Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
File:                     ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft (raw, json)
Hash identifier:          qpxPk2K+gAZ4efWDTmPRUVMldLHhUpcvCziWzxcHXjI=
Subject key identifier:   28:12:60:86:DA:CF:C5:68:60:E7:10:9A:AE:81:76:07:94:05:E0:E0
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Certificate issuer:       /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial:       1CE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
Manifest number:          1C7D
Signing time:             Fri 31 Jan 2025 16:13:39 +0000
Manifest this update:     Fri 31 Jan 2025 16:13:39 +0000
Manifest next update:     Fri 07 Feb 2025 16:13:39 +0000
Files and hashes:         1: ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl (hash: Jjjdxag0eQRgchSMMkMDCsZ3FEtnWwCSR8qx8f9aUDM=)
                          2: 75D2A3666E8011EF92BDE465C4F9AE02.roa (hash: S04wYcbd1lGcy0ITwr0o7tL3zqd2SscWZtEz6UykqrE=)
                          3: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (hash: DWVN0wHi6QUPs6snWtASAJaDoQXZR8E1QW/cZGA9SNI=)
                          4: 2F9A7A1648FC11EBBAE0991CC4F9AE02.roa (hash: EyyP05+w3I6zJfg1bK7YEVwaO6aHmtM/Fo2uP4RPYlc=)
                          5: 646703648A2411EF98CFF955C4F9AE02.roa (hash: wTjZVM548Wrh9y0svyoOrwDzYCRd/yXq2seB9OWoYhQ=)
                          6: 87F433B2234C11EBA94AE637C4F9AE02.roa (hash: vAZuumEzH35lIcE9FGtrp9GE2VYNxSG1ZIiI45UcajY=)
                          7: 3EF78CAA9DF911EF971AD149C4F9AE02.roa (hash: JvMqjKLoQToshoNSeubhlEpU1GQez85G+xjPh2YQQpU=)
                          8: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (hash: rM2HcTN6YD/Z+cCFcZeuxrJ7Jgv3YiMIlsdFtNQfr2Q=)
                          9: D3C8593E905E11EFAF2C185CC4F9AE02.roa (hash: mX5h1pe0z8G3BqKuVtzq+wiHKMx8BkOvpXEXAJFLe90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7401 (0x1ce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
        Validity
            Not Before: Jan 31 16:13:39 2025 GMT
            Not After : Feb  7 16:13:39 2025 GMT
        Subject: CN=679cf6b3-7140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:7e:ea:1d:f4:dd:bd:88:42:ed:3c:02:9e:
                    5e:40:10:c5:82:e3:3b:72:55:6a:fe:bb:c5:01:59:
                    d4:ae:05:ef:50:25:18:be:b8:9b:0a:22:3c:8b:3b:
                    52:e3:39:f8:70:90:82:b7:bf:5a:2f:e5:eb:e9:5b:
                    16:3a:68:cc:82:b6:3d:e0:27:f4:ce:32:1b:10:a9:
                    f2:bb:12:26:4b:8f:07:5e:de:18:75:6c:84:7e:c6:
                    98:d5:6e:9d:a1:ce:05:4f:f6:99:49:20:d9:b8:7e:
                    00:5a:8b:0c:79:c0:f4:a3:d8:7a:a5:f8:0d:92:fe:
                    81:4d:bb:df:b8:53:90:61:a0:89:d4:23:9d:69:9e:
                    ed:5d:88:fb:5d:34:22:24:82:7f:d0:39:fe:96:f8:
                    05:21:95:c0:38:a4:69:a2:ba:5d:62:8b:11:75:14:
                    e5:7e:06:5d:47:c8:ad:a7:aa:e7:ef:7d:5c:86:81:
                    98:31:e5:e7:40:8a:bb:58:40:50:70:52:08:f9:5c:
                    87:68:f7:5e:6a:22:ee:ea:8a:62:35:62:da:55:17:
                    b5:1a:4a:7d:6d:05:7a:9a:8a:8a:a3:e1:6c:ae:64:
                    d6:fe:90:eb:33:bd:96:4d:ff:a9:fb:bc:17:2e:e6:
                    7e:8d:e5:3a:4d:c6:42:7c:9e:cd:82:5f:18:03:f2:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:12:60:86:DA:CF:C5:68:60:E7:10:9A:AE:81:76:07:94:05:E0:E0
            X509v3 Authority Key Identifier:
                keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:d6:64:31:13:48:c1:fa:5d:f6:46:47:db:c0:a6:c9:7b:46:
         71:77:96:09:7c:36:12:d6:36:d1:cd:52:ce:23:64:6b:50:84:
         33:c6:14:0f:db:30:96:31:d9:fc:5a:7e:45:60:4b:08:dc:74:
         f6:cb:69:75:ab:fe:aa:d7:ac:12:92:18:66:15:7d:e1:bf:75:
         96:99:01:38:56:01:ad:f1:51:49:48:4d:8c:3d:b3:de:fb:9b:
         d1:bc:69:15:6c:5b:9e:c8:b6:13:0f:31:f0:58:5f:d7:8c:fe:
         7d:c1:26:ac:a6:79:5f:0d:ff:02:5a:ce:8d:21:cb:f7:3a:1a:
         0c:e3:aa:bb:e3:1e:c0:86:4d:06:3a:52:d0:66:a6:bd:d2:4e:
         09:10:22:57:af:f7:52:1e:ea:5c:42:a6:5d:3f:62:7a:30:38:
         74:61:f3:7c:a5:bf:f3:b3:c4:1f:83:f2:9a:4b:0e:18:0a:46:
         c5:9a:7c:64:64:ef:47:12:d8:14:25:e1:b2:c4:38:a5:e2:74:
         80:1a:ec:96:10:d8:b7:fe:04:cc:76:3d:ab:94:59:72:dd:71:
         cb:3f:6a:73:ba:58:da:5e:f4:83:69:f4:45:cc:28:32:7c:70:
         fb:18:b0:8c:90:21:43:09:fe:4b:b2:89:57:00:3d:4f:f1:10:
         e7:0f:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----