Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File:                     3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier:          aVslwqxiKwKuDUFUpPMmsN1tTotXS6OZG0ueieRhOXs=
Subject key identifier:   0B:08:10:DB:29:CA:53:AB:2A:E9:0E:CE:64:3C:3D:95:98:F1:BB:92
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer:       /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number:          0635
Signing time:             Thu 30 Jan 2025 22:39:28 +0000
Manifest this update:     Thu 30 Jan 2025 22:39:28 +0000
Manifest next update:     Thu 06 Feb 2025 22:39:28 +0000
Files and hashes:         1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: DAV5j9VdeNm5gYYNJnokO5NwNkRD1o3A1w3aZc8f3yc=)
                          2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: O0WToewD6QdFMbl6xT5t2Q3rykz6toPpLMo5BA08OvY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
        Validity
            Not Before: Jan 30 22:39:28 2025 GMT
            Not After : Feb  6 22:39:28 2025 GMT
        Subject: CN=679bffa0-06d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:03:26:ce:aa:7f:1a:c7:f7:42:0e:53:99:
                    2d:cb:ee:9e:e1:be:96:69:03:8c:85:ef:d0:f5:6a:
                    41:57:81:0f:d5:c3:7d:87:45:6b:d0:43:1f:f6:72:
                    8e:3a:2c:d7:d0:95:06:9b:0b:55:b9:2c:4b:86:60:
                    f4:01:a4:a9:57:86:df:10:33:fc:76:d6:cc:d9:a9:
                    b3:35:4b:fa:b8:69:f5:5f:9f:12:ca:fc:2a:80:8c:
                    32:5e:0c:db:9e:99:3a:ab:ba:fa:97:64:50:68:f7:
                    63:a5:d7:84:00:ab:3e:56:11:f2:3f:9c:c0:1d:43:
                    63:f2:5b:d3:a8:63:6b:d8:51:d4:7d:e1:60:a6:c9:
                    d7:27:34:13:4d:73:55:55:9e:98:7b:cf:bb:29:93:
                    dc:80:e8:4a:8c:e6:32:1d:d8:c2:16:4a:d8:9b:4c:
                    c3:de:30:46:2b:33:da:b6:da:f6:d9:bf:c0:a3:ba:
                    94:da:a2:bb:96:20:23:5c:74:22:79:b3:53:3d:a0:
                    78:d5:b4:a1:77:d5:d2:04:11:d7:62:ea:1d:af:a1:
                    4d:83:df:37:09:04:ca:8a:65:f3:d1:0e:9a:28:a8:
                    0e:07:a7:58:7f:d2:ea:2d:84:f0:7b:07:8e:bf:f4:
                    06:27:7b:71:4b:81:c3:01:dd:ff:30:96:bf:bc:5c:
                    cd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:08:10:DB:29:CA:53:AB:2A:E9:0E:CE:64:3C:3D:95:98:F1:BB:92
            X509v3 Authority Key Identifier:
                keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:03:2f:6f:78:72:ce:5d:e4:96:66:74:c3:fc:af:91:b2:af:
         2e:2d:4e:0a:23:34:e6:8e:3e:02:73:88:d1:46:6b:e3:b0:5e:
         a3:fe:8a:52:ca:85:f8:59:eb:2a:a7:78:27:0e:ab:18:01:d8:
         18:dd:95:59:99:0a:17:b0:07:fe:bb:80:c7:7c:80:ad:86:22:
         1b:53:27:04:c5:1a:31:c9:30:7a:e3:6a:fc:31:df:14:5e:f0:
         6b:0c:f4:5e:b5:65:52:e7:92:b2:5b:d5:41:a2:3c:8a:d1:43:
         60:f9:06:8d:85:9a:33:5e:3d:1b:4f:ed:c6:60:0b:61:55:9a:
         4f:b6:a1:8b:9a:63:ab:e9:c9:95:87:d4:d2:81:9d:75:d0:00:
         e7:5e:03:45:66:18:27:3a:fe:56:c1:5b:8d:2d:c5:43:e5:54:
         5d:fb:e4:75:76:4c:24:16:a3:63:62:97:c0:2c:07:70:19:23:
         81:bb:a3:12:b9:c8:6a:ed:37:e1:ca:94:c7:23:f7:77:c4:11:
         6f:8f:57:51:a9:0e:d9:d8:ea:4d:a8:2b:cf:76:bb:ff:16:95:
         a1:4b:67:3d:57:6a:fe:29:e2:fe:d4:55:72:4d:b3:5b:28:d7:
         aa:54:b8:dd:7c:60:e0:e2:26:ff:68:b5:17:d0:8a:e8:32:e4:
         5e:b9:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----