Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
File:                     xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json)
Hash identifier:          MSC2iMBd77IhMD/e8PWQS0vnrYiMQHTd2Eoq1kEuZoU=
Subject key identifier:   5F:2C:5D:CD:14:8E:EA:2D:47:A3:B7:F7:36:0B:34:26:D5:5B:04:15
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Certificate issuer:       /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial:       03D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
Manifest number:          03B4
Signing time:             Fri 31 Jan 2025 00:48:22 +0000
Manifest this update:     Fri 31 Jan 2025 00:48:21 +0000
Manifest next update:     Fri 07 Feb 2025 00:48:21 +0000
Files and hashes:         1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: cl+3CYEIj2SEIj+PdeGBnwElWsnV9j4L5QPi+RFDmq0=)
                          2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: AN4hBiZx1+tVHoaN/LazZ9dbBGKvWOUI1wRt7z4HbB0=)
                          3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: 2ORnkhzshra5gFpyLproOPD3/repbchwTxkXJLvaYUk=)
                          4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: wgX+EMzgoKfrAVdDz/48mCSLSDU8m2MWUYcABpMkNSU=)
                          5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: Hb+mhjOnUiRcLYwNjTfwnpK/Ky2Nkaju8DZXLfXW14s=)
                          6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: Cfsk+t84ibLo+fkUEG7hLT0dawrjqPaFJly7xspE4TQ=)
                          7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PGtYjaqkpIprbzlxtBJWh83LZS83/aciT2SXNSejhqM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
        Validity
            Not Before: Jan 31 00:48:21 2025 GMT
            Not After : Feb  7 00:48:21 2025 GMT
        Subject: CN=679c1dd6-6c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:b5:c9:dd:a0:2f:f8:40:82:1e:ba:4c:2a:
                    64:87:9d:5e:37:e8:fa:ce:11:c6:a3:b5:74:d4:2b:
                    62:1b:d1:2f:93:3d:0b:a7:83:57:b0:83:ed:7a:13:
                    f1:55:02:1d:88:fb:db:56:1d:48:5d:42:4b:80:20:
                    2d:fd:0f:5d:5d:d1:68:63:6d:da:ae:ac:18:c5:62:
                    69:aa:ee:d6:35:a2:b3:21:c6:13:0c:61:5e:79:54:
                    6d:84:24:3e:95:e7:2a:64:e1:44:5d:47:13:57:79:
                    a1:77:56:88:e4:2c:12:35:37:7c:1b:b0:c7:9a:ad:
                    c0:17:0e:a0:bf:a7:58:84:08:84:de:65:9b:08:3d:
                    e6:8e:12:ef:ad:4c:97:f9:46:3c:fc:44:e9:91:10:
                    71:b1:72:85:56:a1:7d:c0:fa:fc:54:91:6a:25:c3:
                    a5:08:0d:af:da:b6:8a:ec:97:0e:1e:17:08:7f:13:
                    88:3c:50:44:83:46:61:f4:cc:9d:53:ce:ff:69:12:
                    00:4f:70:fa:f5:ba:23:4b:b7:08:6f:78:38:a3:1e:
                    d5:e4:2c:bc:51:03:6b:9c:dd:72:d5:0b:ae:c4:a4:
                    73:99:b6:5e:a3:c6:21:17:ad:9f:f1:e1:8a:b3:f6:
                    11:f0:38:14:ee:5b:24:83:c6:9d:44:53:68:9e:59:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2C:5D:CD:14:8E:EA:2D:47:A3:B7:F7:36:0B:34:26:D5:5B:04:15
            X509v3 Authority Key Identifier:
                keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:58:44:c9:1f:74:65:88:a7:73:a8:a5:21:a5:95:96:59:21:
         2b:fd:db:d0:59:7c:ff:3c:32:4c:99:6a:c5:e3:83:50:d5:2d:
         cd:4b:7a:49:d5:ea:48:5f:d2:4b:73:bd:78:7d:67:75:f2:1f:
         61:7a:e8:dc:5a:df:32:e4:26:9a:56:6b:ff:c8:fb:a5:01:eb:
         29:b3:1e:65:65:05:7c:b1:61:ad:a2:96:0d:7c:57:66:ec:ba:
         32:9d:d7:a7:2c:0c:74:df:6c:6e:8e:87:03:fd:c2:fd:04:1b:
         7d:40:18:60:81:91:d1:59:2b:55:05:7d:15:33:6e:ac:f4:ca:
         22:ea:9c:4e:26:dd:27:cc:ee:7b:f7:d5:4f:23:71:03:1d:aa:
         88:a6:34:a3:90:81:90:f5:1b:ba:8e:70:7e:c5:6e:c4:d0:10:
         52:34:05:91:30:39:30:06:21:ae:2e:e3:93:1e:4b:0a:46:e8:
         fb:af:4d:58:5d:3e:a1:e2:f1:41:98:72:67:31:62:5e:bd:77:
         47:9a:a9:6c:6d:46:24:a7:de:4f:39:3d:ca:16:6a:23:66:a9:
         cf:21:55:4c:9a:69:30:b3:b7:47:73:a4:68:ed:6b:d5:17:4a:
         ae:c2:81:ce:49:91:f0:1b:7a:c5:4d:8d:77:01:9d:4e:7f:a8:
         cd:8f:d5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----