Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft
File:                     A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json)
Hash identifier:          hgnc7p2Wle0hJmkV6dgm5G5/KEuHDLqg9+2pwc9GK1U=
Subject key identifier:   E7:0B:A2:94:99:9A:CB:DB:AC:0A:28:81:CD:A2:E4:56:4C:96:30:32
Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F
Certificate issuer:       /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F
Certificate serial:       0986
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft
Manifest number:          096C
Signing time:             Thu 30 Jan 2025 20:17:19 +0000
Manifest this update:     Thu 30 Jan 2025 20:17:19 +0000
Manifest next update:     Thu 06 Feb 2025 20:17:19 +0000
Files and hashes:         1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: LIzBpSYvZ8zm+tPDRYll7U8Zt9eqGvVSdkxUMTTSv3A=)
                          2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: J3OAo2oioplrlBzQe4yXqYfONxy+KByGMfnHbS1PbXs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2438 (0x986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F
        Validity
            Not Before: Jan 30 20:17:19 2025 GMT
            Not After : Feb  6 20:17:19 2025 GMT
        Subject: CN=679bde4f-7718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:f5:4a:3d:ff:09:ef:e4:23:2f:87:b2:77:
                    fe:50:80:d7:36:3e:8d:ac:02:89:da:6c:f2:87:72:
                    02:b3:7e:dc:4f:94:4f:65:71:d7:00:2e:e6:3b:f0:
                    9d:e6:4f:e2:8a:01:9e:1d:a7:04:4f:13:9d:99:55:
                    a5:04:d7:a7:75:3f:55:d0:b0:58:81:1f:e6:ae:37:
                    f4:e3:8b:38:a6:06:24:5e:c9:f0:49:af:43:9a:40:
                    7b:a4:dc:df:95:12:db:3d:f8:0c:a6:15:54:0d:cd:
                    2a:24:69:79:5f:5d:e9:94:74:f5:90:18:4e:84:29:
                    46:f6:f5:18:84:24:68:dc:6f:82:ac:dd:08:f9:c7:
                    25:1e:4f:4e:52:b1:96:51:10:18:bd:88:0d:13:9d:
                    2b:ba:30:0f:7f:d2:5d:dc:45:16:88:39:9c:2f:53:
                    1b:85:d0:11:8a:f8:d6:03:5a:ec:93:92:ea:58:ae:
                    c2:1b:48:93:38:c2:4c:f1:6a:fd:5f:0d:90:42:ac:
                    0c:74:0b:13:05:d7:ae:9c:aa:94:c2:bc:21:11:a8:
                    84:ae:e4:5f:6a:63:cf:37:73:a7:d3:0e:33:5f:0f:
                    e9:43:a8:34:1c:11:11:74:89:ab:e3:46:bd:43:36:
                    28:8d:fc:fd:dc:a3:fe:89:46:49:bc:3a:4a:58:c4:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:A2:94:99:9A:CB:DB:AC:0A:28:81:CD:A2:E4:56:4C:96:30:32
            X509v3 Authority Key Identifier:
                keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:83:a5:e3:56:3a:1c:fe:26:7d:27:cf:c6:10:3a:e1:62:d6:
         d1:50:8f:69:ec:64:d1:d6:90:cd:fa:84:47:7c:1a:48:01:8d:
         d4:8b:ce:10:a2:06:d8:db:02:7f:18:f4:fd:1a:94:db:e1:0a:
         55:c9:f1:49:2d:af:2f:09:de:3a:17:9b:d7:b9:bd:84:8c:1f:
         04:d1:3c:16:20:e4:fd:8b:9d:bd:55:65:b8:34:81:d5:27:e1:
         3a:5a:ee:4b:7a:a2:d4:11:15:42:5b:16:e7:16:9c:43:2b:7c:
         09:1c:7a:fa:f5:cf:ee:45:6b:97:2a:30:b3:9b:a5:45:bd:46:
         61:52:33:dd:ac:82:36:35:b7:16:3e:10:47:49:d9:d2:59:63:
         74:14:21:a8:49:6d:10:bd:4e:5e:34:72:ed:15:5c:7d:f2:0d:
         c2:71:34:b5:9b:48:10:39:78:e7:f7:a6:0f:97:69:a7:a5:8d:
         1d:ec:30:d3:ab:fc:cc:e9:ec:01:b0:fe:a0:65:01:e9:17:b4:
         24:20:ca:7d:b0:bc:3b:06:85:54:dc:38:6a:a5:3b:4f:b4:b3:
         8b:e0:64:c5:ac:50:49:04:5c:61:91:3f:f2:34:3b:e8:88:d1:
         b6:e9:05:dd:61:fb:18:cf:fb:53:47:4e:bc:61:bd:d3:1c:fa:
         bc:02:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----