Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
File:                     aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json)
Hash identifier:          LSjb3R+MyJ1MSvpuR+3KzQevOFg8Kcaome47wX2DRSQ=
Subject key identifier:   0C:44:1C:F3:D6:52:C2:7F:43:55:F8:7E:E4:E1:E1:52:C6:05:3B:A9
Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Certificate issuer:       /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Certificate serial:       06FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
Manifest number:          06F5
Signing time:             Thu 30 Jan 2025 21:54:31 +0000
Manifest this update:     Thu 30 Jan 2025 21:54:30 +0000
Manifest next update:     Thu 06 Feb 2025 21:54:30 +0000
Files and hashes:         1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: 4v/Yl67yxrkuMsT4vVg+e4S1DdRfQGZX0ToGY5cmNpc=)
                          2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: Tkzl81mL9jCkezlpTqealMA+SaYDCxv0/vXNUScGesg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
        Validity
            Not Before: Jan 30 21:54:30 2025 GMT
            Not After : Feb  6 21:54:30 2025 GMT
        Subject: CN=679bf516-3a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:f6:67:cc:0e:a7:be:9a:48:db:01:ae:cd:
                    39:b9:54:2b:06:16:87:7c:e1:2d:55:34:5e:cc:aa:
                    39:3e:07:e0:4b:8b:71:a3:8c:61:79:24:64:17:d2:
                    d6:26:43:da:3d:9b:56:79:ea:61:cb:49:09:5a:42:
                    d2:ae:e4:4d:ee:a7:6f:9c:7f:37:0a:41:e6:fe:34:
                    72:d8:ab:de:8b:4f:04:d4:be:63:3d:c5:02:a6:75:
                    8e:27:0e:c7:8d:c2:91:94:97:8e:a6:0f:9a:6e:e6:
                    e7:95:5c:38:7d:ec:2f:19:22:63:10:0b:ce:e4:09:
                    65:d4:6d:27:02:81:c7:1b:c6:8d:b8:b0:08:58:7d:
                    9b:6e:d8:a8:be:84:26:06:14:fe:d9:d5:18:06:cf:
                    11:45:42:50:dc:a7:d6:5c:4c:71:42:3b:83:f1:ef:
                    e3:17:5f:1b:be:1a:8b:39:46:56:02:b6:d4:06:a4:
                    eb:df:83:0f:1c:0d:ec:b2:27:88:83:85:9a:d9:25:
                    78:36:22:2e:13:9f:bc:23:64:1c:8b:6a:d6:e9:e6:
                    ad:b1:a8:37:69:be:30:a0:d2:8c:e9:9d:11:aa:07:
                    75:8e:e9:02:62:44:e5:6a:86:ff:0d:24:54:d7:6f:
                    35:d7:91:e2:83:d4:74:78:9f:a2:ba:aa:e6:28:90:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:44:1C:F3:D6:52:C2:7F:43:55:F8:7E:E4:E1:E1:52:C6:05:3B:A9
            X509v3 Authority Key Identifier:
                keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:86:dc:c5:62:51:b3:28:7d:86:9a:a2:91:1b:e3:3d:7f:06:
         a6:d7:9b:30:44:49:fb:4c:b0:21:56:9b:14:58:f6:c8:41:34:
         0d:d0:7d:6f:69:07:bd:90:fb:88:99:5b:1a:9d:30:cd:bb:a5:
         19:ea:d1:3f:07:98:2c:7e:6b:33:38:d7:b5:e8:92:01:40:c5:
         3b:c9:f0:af:fd:57:62:02:12:63:6d:51:fd:ad:77:e7:fe:a7:
         f3:d5:31:eb:82:8c:d9:06:0f:e2:e3:76:7b:53:b1:0f:5f:53:
         20:16:44:66:98:dc:48:17:11:c5:14:51:3e:09:15:de:f6:e0:
         36:8d:ea:03:34:e0:0a:71:b0:24:64:cf:e2:a7:2f:8d:26:2a:
         4d:51:8d:89:81:d2:eb:1d:e6:b1:d0:e6:6c:3d:3c:50:b6:2e:
         c0:ee:97:01:c3:99:2a:4a:f9:f6:80:b3:fb:cc:ca:78:33:51:
         4b:65:c6:fe:b9:01:29:01:1d:df:af:76:19:73:d2:72:99:f1:
         52:f7:21:2d:e6:21:4d:a9:ae:87:20:af:f4:8b:f9:ca:6e:90:
         59:07:1d:37:28:04:b9:ee:6e:2f:e0:23:1b:d1:5c:80:ba:45:
         42:2d:7b:98:48:02:39:4b:a7:92:25:38:e4:fa:54:5f:2b:3f:
         1a:d9:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----