Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
File:                     iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json)
Hash identifier:          OJ82Su8QtspsXjD1g/wGApR7/4axjYgcs+a545xpBe4=
Subject key identifier:   91:09:E4:B3:6F:8E:DF:92:2B:80:4A:94:45:18:5D:15:5D:B3:FD:12
Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2
Certificate issuer:       /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
Manifest number:          01AD
Signing time:             Fri 31 Jan 2025 02:29:09 +0000
Manifest this update:     Fri 31 Jan 2025 02:29:08 +0000
Manifest next update:     Fri 07 Feb 2025 02:29:08 +0000
Files and hashes:         1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: YXy2arm6bw5TuiQ854l1i/lL1V65/MVh0fKoWDfC0WM=)
                          2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: i/snzsv5ugVK5M4wkOzh02txTFh9Vl9HyndyddhSqd8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2
        Validity
            Not Before: Jan 31 02:29:08 2025 GMT
            Not After : Feb  7 02:29:08 2025 GMT
        Subject: CN=679c3574-fa6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:9c:85:8c:e9:ac:ab:91:a9:ef:99:cf:32:
                    ab:46:b5:45:fe:cd:b2:39:e5:2a:ba:ec:4e:de:e8:
                    c6:35:94:f5:01:38:ac:14:a8:09:2f:1c:78:dc:be:
                    81:bc:a1:04:3a:ec:f2:3a:14:f2:01:ce:41:bf:ff:
                    40:98:51:f1:db:7e:0f:f8:20:69:81:34:6f:26:8c:
                    a1:7d:c7:e0:52:d6:71:6b:3c:2c:36:0e:21:b5:59:
                    9a:b1:8e:1a:a9:82:06:80:2b:5f:f7:da:67:49:70:
                    aa:d3:37:82:77:ea:18:22:cd:9c:4b:99:e2:fa:75:
                    19:f5:1a:6c:ba:c3:12:2c:c9:39:e9:44:c2:0f:d0:
                    62:d5:b5:e9:e4:2c:39:9c:40:7e:08:e5:ae:ac:a4:
                    c0:c2:09:8f:27:02:2f:67:e5:21:bf:fa:0e:e6:7f:
                    43:58:4e:f1:42:fc:ed:44:4f:a1:29:3f:e9:bb:44:
                    dd:cc:79:94:74:9b:75:f6:72:e8:8c:50:24:d5:81:
                    bc:75:e4:db:49:2b:03:73:f4:5f:03:d7:33:d3:36:
                    82:4a:71:f2:2d:00:59:ee:ba:4a:f3:f6:2f:15:bf:
                    96:57:38:d2:e3:03:da:b7:a2:30:4b:a2:b9:72:33:
                    aa:06:e9:13:0c:04:7a:31:ce:ec:4f:83:ed:1c:c2:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:09:E4:B3:6F:8E:DF:92:2B:80:4A:94:45:18:5D:15:5D:B3:FD:12
            X509v3 Authority Key Identifier:
                keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ea:50:46:51:16:f3:0a:89:40:fd:57:24:52:a9:f5:e7:28:
         8b:c5:8b:ec:30:36:3a:a1:db:35:80:04:b5:2f:ca:c6:39:1c:
         13:f5:97:5f:f3:9e:67:92:57:63:73:b0:3f:df:ad:c6:a7:11:
         e1:a5:a4:54:f8:39:f7:8c:ea:78:50:99:2f:3c:8b:46:68:20:
         f4:80:65:ae:0c:f7:57:ff:1f:03:43:eb:e6:0c:e5:ba:21:b9:
         e1:ef:76:33:d6:a5:7d:69:ce:3b:51:b7:7b:f1:8f:e1:8d:f4:
         6a:f0:ec:9d:a9:e4:96:e7:84:30:97:f3:9f:2a:31:7b:ad:f4:
         47:77:6f:c6:4b:d0:c8:69:37:da:6b:a5:ca:15:78:aa:fa:69:
         14:d1:fd:8b:4f:99:b1:2a:a0:9d:a1:94:d6:8f:fb:bb:57:16:
         64:8c:f0:8e:a3:28:86:27:a9:33:e1:0c:c4:74:ae:c9:3d:50:
         15:05:41:63:33:2a:60:83:3d:90:6f:f4:bb:4f:3c:21:15:fb:
         38:d7:81:dc:a2:ce:d2:8b:ee:2f:4a:2c:8e:24:b8:fb:aa:d8:
         ac:55:a5:47:f6:d0:06:b6:4a:1f:1f:61:2b:a8:9f:40:70:f3:
         49:32:cb:56:b4:12:39:42:d3:41:cc:a7:4e:f7:8c:d1:fd:7a:
         c1:1f:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----