Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File:                     1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier:          0d6W66We25CTzjWeUJbHp6L9717olje/p5xQyeircJY=
Subject key identifier:   C4:FB:31:5D:0A:3B:9E:AC:F3:97:16:0A:BE:26:AA:05:30:A6:07:64
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer:       /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial:       0869
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number:          084E
Signing time:             Thu 30 Jan 2025 20:47:12 +0000
Manifest this update:     Thu 30 Jan 2025 20:47:12 +0000
Manifest next update:     Thu 06 Feb 2025 20:47:12 +0000
Files and hashes:         1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: rW7wO6aF6AQLU1ZTXkTxgyp5IB6pf6i+HdJVVFgEeKE=)
                          2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: MbDPgGu0QclVT9FsJP5AAT1eEmuh3d/Dz6sn+R/b6KM=)
                          3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: cq2+wmybE1qpMjYmMXJ1sPoAauOtHlCzziVm+2eI9Iw=)
                          4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: 82RI8awYpynCWEC9v44MXxvIjgMncGXtmCbSpuF8EGw=)
                          5: F814A546C01411EA912AC365C4F9AE02.roa (hash: 55QHl+d6Jc6Afsomh5duijKv8tF3LE8W2FzT9OQDDqI=)
                          6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: NQcAjbSAwzYhxeooFE30slWX1sySx4pom2WdezOetYg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
        Validity
            Not Before: Jan 30 20:47:12 2025 GMT
            Not After : Feb  6 20:47:12 2025 GMT
        Subject: CN=679be550-547e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:59:86:0e:53:04:9d:a3:f0:47:d8:54:2e:
                    eb:67:a7:c1:bf:d6:4b:d2:41:93:5a:0c:da:42:eb:
                    e2:2f:54:f1:75:ea:59:2b:d7:49:fc:0b:4a:06:10:
                    95:9f:02:3a:f7:ea:ea:ea:b4:37:fe:ac:c5:91:e8:
                    77:95:a0:a5:a3:2f:4a:f8:18:76:43:8f:b0:70:8e:
                    51:1b:bb:35:77:76:44:8b:f1:e0:b4:0e:a7:d5:44:
                    55:44:2e:de:5f:82:9d:24:f5:d2:44:6e:68:30:8e:
                    89:af:79:0b:1a:68:20:fe:c5:a7:3b:e8:8a:a7:5e:
                    3c:58:d7:ea:c0:83:1a:86:69:0a:9c:73:69:84:8d:
                    34:e9:43:61:a3:01:ae:c2:2b:3b:5d:0c:40:8f:8d:
                    9d:57:00:a7:e2:24:94:07:f6:51:a2:fe:01:fc:ae:
                    4d:0c:05:40:7d:ce:f1:87:cb:70:4d:ad:e7:5e:98:
                    4c:c0:80:74:d4:73:f3:93:c8:99:16:3b:7b:43:43:
                    29:6a:d9:65:80:03:d0:cd:c4:db:1d:4f:b0:98:34:
                    76:24:e9:0b:c5:32:97:f3:04:46:24:22:de:01:c4:
                    4c:4c:4c:3e:97:2a:14:02:c7:6a:01:bd:9d:5a:48:
                    bd:34:b3:70:5a:69:83:15:3e:73:39:92:d1:28:aa:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FB:31:5D:0A:3B:9E:AC:F3:97:16:0A:BE:26:AA:05:30:A6:07:64
            X509v3 Authority Key Identifier:
                keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:87:40:36:7e:1c:98:bf:c7:2a:f1:50:ab:31:8b:66:83:79:
         01:8c:0f:de:69:55:b8:b1:5a:ab:9d:97:77:c0:ac:ff:07:23:
         de:a1:d9:f1:9e:32:2a:f2:92:dd:cd:bc:cc:79:00:2c:2d:da:
         05:9f:e7:86:7a:df:d1:50:07:54:67:91:44:f4:18:51:35:2b:
         07:cc:8f:4f:a2:4d:9d:5c:91:77:5a:d9:3a:2a:72:3a:a6:a4:
         62:af:60:2f:33:24:c6:55:6c:bf:32:28:52:36:c9:9a:b8:ad:
         71:d5:b9:22:b6:b6:cb:33:8e:0c:cb:43:13:d7:70:25:b6:92:
         44:fd:ca:d1:f3:81:24:4d:e8:bd:f5:59:3c:a6:85:2b:df:04:
         d1:2b:35:fc:11:77:5c:b4:9f:3e:df:97:2f:a7:22:d0:fc:f6:
         cd:b0:8a:ba:f7:32:a0:07:de:83:a6:56:aa:12:b7:7c:0d:4f:
         5b:89:ee:9b:0e:37:0d:73:d2:aa:97:f1:c6:e4:04:bb:7e:70:
         0a:be:c6:48:0b:ba:78:b1:56:bd:c2:91:6e:14:e6:38:b1:d2:
         44:7a:c0:b3:b0:be:50:37:62:25:88:1a:3b:a0:77:9d:7f:1d:
         2b:9c:b3:37:33:8a:f3:ee:1d:f9:5e:9f:73:6a:9f:a1:b1:8a:
         48:1b:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----