Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
File:                     CKtUearwyEilFC1v5NyZFitFwzc.mft (raw, json)
Hash identifier:          nQ/EZp54b5ijpjI0inBmSn4SvFu7LdDQvvMwT7flVQE=
Subject key identifier:   87:1B:AE:76:0E:55:83:37:37:E7:E6:FA:C0:56:EC:A6:A8:99:A2:3C
Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
Certificate issuer:       /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
Manifest number:          5D
Signing time:             Fri 31 Jan 2025 01:09:05 +0000
Manifest this update:     Fri 31 Jan 2025 01:09:05 +0000
Manifest next update:     Fri 07 Feb 2025 01:09:05 +0000
Files and hashes:         1: CKtUearwyEilFC1v5NyZFitFwzc.crl (hash: y448kaVXjxRuqP9Jt69SmksTqktzFAqguDftB8evZPU=)
                          2: 710957A8559411EFA07E1C5AC4F9AE02.roa (hash: Mlxt5emszaeJ3fsjQmXEkAwHWwex3p02yZAD82J2nVs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
        Validity
            Not Before: Jan 31 01:09:05 2025 GMT
            Not After : Feb  7 01:09:05 2025 GMT
        Subject: CN=679c22b1-6dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f4:1c:d0:de:e3:14:bc:e2:7f:3d:63:37:8e:
                    c7:74:97:47:ab:a8:b9:e8:f0:f7:a0:fb:9c:49:b6:
                    99:3c:ad:62:91:41:4c:9c:7f:05:df:05:28:70:b2:
                    e2:d6:d4:8c:ed:84:62:16:46:4d:b7:89:8c:26:dc:
                    a8:68:c8:a5:ea:2e:ad:2e:1c:35:84:e0:1b:b7:8f:
                    49:11:31:75:27:9a:a7:fb:24:62:ec:75:2e:a7:ac:
                    1c:27:41:9f:84:6f:75:b5:bd:05:a9:0a:ba:67:0a:
                    c9:2a:af:5a:38:59:e2:2d:69:2f:8c:ca:6b:48:83:
                    19:f5:06:b5:db:79:f1:b0:65:1a:c4:63:ff:13:ff:
                    28:d5:e3:cf:ff:cd:f5:3b:fd:27:e6:6a:e7:e0:bd:
                    b0:52:8a:04:44:2b:ae:02:e9:83:7d:5a:b2:60:c7:
                    54:e7:34:a9:0d:7e:75:5a:ea:37:b2:77:d5:98:30:
                    26:7a:6d:b4:a7:69:0e:c5:cd:ce:65:05:a8:5b:77:
                    b6:86:22:40:87:7e:1c:49:2b:05:b8:dc:c2:15:4f:
                    c6:be:6b:98:f3:cc:58:96:c9:a6:cb:b9:94:1e:20:
                    98:7f:7e:97:22:3c:fa:ad:55:34:ca:91:8a:cc:5b:
                    ce:2c:b8:1c:e4:2f:64:37:a6:fa:02:c1:33:40:42:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1B:AE:76:0E:55:83:37:37:E7:E6:FA:C0:56:EC:A6:A8:99:A2:3C
            X509v3 Authority Key Identifier:
                keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:4e:2e:14:66:bc:bc:48:04:be:60:a4:60:c9:b9:ae:35:
         67:d7:c6:a3:fd:cb:fd:cf:95:df:ea:90:5c:f6:47:69:87:d2:
         0e:51:52:8e:85:d3:9f:b6:33:65:10:3a:b0:dd:74:fc:0c:98:
         20:d5:31:5b:23:10:32:06:2c:56:00:3b:bc:99:f3:9a:c9:c5:
         a4:f7:8a:89:7c:3a:98:3c:48:ba:a6:94:42:dd:f3:23:26:4b:
         9e:94:52:46:2a:5b:b4:d1:cd:86:8a:84:cd:11:46:c1:b1:2d:
         55:61:fc:a4:2d:96:05:b5:42:a0:75:b4:7c:4c:9e:12:c1:23:
         76:28:c0:50:c5:50:79:28:0d:62:0d:44:5a:8b:d1:a4:ed:de:
         af:89:9e:9a:4e:46:ea:57:7c:e3:a0:0b:b7:70:1d:e6:16:55:
         fb:a0:11:0e:6e:94:75:62:ac:31:e1:17:9b:f6:4e:8f:12:06:
         69:da:8d:a8:74:d6:73:68:1c:76:dc:e6:f3:17:de:98:52:9f:
         cf:02:b7:79:81:67:9f:03:ea:bd:b8:ef:9b:37:65:0f:c8:4f:
         1e:ad:69:f9:d2:6e:30:66:05:70:ac:75:2c:27:fa:e2:57:d1:
         01:87:83:2a:a4:8d:61:cb:2b:75:3c:d0:bc:ed:6b:0b:02:f9:
         82:ca:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----