Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File:                     4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier:          2ZXzEtCzt7F7zysf2lMHTBmaVba59XiMygZet87AHiE=
Subject key identifier:   7B:52:BD:CF:73:FD:83:79:6E:AE:18:4D:1A:48:E0:03:93:D7:68:33
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer:       /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial:       0752
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number:          0731
Signing time:             Thu 30 Jan 2025 21:47:00 +0000
Manifest this update:     Thu 30 Jan 2025 21:46:59 +0000
Manifest next update:     Thu 06 Feb 2025 21:46:59 +0000
Files and hashes:         1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: lcXaJUiI6SiMQhc6hBK8/wcXJyd31GE6JIZSz5u2xgU=)
                          2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 3/Y1r0LMBII6zW5USQairn62r7Znj5u8VXmSgbR98nY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1874 (0x752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
        Validity
            Not Before: Jan 30 21:46:59 2025 GMT
            Not After : Feb  6 21:46:59 2025 GMT
        Subject: CN=679bf353-31cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9b:a3:3d:d3:3f:a1:72:dd:26:39:36:23:a3:
                    34:31:3a:b5:56:c6:37:fe:82:81:4c:f9:6e:92:77:
                    6b:4a:15:04:6b:6e:c1:93:2c:d6:99:72:ae:e1:5c:
                    01:90:f9:47:66:95:ea:1b:78:aa:77:d8:25:94:2c:
                    db:dc:61:43:9d:ca:19:f1:0d:81:23:c6:a2:c9:10:
                    32:71:cf:ee:06:25:a3:4e:41:f5:7d:95:01:6e:4c:
                    5a:9d:7a:89:05:8f:58:2b:de:77:42:10:83:d0:8e:
                    21:5f:03:fc:08:ff:ce:bb:09:75:7b:88:e4:00:94:
                    80:aa:39:d4:18:51:4f:a9:bd:84:06:d4:f0:5d:d9:
                    5b:dc:aa:3a:38:d7:e6:94:d5:dd:bd:e4:ce:97:e7:
                    a5:62:6e:da:24:98:70:c4:42:ff:01:8b:8d:67:11:
                    ee:4e:96:8f:ae:4d:ac:20:71:56:3e:2d:c6:da:61:
                    26:21:d3:13:91:0a:ae:23:1b:a8:e3:1f:bc:f7:db:
                    f3:f7:4c:c4:7a:1b:0b:4d:28:05:09:12:80:30:c6:
                    00:17:6e:75:1b:b2:b8:dc:f1:6a:02:05:a9:bf:3f:
                    b9:23:93:42:80:56:e7:45:da:d1:88:ae:d7:15:c8:
                    de:f3:44:4e:a1:2a:79:54:32:d8:82:e0:00:a5:35:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:52:BD:CF:73:FD:83:79:6E:AE:18:4D:1A:48:E0:03:93:D7:68:33
            X509v3 Authority Key Identifier:
                keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:e8:d4:22:08:95:24:d0:83:7b:60:03:fd:10:30:c0:7a:
         6f:60:41:b5:a9:b3:66:e8:c2:5a:2b:f2:2e:78:bd:2e:89:9f:
         f0:ae:f3:6a:a0:2e:10:bf:b6:ab:0f:19:4f:40:dd:89:f8:b4:
         38:dd:07:f4:8c:62:79:bc:00:2c:e4:17:ba:15:2d:5e:61:22:
         50:78:65:78:47:62:38:f8:8a:41:cf:bd:aa:58:8b:ba:4a:99:
         e4:35:69:b5:6f:b1:e1:98:28:72:9a:d2:c1:38:ff:f2:88:4e:
         d1:de:a4:87:65:3e:87:e6:e0:53:e7:0b:26:ad:85:28:6f:d8:
         3c:af:b6:73:57:12:28:2d:6c:16:fc:e0:93:65:ae:1d:ac:9a:
         25:14:84:01:99:91:e3:a4:1e:ad:d0:bd:db:df:71:28:67:f4:
         39:46:ac:c8:f3:6d:a5:82:5e:a4:cc:23:3c:cd:d3:9b:3d:c9:
         f2:af:d0:08:5e:3b:11:a7:0b:e5:5e:b9:72:10:31:c0:b5:86:
         0a:90:f8:f8:92:07:35:77:81:cb:7a:f9:70:74:56:dc:35:c4:
         7e:5a:fb:23:a7:27:45:26:ad:16:d4:7e:84:02:cb:87:95:26:
         2c:bf:7e:63:d5:8e:ae:68:ca:1f:9e:78:c0:aa:40:8f:dc:c1:
         51:49:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----