Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft
File:                     IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft (raw, json)
Hash identifier:          Dwj3n0+7f15Ibp9JJ7w5pVS6iTD6NMRAEXlFxzweil8=
Subject key identifier:   9F:5B:58:0E:BF:72:AE:09:0D:3E:81:AC:EC:32:9D:F1:26:55:A4:8D
Authority key identifier: 21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D
Certificate issuer:       /CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D
Certificate serial:       03C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft
Manifest number:          03BB
Signing time:             Fri 31 Jan 2025 00:44:10 +0000
Manifest this update:     Fri 31 Jan 2025 00:44:09 +0000
Manifest next update:     Fri 07 Feb 2025 00:44:09 +0000
Files and hashes:         1: IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl (hash: bM+4AhG03/vwZH5qZ2iZ5rmCE8px5IGKTZS/a5YPx4g=)
                          2: E986DDEC979911ECB3B7CE39C4F9AE02.roa (hash: Zeiu4QtNT5MUhU37wsj+oT85M5rgvK6OPRoU5FxNjsE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D
        Validity
            Not Before: Jan 31 00:44:09 2025 GMT
            Not After : Feb  7 00:44:09 2025 GMT
        Subject: CN=679c1cda-b9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:86:9e:d0:85:10:ec:19:cb:37:f6:fd:07:ec:
                    da:61:28:b1:fd:c9:2f:44:14:e9:cc:3e:db:83:81:
                    75:74:a1:ff:7b:0e:24:c1:7d:1d:57:81:4e:72:6d:
                    be:40:22:d1:77:dd:34:28:35:e1:ac:05:52:97:99:
                    39:f9:e2:ee:34:f1:a4:a4:e7:8f:ad:e8:43:69:1f:
                    8a:b9:75:e3:74:ce:44:12:1b:1b:68:12:e2:44:c5:
                    37:69:50:10:d3:5d:68:e0:a5:3f:67:d8:b6:4a:11:
                    fd:1d:0f:20:bb:b3:3e:95:49:3f:f1:e0:8e:86:2a:
                    08:e8:81:84:1e:e1:1f:05:a3:f9:98:8b:07:35:da:
                    28:16:26:64:17:21:a0:3a:0a:70:be:07:ec:6a:f0:
                    52:12:6c:4c:e4:ff:f1:23:2e:5a:cb:4d:5d:19:ac:
                    2e:15:86:aa:c6:0a:bf:b9:25:a7:cf:a7:d1:d6:8a:
                    df:88:04:f7:bf:72:33:56:06:73:af:fc:06:e5:6b:
                    ed:ec:06:59:1f:8f:bf:77:43:38:3e:dc:33:e5:af:
                    45:1b:a4:84:65:78:28:65:68:92:b3:2b:dc:83:bd:
                    54:01:04:f3:35:8b:2b:04:b6:3f:24:ea:a1:4a:1e:
                    31:fa:fa:93:51:25:6f:51:69:53:0d:4d:8e:8f:ff:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:58:0E:BF:72:AE:09:0D:3E:81:AC:EC:32:9D:F1:26:55:A4:8D
            X509v3 Authority Key Identifier:
                keyid:21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:20:27:fb:b2:45:84:12:4d:28:bd:24:db:44:7b:6c:76:
         57:df:61:ed:f2:92:fe:be:f0:a3:f1:49:53:30:1b:4f:a0:3b:
         57:a1:2a:6f:7b:72:a8:76:ed:a3:c3:96:be:91:bf:d6:31:38:
         8c:fb:2e:f6:87:13:c0:e2:fc:65:35:0a:14:0b:e3:62:c2:62:
         53:87:d9:a2:a1:11:43:29:ff:09:07:1d:1d:b6:4e:9c:5c:e9:
         ee:69:a4:af:1e:47:a2:85:e6:dd:90:16:2f:83:5b:96:ae:ea:
         2c:a3:8e:8d:b5:fc:4b:c9:fe:3d:df:98:e4:aa:ce:e7:99:4e:
         e7:ba:0f:c8:8e:9c:bc:25:4e:f9:a4:05:66:3d:64:6b:c5:a7:
         38:f1:c3:66:fc:d4:83:35:05:68:04:06:27:9a:b1:9a:7e:be:
         d3:3e:50:8a:74:00:25:c3:41:4d:d4:18:69:2d:56:50:68:b0:
         45:f0:b0:1a:f3:8f:84:54:9a:8e:f7:c0:9f:a9:96:19:65:bb:
         ba:80:b4:2e:08:68:a0:b9:cf:40:68:6a:7e:f7:98:2a:3c:78:
         a9:66:20:33:d1:d7:58:c6:bb:44:0b:30:d3:8b:d2:50:5f:81:
         a6:b8:74:30:ca:c8:ca:fe:69:a0:8d:54:fb:7f:73:99:39:22:
         1c:0e:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----