Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft
File:                     ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json)
Hash identifier:          bbIvAHzXuu/QV0qxwpSeomru1tBsEV7c7He8Sen3Uas=
Subject key identifier:   B4:80:B1:8E:79:71:C2:0C:8C:1C:D8:46:B1:BB:F8:7B:82:76:C1:6C
Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42
Certificate issuer:       /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft
Manifest number:          0148
Signing time:             Fri 31 Jan 2025 03:30:21 +0000
Manifest this update:     Fri 31 Jan 2025 03:30:20 +0000
Manifest next update:     Fri 07 Feb 2025 03:30:20 +0000
Files and hashes:         1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: 6EBeE+vp6pEiuCpMX3jX22D45fqRtsVnEteRtoXARig=)
                          2: AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (hash: XG0ognbrHuDFVvw75BGHMdtpiHu/beUvd7TsChbHkCg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42
        Validity
            Not Before: Jan 31 03:30:20 2025 GMT
            Not After : Feb  7 03:30:20 2025 GMT
        Subject: CN=679c43cd-50ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:41:63:9c:1f:0a:24:af:4a:a0:db:eb:92:
                    37:1a:43:56:e5:d8:e4:a8:59:a7:a0:3b:2b:7e:9c:
                    0b:57:82:47:d3:10:e7:ae:bb:67:86:d1:f3:5b:99:
                    eb:1f:5c:cc:83:3a:25:6a:3a:81:19:4b:2d:7e:2d:
                    bf:55:82:21:0f:b5:6e:f0:2b:78:cb:77:b4:52:c1:
                    e9:5a:cf:64:42:ca:af:c5:57:4e:ab:f3:6f:6f:1d:
                    7c:50:1b:48:b8:34:b5:01:ea:61:d8:bf:69:06:d2:
                    fa:bb:27:05:64:8b:3a:b3:bd:f5:73:ff:01:38:5d:
                    e1:e9:f3:eb:4f:2b:f9:54:e6:60:9b:d0:bc:b9:49:
                    11:c7:0c:e0:e2:c8:ec:f8:a5:52:b4:d0:ff:7c:ec:
                    2e:96:37:23:9e:b1:ca:2b:87:d6:aa:a2:c6:c3:97:
                    1a:50:6b:42:7c:2f:75:8a:5f:8f:da:b9:23:7f:1b:
                    01:a3:2e:fa:1f:51:32:89:c1:fd:a1:b7:10:a2:0f:
                    0a:fe:8f:7c:84:8b:dd:18:e9:fe:1a:35:6c:87:8d:
                    bc:e3:c0:02:04:fd:e7:64:ff:28:72:01:0b:b0:74:
                    da:63:ec:64:8b:b8:d9:98:62:aa:f8:d9:84:9f:02:
                    87:b0:1f:ed:3f:71:25:52:95:c2:bf:0d:14:d0:92:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:80:B1:8E:79:71:C2:0C:8C:1C:D8:46:B1:BB:F8:7B:82:76:C1:6C
            X509v3 Authority Key Identifier:
                keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c1:43:80:ac:32:ed:87:d9:51:84:43:01:fb:b1:20:cb:7e:
         8e:b9:a5:56:01:70:66:41:73:5c:18:24:db:07:48:a2:d7:d3:
         36:93:42:3a:3e:0f:55:a9:d5:ba:a5:04:92:ab:8e:f0:5b:f6:
         a3:ba:3b:1b:04:57:ad:52:49:c0:3c:35:77:d9:46:b5:0c:41:
         2c:b7:85:04:a2:14:e8:4f:f4:50:bd:f6:71:17:28:bf:e0:9a:
         7f:d1:fc:1e:0c:06:fc:7f:a3:e1:76:1e:dc:74:2b:45:9e:8e:
         19:a4:02:f8:a4:c3:e9:ac:99:e6:e9:2d:ea:dd:8d:69:1b:e7:
         da:d5:b8:fc:d7:1d:a1:88:2d:76:ff:15:c4:56:df:30:0f:30:
         90:8a:69:b3:78:cd:04:3c:fd:5c:2c:3e:d0:c7:f0:bc:b9:0e:
         d6:d5:a8:13:62:b8:d5:81:f8:c6:43:fe:bc:8d:8d:cc:c1:5b:
         f1:71:0f:db:2a:0d:3b:66:a6:fa:8c:86:23:c2:26:14:e8:96:
         ff:57:50:ff:e3:dc:19:b4:4f:23:01:f8:0a:fa:88:19:27:65:
         20:2e:32:7e:cd:fa:5a:4e:0a:63:da:7d:b8:c0:5f:09:bc:e8:
         06:26:9d:aa:72:70:17:9f:42:69:f4:74:ce:68:7b:fc:d0:3a:
         ec:9f:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----