Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File:                     TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier:          eFB1HT67IOVDG5/iSswnG5RPnXQAIOeku1sGJNSfqiU=
Subject key identifier:   84:38:22:0D:DA:2C:CD:83:ED:1D:FE:79:8F:F2:3A:24:4B:E9:A4:EC
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer:       /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial:       028F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number:          028C
Signing time:             Fri 31 Jan 2025 01:39:58 +0000
Manifest this update:     Fri 31 Jan 2025 01:39:57 +0000
Manifest next update:     Fri 07 Feb 2025 01:39:57 +0000
Files and hashes:         1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: M9ppeJIZw+zRDcBxNie/7AglXv1jRL2WNcgl3FeLFLc=)
                          2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: iYkVHc+gEz+KBoaY/orgybHRRbhE8SWTurly5q5QifM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
        Validity
            Not Before: Jan 31 01:39:57 2025 GMT
            Not After : Feb  7 01:39:57 2025 GMT
        Subject: CN=679c29ed-4be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:e8:69:21:06:a9:74:ba:46:5e:54:9d:4b:
                    d5:8c:f2:aa:5b:9a:8a:56:de:f5:32:05:34:f2:2f:
                    ab:b0:de:09:18:9f:de:74:97:6b:0a:8a:62:ab:74:
                    cf:ac:b3:26:bc:4c:b2:d6:4e:b3:cf:00:d3:44:9e:
                    87:b5:d1:f9:72:e0:87:26:97:cd:7e:6b:3a:2d:aa:
                    b0:06:c2:ab:84:06:fb:d4:6e:6f:c5:c7:0f:ed:ae:
                    6a:e9:73:cb:e6:19:57:08:d0:d1:94:63:4a:59:18:
                    61:9f:85:56:40:82:db:99:76:36:cd:b6:e2:07:fc:
                    2d:56:49:25:50:88:94:40:04:bc:67:7c:b8:e7:54:
                    eb:7c:a3:0e:6f:98:23:2c:ce:67:90:f3:7a:ce:9f:
                    66:ef:c1:61:41:73:9e:87:07:25:8c:14:79:15:73:
                    68:55:38:f8:f1:7a:ce:b7:ea:ba:31:5b:23:d5:12:
                    f6:d8:63:ee:43:11:5a:eb:51:a3:10:c9:8c:a4:4f:
                    bd:b9:1b:f7:75:39:61:b2:86:a8:1b:11:54:39:1d:
                    b0:3a:24:46:f3:2d:6b:4f:99:c1:fe:57:14:74:56:
                    3c:7c:2e:1c:09:8a:75:d0:63:f6:63:ca:be:4f:9f:
                    61:66:ef:dc:de:00:19:fc:24:ff:cd:c2:6a:09:e3:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:38:22:0D:DA:2C:CD:83:ED:1D:FE:79:8F:F2:3A:24:4B:E9:A4:EC
            X509v3 Authority Key Identifier:
                keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:09:fc:21:d8:4c:86:5e:1c:40:cc:93:75:93:87:a7:cf:6f:
         76:c1:5d:99:90:15:c5:a1:33:7b:ed:f4:13:d8:fe:ab:36:48:
         2a:97:11:e4:fd:9b:91:8b:8a:37:4a:11:c2:58:20:9d:22:7f:
         51:45:3d:e5:1c:97:09:aa:2b:a5:c1:9c:eb:15:15:22:32:a2:
         bb:80:12:8d:4f:1d:cb:24:ed:0f:c7:a7:0d:8b:0a:36:f3:15:
         a4:8f:f1:e9:f2:28:c7:64:12:cd:ca:e9:a9:2e:f8:ec:e7:56:
         0a:b1:e2:21:6c:0a:8b:38:c7:3c:b9:04:7e:b5:ee:04:01:74:
         bd:b6:01:ee:5f:fa:25:36:dc:63:90:bf:0e:97:32:63:a9:ae:
         2c:b9:a6:da:e1:6d:8e:c9:03:72:37:04:92:78:54:2d:22:28:
         00:f5:21:85:70:8e:cc:2a:ec:34:ce:3d:5f:e8:be:25:6f:cf:
         df:29:0a:51:a2:1f:55:b0:09:c8:5d:ab:9d:53:72:34:a6:b4:
         5f:86:88:28:5c:b4:b1:d7:f4:5b:3c:7d:a7:89:81:4b:3d:62:
         3c:2f:43:71:f6:2b:c8:b5:a8:d4:2b:1e:77:9d:d1:44:4a:d7:
         70:88:2a:9f:e7:14:35:ac:5e:32:27:b3:b9:92:17:4b:38:43:
         1c:28:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----