Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
File:                     cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json)
Hash identifier:          ki/CjGvC9wCqusg7jdZdpGJFm2axLPNu/X+vyCqFP5c=
Subject key identifier:   49:82:06:34:88:03:36:5A:55:F9:CD:67:3B:C1:79:17:3B:26:B5:1F
Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
Certificate issuer:       /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500
Certificate serial:       0609
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
Manifest number:          0600
Signing time:             Thu 30 Jan 2025 22:53:18 +0000
Manifest this update:     Thu 30 Jan 2025 22:53:18 +0000
Manifest next update:     Thu 06 Feb 2025 22:53:18 +0000
Files and hashes:         1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: wecDLIU9U3PbhowE8a47/6MLjeFh7u5e60uB4kXTxWY=)
                          2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xnj1+DqNRGp1sU91Z+zGlbx4vpo9U2+YWkznSk4BLXI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500
        Validity
            Not Before: Jan 30 22:53:18 2025 GMT
            Not After : Feb  6 22:53:18 2025 GMT
        Subject: CN=679c02de-ab62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:ac:a6:31:4c:18:64:60:25:cb:35:66:19:
                    e4:1c:84:33:9f:01:39:a6:7d:ba:ee:c1:cd:f5:5b:
                    63:a7:d7:e4:81:e7:4a:0f:b1:8a:ba:ff:5e:af:0a:
                    a2:7a:58:e6:21:bf:93:3b:a3:5e:8d:43:85:30:16:
                    b8:b3:de:b2:d3:0a:14:f4:a4:b8:b3:25:39:97:73:
                    7a:f5:5f:1e:17:26:0b:4c:18:d6:b4:6f:2e:d2:ad:
                    9e:29:4c:b7:8f:4d:c7:a4:5b:d4:b6:ab:4c:3c:8d:
                    a0:1f:14:22:5b:c7:43:a3:b3:47:8d:f9:7e:8e:ad:
                    21:11:7d:cb:7a:ce:c0:4b:94:c2:c9:ed:56:46:a3:
                    b1:5b:11:42:4b:76:9d:36:04:f5:06:6b:48:db:ba:
                    82:47:c4:4e:25:2d:ab:1b:3f:2a:b8:c9:d9:07:b6:
                    00:1c:d4:d8:8d:a0:f0:f9:0f:76:65:bf:a7:5c:58:
                    02:82:95:1b:1d:b3:ce:be:27:ee:b4:bf:4f:4a:23:
                    62:5b:fa:46:b6:37:2a:fb:50:5c:7c:75:1e:e0:c2:
                    42:80:0c:0d:f6:dc:95:3c:5a:1a:00:d8:4c:90:82:
                    82:b1:a1:b9:7b:17:ff:a6:33:fc:cb:fd:f6:23:ac:
                    21:9d:09:91:ba:38:3a:11:1d:0e:78:fa:6d:f4:ba:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:82:06:34:88:03:36:5A:55:F9:CD:67:3B:C1:79:17:3B:26:B5:1F
            X509v3 Authority Key Identifier:
                keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b3:46:2e:73:19:07:15:53:f4:ff:10:5c:47:b6:4d:9e:d4:
         ae:f3:57:1b:3b:46:7b:8b:02:0a:82:b4:52:fa:2e:d2:8b:31:
         6c:32:6f:a4:09:18:a7:79:4d:4c:04:a3:e5:c4:7d:d2:aa:a9:
         50:e5:d3:20:d3:49:4c:6b:51:ad:12:a6:ff:13:42:dd:80:59:
         9a:1a:08:85:6b:a1:66:01:71:27:da:dd:08:e1:a2:8f:44:41:
         15:cb:f7:f6:fb:9a:5f:3d:92:93:63:42:14:6b:70:00:c1:82:
         87:50:59:6a:44:21:cd:2a:29:b9:dc:ac:1a:c7:47:d7:44:cd:
         da:a2:50:40:7e:7c:5d:75:f7:80:9a:5f:54:7b:da:29:22:d2:
         5a:62:2e:a0:5f:b3:c3:ff:71:39:fd:53:f0:43:7b:fa:87:9b:
         9d:4c:73:f8:67:f5:f7:1d:33:f9:01:90:7f:5c:9b:91:da:e1:
         40:22:d1:af:b1:12:4f:b7:0a:0d:63:02:0b:ec:4e:7a:72:e4:
         66:80:88:65:df:b4:99:98:91:09:35:8e:8e:97:c2:1a:23:6f:
         d8:ec:60:20:f0:ac:83:e4:07:3e:e4:9f:1f:ca:96:3a:1c:6b:
         0b:50:fc:0e:c4:ae:0f:8b:de:81:a6:b8:bb:a0:80:b6:6e:28:
         f3:63:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----