Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
File:                     FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json)
Hash identifier:          xUT2Pl3kJxjhDcN1/ohmCAWlpkw4+uKfAJ799HHLQ1k=
Subject key identifier:   11:8B:96:67:E9:08:5E:F5:17:5E:61:25:52:6C:4B:38:3E:6A:45:DC
Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
Certificate issuer:       /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Certificate serial:       03A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
Manifest number:          039C
Signing time:             Fri 31 Jan 2025 01:14:34 +0000
Manifest this update:     Fri 31 Jan 2025 01:14:33 +0000
Manifest next update:     Fri 07 Feb 2025 01:14:33 +0000
Files and hashes:         1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: hlx/DbuDvqQFffUFEYf5Vb6ve2Gl+0JR4RAjqG4ZSQE=)
                          2: 6F51887283FA11EC9C033067C4F9AE02.roa (hash: XwBfTGBdHYip+l3Cww7cDDqUdig6aiSXjJ7XX34v/4M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
        Validity
            Not Before: Jan 31 01:14:33 2025 GMT
            Not After : Feb  7 01:14:33 2025 GMT
        Subject: CN=679c23f9-4e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:fc:98:2d:32:5f:10:a4:d3:11:ff:f0:a6:
                    69:fe:d5:04:75:85:b1:e2:e4:c8:a1:7c:41:e5:01:
                    15:36:28:7d:c0:fc:0f:b8:10:22:0f:84:71:7b:56:
                    7c:ff:77:44:57:0f:c7:ff:d1:df:ea:f4:7f:a1:ae:
                    75:12:0f:91:98:c1:40:4a:42:8c:e9:a2:5d:e7:43:
                    cb:a5:9d:6a:18:3b:36:68:61:2f:e5:1d:4e:01:72:
                    c3:3c:c7:37:4f:13:a1:fc:fe:ba:93:ab:c8:ef:da:
                    a3:80:90:0c:8f:d1:b2:c4:1c:40:c7:c1:9f:6c:77:
                    2b:3f:20:8d:30:d2:69:02:dc:4e:f8:af:52:e2:3e:
                    6c:9e:be:6c:e8:b6:52:e0:08:18:7f:c2:0d:52:6b:
                    a0:78:86:c4:ba:d8:ac:ec:00:82:5d:f7:c7:90:fc:
                    18:64:03:44:37:af:be:06:52:59:aa:52:29:6e:16:
                    3c:82:dd:b3:d7:c1:e0:0c:99:74:87:60:e7:da:5e:
                    b2:76:c5:cf:70:77:81:75:15:10:55:73:57:74:34:
                    8c:2a:82:d0:5e:79:dd:b1:c7:2c:b3:22:43:dd:5f:
                    22:ee:00:2c:10:c9:7b:d1:ff:b3:c7:89:f1:c8:55:
                    73:39:e9:f5:31:1d:d9:7c:5a:ea:1a:30:48:f5:6b:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8B:96:67:E9:08:5E:F5:17:5E:61:25:52:6C:4B:38:3E:6A:45:DC
            X509v3 Authority Key Identifier:
                keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:54:cb:44:37:1f:75:bf:4b:28:b6:63:95:df:2d:44:17:61:
         bc:25:ee:e0:87:4c:b8:fe:d3:2a:13:0b:07:70:34:f8:83:b9:
         c8:bd:d4:f4:f0:44:cf:94:70:52:ef:66:b6:50:46:ee:8f:d2:
         0f:7b:a0:f1:d4:0e:6d:5c:c0:96:fb:d3:54:b4:84:dd:cd:d1:
         8e:24:40:80:c7:15:99:42:d0:2c:6b:c8:6c:0c:23:8f:65:82:
         63:a8:2e:c3:84:14:15:02:ab:34:6b:63:ed:68:e9:4d:c2:26:
         d5:b1:18:1c:45:d6:52:e4:18:8b:90:40:85:47:ad:8d:d6:f7:
         3f:60:a7:f7:97:ea:06:f2:77:d1:72:36:33:ae:55:67:9a:6c:
         c7:c0:71:5b:a6:ce:49:10:d0:4d:e3:d3:e9:b9:1d:60:aa:ce:
         47:b2:94:bc:20:89:1f:a1:ec:67:dd:2a:ea:e8:4b:d9:79:be:
         9c:ac:cf:db:aa:78:f8:55:f8:c9:54:a9:a3:88:b8:25:97:84:
         4d:d0:a4:91:ba:58:fe:20:34:af:e4:f7:6b:b0:c1:a1:2f:4c:
         a0:29:4f:c5:e4:95:01:58:83:e7:ac:26:d5:80:39:95:29:ab:
         1a:9d:66:d1:9f:9c:b3:f6:62:7d:0b:b9:70:fd:1a:5a:f2:85:
         f8:01:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----