Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft
File:                     AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft (raw, json)
Hash identifier:          AqNjBFHwWVkkX3Jxvdu8wHFdO4akuhLqy5tuOxv0fkA=
Subject key identifier:   D1:8A:54:98:E4:DE:17:DD:70:9B:96:FB:28:ED:37:40:68:3A:C7:A4
Authority key identifier: 00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4
Certificate issuer:       /CN=A9170DF0/serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft
Manifest number:          0116
Signing time:             Fri 31 Jan 2025 03:58:00 +0000
Manifest this update:     Fri 31 Jan 2025 03:57:59 +0000
Manifest next update:     Fri 07 Feb 2025 03:57:59 +0000
Files and hashes:         1: AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl (hash: 1e8TZqE2xqc6TCcItuOGzutRXNEqgrppEqzWpTiylCo=)
                          2: B022AC18368811EEB1BFE56AC4F9AE02.roa (hash: z6BHSk4cb9I8/kB9JR0TRRNQXU/qOZQ+pN/Lst+leW4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170DF0/serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4
        Validity
            Not Before: Jan 31 03:57:59 2025 GMT
            Not After : Feb  7 03:57:59 2025 GMT
        Subject: CN=679c4a48-bc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:5f:7a:1b:06:68:71:93:fd:a0:6f:2b:5d:
                    11:51:60:3f:e5:54:d3:f1:ec:18:24:eb:cf:18:12:
                    bb:52:ce:d0:38:d4:d2:31:3a:6d:47:d2:d8:35:e6:
                    dc:2c:af:1c:a5:ca:b8:df:9f:41:e6:58:be:81:43:
                    2e:f5:a9:77:f5:cb:d3:fc:43:b8:b3:41:65:8c:a2:
                    a9:ea:bc:ff:43:88:e3:ac:18:eb:83:a5:a9:ad:5f:
                    a4:9e:d8:e5:6a:ea:f8:de:ac:bf:1c:cf:0a:17:68:
                    80:a2:66:0e:2a:75:d6:69:65:a8:6e:b4:2b:68:6e:
                    83:7e:42:c2:3b:7d:3f:d7:46:b9:30:d0:6f:59:3d:
                    8d:fe:4b:d2:40:06:d3:e7:07:1f:9f:b0:0b:b6:52:
                    fb:f7:58:d3:c1:b9:c9:e8:9c:02:49:0f:81:ec:26:
                    23:5e:09:88:dd:f6:aa:30:06:3e:85:b3:bf:68:ce:
                    44:e9:e0:94:6e:dc:cd:76:56:54:c3:50:4d:86:f7:
                    46:1d:dc:dd:ec:6e:8a:c1:02:27:2f:78:5d:a7:30:
                    c5:cb:fe:86:20:a8:39:0d:b0:d9:a4:34:e7:0c:8e:
                    6c:7c:21:df:71:cc:3a:42:aa:fb:d9:d6:2b:f0:e8:
                    e4:fc:f4:11:c2:42:4d:e6:3f:a9:b5:ec:2f:b6:52:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:54:98:E4:DE:17:DD:70:9B:96:FB:28:ED:37:40:68:3A:C7:A4
            X509v3 Authority Key Identifier:
                keyid:00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:04:c9:b1:4f:99:9d:f9:df:24:a1:f9:ff:74:74:38:57:27:
         49:f8:f3:1c:07:29:b7:8d:f3:ec:d6:29:93:cc:54:b5:e4:46:
         0a:33:29:4d:f7:f7:73:58:77:c1:9e:5e:05:17:60:f3:96:fe:
         90:5c:c8:b1:08:7f:72:f7:b7:15:c0:55:d2:81:91:1b:d5:de:
         c2:37:49:2c:45:c4:e3:ca:1a:f7:28:ca:6a:a6:ea:a7:fd:2d:
         7b:00:23:54:d6:65:b6:31:a2:6a:37:e9:d9:d3:6d:7c:52:93:
         f0:50:1b:31:d6:80:21:9e:a1:2b:22:4e:10:f9:cc:20:91:81:
         f4:4c:52:43:62:6f:ba:fc:2c:9e:43:1f:63:a8:92:02:56:cd:
         f7:77:d0:e4:b6:71:2b:6c:3e:84:ee:d0:57:06:60:bb:61:db:
         27:11:db:20:32:a1:5a:96:19:d7:7a:2b:4d:84:b7:cc:83:73:
         9a:c7:05:82:b3:8c:65:da:54:14:18:e6:07:ab:db:cd:c7:70:
         28:3c:99:cf:ca:2d:c2:48:8d:fe:d6:62:1b:8b:f6:87:67:6c:
         41:77:c0:37:ba:6e:33:a0:e7:6c:75:0d:bf:51:ba:41:0f:7c:
         88:5d:fe:98:e6:dc:41:ba:0a:e3:0d:3b:17:e9:93:6c:e0:54:
         1f:7e:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----