Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
File:                     XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json)
Hash identifier:          Imr4f6hhVvncZuhl/Qf/hdGVNunf4uZbTIqFb2yBAEA=
Subject key identifier:   62:50:90:69:BF:0D:CE:4C:AF:5E:33:FC:3C:6F:42:82:74:A8:87:8C
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Certificate issuer:       /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
Manifest number:          0234
Signing time:             Fri 31 Jan 2025 02:01:40 +0000
Manifest this update:     Fri 31 Jan 2025 02:01:39 +0000
Manifest next update:     Fri 07 Feb 2025 02:01:39 +0000
Files and hashes:         1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: 6HSn1ipxysdIljvdyuWNFH0m+Wvs0eqjWgBPw+QohRc=)
                          2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: jBBbANmuNZVxVrVIl9nOmJTDHehO/z/tNRNLXj+1oS0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
        Validity
            Not Before: Jan 31 02:01:39 2025 GMT
            Not After : Feb  7 02:01:39 2025 GMT
        Subject: CN=679c2f03-4679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:c5:83:b8:1f:01:c4:b4:97:be:43:bb:dd:
                    43:15:63:7e:b8:18:80:5b:94:95:f7:9a:2e:b1:67:
                    29:ed:3b:26:e2:2d:a0:31:6b:95:36:77:c4:14:eb:
                    86:e6:6f:96:84:87:1c:df:46:3d:9b:e3:19:2e:b5:
                    ec:ee:de:c3:c9:28:ba:22:3b:bc:9b:4e:83:fe:88:
                    e2:8c:a4:b0:ba:f7:f7:c7:b4:13:82:65:de:34:d1:
                    64:00:4c:c6:4d:bf:cb:f5:1b:a8:21:c9:00:a3:a1:
                    e6:6b:ee:f6:81:5d:9c:82:cd:2d:fd:8d:3f:07:76:
                    f6:e4:69:45:b4:4e:9e:14:fa:a5:a6:b1:c4:34:f9:
                    3f:83:85:b5:76:31:b1:76:35:60:0d:e7:d8:63:96:
                    a3:a0:dd:dc:be:63:0f:de:17:02:17:4c:b8:75:98:
                    af:e1:b9:d9:3e:f1:c4:b9:b4:38:f0:1a:38:a0:7f:
                    5c:ae:0e:56:d1:0f:9b:85:f0:fb:09:7c:bb:91:ca:
                    3e:2d:eb:aa:69:6e:2b:64:3f:80:99:68:0c:d9:db:
                    bc:ff:73:01:f9:ac:45:3b:d5:44:f6:ae:9c:49:0d:
                    23:ab:f0:7e:87:1f:99:70:48:c7:e2:a7:bd:5b:d9:
                    7a:80:e1:b2:88:2d:ba:3a:7d:b9:56:a0:2b:c9:70:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:50:90:69:BF:0D:CE:4C:AF:5E:33:FC:3C:6F:42:82:74:A8:87:8C
            X509v3 Authority Key Identifier:
                keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f5:7f:3f:ae:81:b0:7c:64:36:74:76:4d:d2:2d:74:3b:1b:
         3b:0d:30:d3:1d:42:4d:4b:43:8a:9f:47:63:32:6c:74:31:18:
         65:98:db:65:5d:39:7f:5f:46:21:fe:88:67:38:f8:ea:6e:da:
         ef:1f:f3:9d:a4:62:9a:dc:71:68:50:33:70:dd:9f:32:94:ba:
         7c:3e:c9:d4:55:1c:4a:a8:15:16:e8:0e:6b:bf:d2:93:6c:8c:
         52:d5:93:39:9d:4b:7c:d8:91:f5:83:89:bb:33:d1:38:a7:73:
         7e:f7:1c:29:22:70:5c:e5:29:6f:6b:79:49:3c:63:27:a1:13:
         89:6a:1a:7b:a4:83:ea:87:5f:55:91:d4:4b:10:86:f5:fa:44:
         3f:1a:e9:b3:e3:7c:d5:bd:ee:ad:f7:a4:94:e3:47:ee:c4:32:
         5d:d4:b5:c8:9c:bf:86:39:0a:f4:8d:37:78:20:1e:db:e4:32:
         b0:b5:88:28:e2:a7:4c:7b:88:7d:e5:d0:0b:29:e7:5f:e3:7c:
         61:7c:5e:d7:1d:f1:50:98:8a:e9:5c:cc:3a:b4:d3:df:cd:f7:
         2a:37:29:23:c5:35:70:7e:00:4e:2b:44:28:8b:00:cd:af:d1:
         d0:9c:3a:72:a5:da:66:a4:75:82:53:65:ab:4c:82:64:cf:f1:
         21:ba:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----