Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
File:                     5sRskdEtWFoSsFVpYh3uGtP4kI4.mft (raw, json)
Hash identifier:          5xlsYMDQ63ed8tZRK53MkduSd2z6sbDxmNwEwAdT6vs=
Subject key identifier:   61:4A:62:E6:06:F6:C7:19:C1:95:2A:F5:00:68:81:09:EB:16:2C:6D
Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Certificate issuer:       /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
Manifest number:          F1
Signing time:             Fri 31 Jan 2025 04:26:15 +0000
Manifest this update:     Fri 31 Jan 2025 04:26:14 +0000
Manifest next update:     Fri 07 Feb 2025 04:26:14 +0000
Files and hashes:         1: 5sRskdEtWFoSsFVpYh3uGtP4kI4.crl (hash: c4Gxr0qys3jk02M+JoMBJm1LkgOzWILvpN7Tj46tG1s=)
                          2: 1B299892726F11EEB1217365C4F9AE02.roa (hash: 6cDYRuNREDOcfjp20jGUwg25me6jxHxjZr5vSBlmhG8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
        Validity
            Not Before: Jan 31 04:26:14 2025 GMT
            Not After : Feb  7 04:26:14 2025 GMT
        Subject: CN=679c50e7-b36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:68:14:9f:6f:84:80:ba:c3:41:ba:93:3f:e6:
                    85:0d:ce:61:9e:d7:ef:ea:3e:b2:2e:cb:6f:b0:3d:
                    be:9f:05:2a:8a:20:e2:a6:2e:df:3d:67:23:79:0f:
                    83:d7:a1:ff:cb:b9:6d:3f:56:78:e0:6c:86:ef:1f:
                    d3:24:90:b6:23:56:cd:72:ba:63:17:66:e2:61:30:
                    54:58:ef:80:5c:95:2c:fe:c5:76:64:4a:7d:f8:c8:
                    c1:de:28:4f:1f:8f:98:ff:3a:57:4b:23:36:b6:bc:
                    8a:ca:88:10:dc:ce:80:30:a7:fb:74:09:60:a4:38:
                    de:42:f1:69:fb:b0:ad:97:a3:86:31:07:0b:1a:bf:
                    c8:8b:bf:22:c0:c1:f1:67:3e:e2:1f:3c:bb:16:cc:
                    b7:d3:1c:9e:22:8b:0b:db:76:ca:b1:c4:c0:34:cf:
                    8e:b3:e0:37:e7:b1:f8:e7:30:1e:f1:5d:9b:6f:52:
                    d4:cb:a0:3a:34:13:25:69:ab:a2:4c:e7:96:7a:5b:
                    56:88:4d:6f:30:41:0b:62:02:25:fc:35:2a:46:3d:
                    6b:ac:42:58:e6:46:6f:8b:15:8f:09:89:91:19:17:
                    b8:b0:6b:71:21:b3:1f:14:84:e1:ea:6f:f1:0d:a3:
                    cb:54:1d:56:97:72:0b:e5:5a:d0:50:22:33:9a:51:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4A:62:E6:06:F6:C7:19:C1:95:2A:F5:00:68:81:09:EB:16:2C:6D
            X509v3 Authority Key Identifier:
                keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:08:ba:86:c6:53:e4:e2:c8:ae:9d:2c:4f:7e:e7:f8:dc:c6:
         a2:28:9b:19:24:ab:c3:12:e2:f5:3c:dc:d6:f0:74:7d:c9:b7:
         a0:d1:e2:11:3e:51:d2:29:85:74:42:aa:db:cb:d3:96:38:62:
         75:c9:32:16:81:71:fa:22:63:4b:59:6e:d3:ee:7f:c8:e1:3d:
         43:1b:c7:13:7d:59:b4:9f:2b:65:98:02:02:39:58:86:72:6c:
         6a:fe:04:6f:2f:14:0f:9e:59:2d:bb:af:92:56:84:82:3c:e2:
         80:dd:5b:45:51:bc:be:e8:b4:91:d5:70:f5:4a:90:10:74:2a:
         40:27:d2:13:eb:f2:64:08:31:28:46:5c:a1:fc:3f:92:55:d0:
         f2:ae:0b:cd:2f:f7:1b:2f:80:31:fa:72:f3:fa:8c:dc:77:75:
         f9:59:21:8f:55:4c:77:58:6c:98:c9:35:37:6b:5d:ab:f8:36:
         a8:66:5d:a4:7f:26:5b:29:8b:c1:c5:00:28:96:c2:04:7b:bf:
         8e:ef:30:c7:8d:97:1b:f9:af:3e:3f:aa:75:ae:a7:dd:d7:66:
         7a:76:0b:81:64:30:7e:5f:3e:ea:f3:a7:42:84:ae:82:00:af:
         95:6e:47:42:9c:66:74:b7:2a:7e:39:10:58:1d:22:47:61:92:
         5c:61:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----