Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
File:                     Pe07QeID-IRwApbIcBAN_E57FQc.mft (raw, json)
Hash identifier:          tb83YUV+a77z4d2XF2iqDZovzL9rRx0pKI1t2eY6VJ8=
Subject key identifier:   C2:99:31:14:D0:23:2C:68:99:30:5C:36:AB:CF:A2:0B:17:48:62:9F
Authority key identifier: 3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07
Certificate issuer:       /CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
Certificate serial:       02ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
Manifest number:          02E9
Signing time:             Thu 30 Jan 2025 21:50:55 +0000
Manifest this update:     Thu 30 Jan 2025 21:50:55 +0000
Manifest next update:     Thu 06 Feb 2025 21:50:55 +0000
Files and hashes:         1: Pe07QeID-IRwApbIcBAN_E57FQc.crl (hash: KPApOkFyd6YR6nOTtOmE1TjUhw+oK34WZEzGQeVDA+4=)
                          2: 7BA410DCECB811EC851D8945C4F9AE02.roa (hash: N6uM6LPODGpuiPmHZixFqRNSQB/Ampu1xfizdkiLwDU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
        Validity
            Not Before: Jan 30 21:50:55 2025 GMT
            Not After : Feb  6 21:50:55 2025 GMT
        Subject: CN=679bf43f-5a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:55:b7:11:ec:a3:ed:b8:97:14:26:16:6f:
                    2e:64:05:84:d5:c4:81:3b:9e:e7:8c:b8:3c:ad:6f:
                    d8:77:e1:3e:07:eb:a2:4a:75:7c:48:e1:fd:2f:d8:
                    55:2e:36:55:2a:28:b1:90:4f:0d:fa:3c:4d:d1:d2:
                    cc:80:c8:55:38:5b:66:b7:2e:10:e2:e0:09:b1:25:
                    4e:62:fd:b0:1c:1f:44:fe:d3:5f:e0:cd:1e:28:84:
                    db:2c:6d:12:69:7a:e9:dd:e9:00:67:76:5a:3a:eb:
                    d3:d4:7e:48:4d:25:23:93:a4:30:8f:17:72:b0:e1:
                    c6:d9:be:c3:7e:18:11:98:60:b4:1f:74:71:f1:69:
                    5e:89:5c:aa:34:d4:75:c4:c6:40:4f:f2:30:64:e8:
                    2a:66:37:d2:62:c7:87:15:2b:39:d9:82:f0:f0:af:
                    49:0e:98:6d:7e:10:a8:c0:38:36:a6:c8:dd:e3:e6:
                    21:68:ba:7a:40:fa:83:d4:8f:3c:50:a6:67:27:35:
                    9c:4d:d2:cc:e5:74:7e:e7:b9:c4:6b:a5:f3:00:d5:
                    e0:be:72:96:dc:54:93:21:db:91:ee:0b:1a:4b:89:
                    fb:0d:bb:f4:b5:9c:ba:ca:59:a0:c2:b0:5a:66:c3:
                    d3:e3:a8:76:bc:38:0c:e4:1b:5c:37:df:e9:5b:35:
                    34:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:99:31:14:D0:23:2C:68:99:30:5C:36:AB:CF:A2:0B:17:48:62:9F
            X509v3 Authority Key Identifier:
                keyid:3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:54:b4:ed:7d:a6:e2:5f:a1:f0:be:ae:83:e4:b4:9d:a5:bd:
         f0:13:6b:7e:29:9a:46:dc:88:5d:66:ba:86:37:95:f1:79:8b:
         89:26:01:d4:2d:ae:23:c1:ca:ea:97:4c:8c:50:a5:b5:25:81:
         4e:97:69:5f:c2:4d:8d:6e:c0:0e:04:91:97:7d:ad:84:f1:b3:
         f0:58:93:83:44:4a:f8:af:a0:c7:23:4c:8d:c3:7b:81:6b:3e:
         e3:8e:5e:2d:66:2a:a9:21:56:86:fa:1c:bd:45:e8:c8:3b:57:
         06:9a:4d:9f:26:49:2b:0c:7f:42:b8:49:4e:3b:38:3c:4d:e3:
         94:45:02:b9:5c:6b:fe:5c:79:45:1a:72:6a:a3:ee:32:17:14:
         8b:06:7c:aa:f3:23:6d:dd:10:3f:04:fc:0d:d5:b8:d4:6d:20:
         13:6e:42:2f:66:66:14:cb:4e:8f:64:01:4a:49:75:2e:05:64:
         5a:c6:6a:f7:51:fa:a2:3c:10:2e:1e:38:85:25:f7:41:be:ec:
         fc:70:45:99:4d:d5:86:1f:95:ea:9b:ec:a4:1a:86:6d:2c:e1:
         08:56:c9:82:5d:9c:20:c7:5d:0d:ad:0c:7e:93:71:db:8e:75:
         f1:a4:a5:c8:17:b2:aa:5a:35:b7:ec:46:bf:27:b3:10:f7:e7:
         08:06:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----