Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
File:                     AflcxfCmuelnxvjzbH9k1CRLrHI.mft (raw, json)
Hash identifier:          ib2P4B2lwsA6YqWBxfsQnGcZ5OJ7hMf/w8jIpecc/7A=
Subject key identifier:   BA:6B:82:11:59:52:62:A5:B4:DD:D4:09:5A:E5:47:75:08:C3:3E:B4
Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
Certificate issuer:       /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
Manifest number:          01C9
Signing time:             Fri 31 Jan 2025 02:19:36 +0000
Manifest this update:     Fri 31 Jan 2025 02:19:35 +0000
Manifest next update:     Fri 07 Feb 2025 02:19:35 +0000
Files and hashes:         1: AflcxfCmuelnxvjzbH9k1CRLrHI.crl (hash: c68l/y0GwpqZU8SRJVgTYjUU4rm8UgdwSDtwpZJWozU=)
                          2: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (hash: 8tU0+bWbTseOr25wJKvheZneGGhgRMUkg1uHcFDydtY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
        Validity
            Not Before: Jan 31 02:19:35 2025 GMT
            Not After : Feb  7 02:19:35 2025 GMT
        Subject: CN=679c3338-d0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:53:8c:19:50:9a:a0:06:d8:3d:a0:cc:3a:
                    93:b1:24:a0:22:24:36:c1:d4:5f:05:69:12:4d:16:
                    e1:48:69:e7:a6:48:ed:d0:31:6f:52:44:3c:ce:57:
                    f4:a6:eb:f4:9c:9a:9e:47:a4:18:86:14:e0:99:d4:
                    87:17:78:94:a6:6b:eb:66:c8:ba:53:1f:d2:27:a8:
                    3f:25:a0:a5:ae:88:b2:ea:4b:68:12:43:d6:8f:3c:
                    c2:04:fe:45:ee:bd:35:3b:91:c4:a0:9a:c6:37:cb:
                    dd:21:bc:e7:4c:ed:8a:97:18:5c:04:8d:7a:42:ee:
                    55:b5:f7:fa:dd:3c:c4:a2:2d:ed:70:5c:9a:3c:8a:
                    4f:a7:23:f6:a0:5f:72:5c:60:40:82:39:12:96:35:
                    ab:a7:f1:b0:8c:f4:33:03:c4:91:c8:cd:29:10:21:
                    15:93:da:2b:c8:e4:41:f3:d9:27:04:c9:74:69:9c:
                    6b:88:01:35:a6:52:df:f3:4d:28:43:1e:f9:32:4a:
                    bd:63:a1:98:e2:cf:5e:8a:50:19:2e:75:bb:0a:79:
                    c1:f1:e5:5a:a6:bb:74:6e:8a:95:f1:d1:fa:5f:6d:
                    bb:fb:f7:c1:c7:44:32:b9:f4:cf:25:bb:77:03:9e:
                    2c:88:3d:c5:46:17:26:5d:1e:83:61:69:2f:aa:dc:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6B:82:11:59:52:62:A5:B4:DD:D4:09:5A:E5:47:75:08:C3:3E:B4
            X509v3 Authority Key Identifier:
                keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f6:d9:87:3f:ec:d3:36:13:fa:c6:81:df:66:ed:d9:62:df:
         6e:29:5e:8b:2d:87:aa:40:1d:ae:d7:ac:4c:16:22:ef:ed:ab:
         0c:2d:6d:10:25:7a:13:1f:ed:b3:9e:70:71:17:05:71:c2:a0:
         09:e7:48:e2:db:e3:70:84:f2:6f:7e:c5:06:9e:6f:9a:6c:04:
         a6:ef:d4:d3:66:75:ef:cf:12:b5:15:43:af:33:4e:5b:9f:7d:
         20:94:e7:e3:23:b0:9c:e7:c3:e0:59:8d:a4:e9:ac:a9:e5:1d:
         45:33:db:d3:f7:02:61:ca:8c:86:f6:2f:54:27:f1:e2:6e:d9:
         36:09:99:57:06:8d:43:cc:be:23:af:55:f6:66:1c:86:60:de:
         d8:14:5c:15:c8:57:b0:9a:fc:92:3b:2f:0d:1c:6c:73:5d:aa:
         5e:2e:b2:36:96:35:e3:37:ad:95:15:5d:d0:d7:6f:e3:ca:0e:
         20:f6:8d:b0:47:26:e2:ae:30:c0:69:62:30:f3:00:24:21:3f:
         a9:f2:d1:ba:8b:a9:f0:59:e8:31:77:52:c1:83:e8:4a:e0:a2:
         c5:bb:e4:99:93:c0:a2:48:ff:e2:60:16:22:e9:d0:2c:bd:95:
         c1:c9:fb:75:50:21:a1:bc:0f:ae:64:78:40:d1:ed:0e:39:20:
         18:b8:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----