42:6c:28:1d:
         4a:81:b1:4c:7e:a0:c6:b0:03:bf:35:70:eb:cd:d0:29:e7:91:
         56:6e:52:c0:71:71:7f:d6:e3:25:32:e3:54:f9:82:7a:67:84:
         06:22:75:5b:f1:ee:e9:9e:95:60:b9:ff:78:b1:87:93:30:e8:
         da:42:e8:3c:0c:d0:f6:21:0f:8c:c6:d7:5d:5b:78:da:18:67:
         dc:50:e2:b0:03:c1:ea:f8:a6:2e:09:a4:d6:5e:2c:14:66:fb:
         02:a3:e3:fa:b5:f6:a3:6e:ea:15:9f:e9:51:ea:36:21:34:62:
         e3:11:8c:e0:5a:b5:4d:32:6f:08:1c:54:98:14:64:89:d0:7e:
         f2:ca:e8:e0:2c:a2:65:88:c3:c3:43:c5:da:47:57:88:24:ff:
         4d:bb:4d:9a:5a:81:45:0c:fc:74:c9:8b:b7:3d:d7:f1:47:cb:
         b1:b3:0d:13:89:f5:06:5a:00:18:3e:f8:bc:0f:ca:97:ae:ba:
         9b:5b:28:55:89:13:e9:c9:28:f2:7d:11:38:05:73:34:53:29:
         f6:62:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----