Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
File:                     gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json)
Hash identifier:          VdbnrkVbihDysh2nAV5UUKh4RyTuFLoUAu+NqQkuZNI=
Subject key identifier:   31:E6:25:BB:63:54:88:7C:15:C7:BE:F5:E2:E7:28:01:99:57:C6:67
Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5
Certificate issuer:       /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5
Certificate serial:       0652
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
Manifest number:          064B
Signing time:             Thu 30 Jan 2025 22:28:25 +0000
Manifest this update:     Thu 30 Jan 2025 22:28:24 +0000
Manifest next update:     Thu 06 Feb 2025 22:28:24 +0000
Files and hashes:         1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: xmLZcEaFtPXxvJksgZU2mi3oJvLo9BZ5qw32iGtoJa0=)
                          2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: m/HWFJ3zaTbb526BBQjKgkfjO3ab/2s+A2oNRFabdSY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5
        Validity
            Not Before: Jan 30 22:28:24 2025 GMT
            Not After : Feb  6 22:28:24 2025 GMT
        Subject: CN=679bfd09-f281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:6b:fb:74:1a:40:eb:84:6f:69:76:a4:9d:
                    e6:2e:50:d3:7a:3d:b7:2d:97:d0:f9:87:26:71:d1:
                    f6:a7:d9:de:9d:ac:38:aa:d4:1a:36:57:63:05:46:
                    3a:25:a5:f4:cb:85:11:4a:cf:21:1a:06:b7:9e:6c:
                    cb:bf:4a:b1:5c:d3:d7:06:9e:fb:c5:cd:fa:64:c2:
                    d5:f6:74:c1:32:f0:95:7c:e5:55:bc:25:ae:e8:75:
                    f1:1c:84:23:d1:ce:f4:c4:51:da:b8:52:06:63:50:
                    53:c8:96:79:1d:77:e7:f7:35:d1:42:96:e9:5d:af:
                    4c:97:99:5b:0a:25:75:0e:81:c8:8d:02:a5:5a:0b:
                    ad:d7:b5:10:cb:de:b2:01:ea:35:e8:03:b2:4f:91:
                    67:85:76:af:7e:0e:1e:cd:3a:ef:19:08:90:37:0d:
                    d5:b8:ec:30:ab:c3:1b:f7:51:8a:f6:36:8b:68:6a:
                    f0:f5:0d:a8:2f:20:52:4a:68:32:e6:1b:a4:51:1a:
                    94:2d:70:4e:91:bc:c4:46:a3:c5:4b:6a:e2:16:6d:
                    64:7b:1f:87:78:12:05:db:9d:c0:05:09:07:27:65:
                    da:76:d4:80:47:88:e2:51:af:0e:f2:59:ff:47:6c:
                    22:83:53:1b:f4:73:7a:9b:8a:97:0d:ea:20:5f:ee:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E6:25:BB:63:54:88:7C:15:C7:BE:F5:E2:E7:28:01:99:57:C6:67
            X509v3 Authority Key Identifier:
                keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:39:5a:86:ee:23:54:a7:8f:0a:45:1e:df:d8:10:04:bd:08:
         fa:eb:67:39:c3:e4:44:dc:f6:d3:48:9b:74:e0:84:3b:0a:3a:
         52:78:70:46:8a:6a:bb:dd:c9:6b:3e:bc:59:6e:6d:66:9c:43:
         2b:b3:a8:49:63:bf:c0:59:63:40:97:5a:97:f7:a8:95:83:be:
         bb:bb:68:55:e5:66:e2:e3:f8:ad:db:0c:74:25:65:57:4c:a4:
         33:98:d7:74:82:c1:f5:8d:2f:97:28:bd:4f:55:79:40:80:1c:
         d8:a4:2e:4b:dd:97:f3:47:ae:48:b3:0a:1d:a5:ec:b8:6c:9f:
         cc:3b:d1:1b:e3:b3:09:72:c1:72:16:b8:20:4c:e0:30:4e:2f:
         c6:40:4a:b1:9b:e2:aa:c4:e1:df:10:68:58:4a:e7:f2:00:70:
         01:dd:ae:ab:6c:bc:13:4c:ad:0c:29:11:79:3c:49:94:19:c4:
         9f:cc:df:8c:9c:ef:83:a5:80:85:b3:6e:3a:06:ff:fe:df:66:
         62:14:00:e9:bf:4b:ef:e7:3a:2c:64:9c:8c:c7:82:22:ae:55:
         c4:f3:62:b4:69:4e:33:d0:f0:8a:90:b2:ed:ee:6e:ae:eb:b3:
         67:bc:be:ad:e5:f8:43:91:02:dc:d4:3d:19:90:88:3a:6e:3f:
         03:0f:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----