Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
File:                     9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json)
Hash identifier:          986jbDx8r4eImH5FFy7/RLYL4MC26KiWnfE4WSRB7XI=
Subject key identifier:   B9:9C:7D:58:BF:A0:09:EA:44:39:83:E1:BA:A4:02:79:B5:CD:37:38
Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4
Certificate issuer:       /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
Certificate serial:       0FAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
Manifest number:          0F98
Signing time:             Fri 31 Jan 2025 17:30:42 +0000
Manifest this update:     Fri 31 Jan 2025 17:30:42 +0000
Manifest next update:     Fri 07 Feb 2025 17:30:42 +0000
Files and hashes:         1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: acrIgSi/kZBO3EbhcSAGIG0ogD/yet9hwhgBuiuvGcE=)
                          2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: t5d/tqSi5Ak9PYp92aRcAW1miOjLpd8PCdqy2sv9Qk4=)
                          3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: O75ak5g3Sd3oJTig8KK/2ICaXFxfuZ2760QEleY1kic=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4014 (0xfae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
        Validity
            Not Before: Jan 31 17:30:42 2025 GMT
            Not After : Feb  7 17:30:42 2025 GMT
        Subject: CN=679d08c2-9654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:98:0e:66:26:dc:b7:9f:eb:7e:38:c1:fb:8e:
                    14:2c:33:87:1e:7e:1c:dc:30:1e:cc:34:5b:43:95:
                    63:05:1e:6d:5d:56:c9:74:52:a0:b4:13:f1:ff:24:
                    8a:e6:a3:fe:11:e0:4d:41:28:a5:59:0a:b3:0b:2a:
                    b7:83:ff:5f:15:e3:04:eb:66:58:e3:68:b6:bf:4a:
                    70:65:ba:2c:2a:b9:f3:db:fc:60:cc:82:fd:0b:5c:
                    e1:f3:be:af:98:5e:7d:24:e2:7e:c1:13:66:fa:d4:
                    0c:97:8b:9d:da:dd:fd:e6:a0:db:72:63:73:8a:4b:
                    1b:b1:22:48:fb:59:fe:9c:96:ff:7c:6c:11:f9:95:
                    9b:4c:f5:c8:d5:78:f5:d9:08:93:3b:ba:c4:7b:4f:
                    f1:d9:d9:f1:a5:73:b6:cf:84:04:60:02:c8:ed:7d:
                    2b:91:f3:85:63:b6:cd:01:5a:e4:e5:2f:02:27:43:
                    b4:fb:56:49:45:b8:1e:5b:8a:ca:47:09:d8:04:6b:
                    e9:5d:89:6c:ec:0a:02:79:cf:11:5b:c6:bf:15:4b:
                    c0:2d:19:1d:75:a2:be:17:ea:ae:01:c4:49:70:80:
                    60:6d:34:a9:83:9b:92:2a:99:be:e4:cc:0f:c6:7b:
                    49:32:d1:60:be:bc:84:dd:5d:ea:96:29:42:32:4d:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9C:7D:58:BF:A0:09:EA:44:39:83:E1:BA:A4:02:79:B5:CD:37:38
            X509v3 Authority Key Identifier:
                keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:25:9e:40:47:ce:7d:21:e7:74:ee:45:91:7e:3d:3c:df:02:
         bb:9c:43:bf:9a:74:df:c2:24:1a:b6:4a:3d:56:49:f2:ba:a3:
         d8:b9:c0:f8:bd:c4:2f:f4:e3:7a:94:30:1c:95:35:71:2b:7e:
         88:11:5a:4d:4d:dc:c0:81:11:c9:af:48:a6:5d:d8:d3:7b:e8:
         6f:6f:22:fe:7a:76:03:28:72:ad:d4:03:eb:8c:7f:00:5d:1d:
         9d:ed:bb:3a:a0:5c:2d:df:1b:cf:5a:61:0c:71:85:75:c6:ad:
         db:f6:f1:2c:55:77:1d:6b:bb:d0:6a:50:41:76:c3:96:bd:ac:
         b8:88:ad:42:9a:28:bf:8d:a6:2b:b3:20:88:19:bc:99:86:75:
         d3:0e:61:97:3e:04:d2:19:6f:30:0d:11:dd:77:c1:5a:ca:26:
         10:a6:ea:3e:74:12:5d:7b:89:eb:13:8e:94:bd:37:d6:22:ed:
         4b:f8:1d:82:cf:2a:6d:c7:b2:0f:80:cf:5e:cf:c7:f5:9e:84:
         8c:c5:1a:1e:94:d5:19:37:55:9b:9d:fc:17:e6:72:89:c4:62:
         e4:db:52:af:87:9e:7b:91:ca:08:72:3d:6f:70:26:ff:84:89:
         3a:bf:8e:c9:5e:35:d1:d8:ef:53:3e:0b:17:e9:f1:7d:0b:dc:
         db:32:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----