Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
File:                     xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json)
Hash identifier:          CrgWjQZa2MZo7G3/IAsZxiZQMF+p/X9Bjb7HE+sSZyY=
Subject key identifier:   68:F0:11:08:35:F1:39:FD:F1:0C:97:7D:3E:90:47:E4:1E:9A:FA:76
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Certificate issuer:       /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial:       0622
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
Manifest number:          0617
Signing time:             Thu 30 Jan 2025 22:44:43 +0000
Manifest this update:     Thu 30 Jan 2025 22:44:42 +0000
Manifest next update:     Thu 06 Feb 2025 22:44:42 +0000
Files and hashes:         1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: iLra+Wcnur+KkjFUcYoX/8EPG7nuUMXCLUCeLFEa4wA=)
                          2: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: 327ah/e9fUSF5H9j9NGNYuwKtrueHyZEroURzg2Xyh8=)
                          3: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: 10SP9rtLMhnfiCiDsyU/nUUSFenGWa1NBToGV5Ae6kE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570 (0x622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
        Validity
            Not Before: Jan 30 22:44:42 2025 GMT
            Not After : Feb  6 22:44:42 2025 GMT
        Subject: CN=679c00db-8ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:22:15:d0:c7:61:9e:f4:51:f6:7a:ce:66:1e:
                    23:0c:55:68:8b:80:2f:f3:cb:dc:c4:f1:e5:81:4b:
                    f3:3b:d7:ab:66:c3:b2:bd:6e:71:9a:e0:8b:0c:a2:
                    82:f7:44:d7:dd:61:70:f8:11:3b:2b:6b:41:ba:c9:
                    9c:ad:73:bb:59:0d:a5:d5:65:3a:60:7e:8a:1d:69:
                    a5:72:e2:65:8b:e9:bd:47:27:8b:32:5a:22:13:ac:
                    d7:5e:df:66:6c:7f:db:7f:1c:26:8e:6e:60:94:6b:
                    38:83:97:ea:ec:97:a6:7c:98:6a:c9:ec:1a:40:b6:
                    4c:91:13:61:93:13:02:85:88:75:86:a6:f6:e7:ba:
                    45:5b:9a:c0:bb:88:97:6b:ee:5a:38:02:70:7f:73:
                    c5:18:9c:a8:98:bc:2f:02:f7:23:f6:e0:dc:22:1a:
                    88:d9:6d:72:d7:d4:b7:47:67:71:53:40:fa:6f:35:
                    e2:33:ab:11:ea:1f:e2:7d:4c:37:f7:ae:61:db:86:
                    c7:c3:07:22:8f:de:b8:2a:91:69:51:be:c4:cc:5e:
                    87:0b:e9:a4:b1:f5:a5:cd:17:b9:76:9a:16:83:89:
                    95:43:db:07:60:c8:eb:d1:f8:05:56:94:85:27:95:
                    84:d0:eb:f4:3d:65:68:4c:9b:42:91:ce:04:09:34:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F0:11:08:35:F1:39:FD:F1:0C:97:7D:3E:90:47:E4:1E:9A:FA:76
            X509v3 Authority Key Identifier:
                keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:47:42:16:b2:94:a2:59:87:a3:78:fd:af:5c:e3:49:d9:d1:
         6f:e8:90:00:84:f1:d9:55:99:da:d1:be:5e:dc:8d:c0:1e:4a:
         97:e7:24:02:5c:3d:6f:49:e3:78:65:88:af:69:ef:1b:aa:9a:
         d4:5f:b7:b9:3c:12:bc:82:c6:14:0a:6f:3d:ab:95:6f:9e:ab:
         5d:8d:57:e5:0c:5c:fa:ea:40:1b:25:27:52:0e:05:2c:d2:e3:
         08:ba:0b:6c:12:f4:02:d0:8c:92:82:e2:50:b6:dc:37:dd:77:
         c3:d8:1d:6a:86:30:a9:3d:2e:b7:b6:3c:de:5e:38:a4:6b:b0:
         14:13:01:51:5b:59:7a:7b:11:10:29:e2:91:ef:a2:23:68:10:
         e5:13:c6:a0:59:65:44:87:7f:16:e3:5d:4b:06:e4:98:38:e7:
         aa:c1:26:e0:7e:f1:09:27:f6:96:43:d6:6a:58:68:b0:15:e4:
         9e:57:2e:a0:07:ab:1d:fd:f8:5f:14:1a:d7:11:ff:0f:3c:09:
         73:f0:c2:e0:37:83:0c:04:c7:d4:4a:85:86:50:56:d8:74:9d:
         cd:9b:4a:91:99:04:7a:a8:d3:83:16:18:34:ea:c9:b8:5b:17:
         f1:1b:52:4f:f3:68:b9:9e:21:00:98:48:1d:42:e1:c2:16:b8:
         c9:22:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----