Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
File:                     Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json)
Hash identifier:          2rFSu9VBap8UPLo/nEvdtJrJS0651lVqIsGIfCf+id0=
Subject key identifier:   B6:94:17:B7:95:63:70:AB:AA:46:23:F8:56:DC:80:9F:64:DF:E6:57
Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC
Certificate issuer:       /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC
Certificate serial:       07D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
Manifest number:          07CE
Signing time:             Thu 30 Jan 2025 21:01:35 +0000
Manifest this update:     Thu 30 Jan 2025 21:01:34 +0000
Manifest next update:     Thu 06 Feb 2025 21:01:34 +0000
Files and hashes:         1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: iziy3f/71SeXLK9QXZDPcn9qtlxdpe9xUVKlc6uATUc=)
                          2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC
        Validity
            Not Before: Jan 30 21:01:34 2025 GMT
            Not After : Feb  6 21:01:34 2025 GMT
        Subject: CN=679be8ae-29bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:b5:4f:b0:a0:37:75:06:09:94:a8:cb:a6:
                    f3:cd:64:c4:83:f4:7d:03:47:ae:61:11:35:64:cb:
                    5f:0f:68:57:53:7a:39:da:10:03:4c:25:83:d4:f7:
                    44:09:1c:4a:0c:d1:66:bd:d2:3b:1c:8a:99:d4:30:
                    b9:3b:df:17:bd:11:22:b3:60:99:26:df:a5:ee:c9:
                    26:65:3d:4e:c4:72:31:9a:10:0f:1e:92:15:3b:2a:
                    49:cb:0c:fe:93:c8:9d:bd:47:0b:21:fa:d9:48:08:
                    31:6d:89:51:b5:05:19:d5:3c:df:37:df:38:83:99:
                    cc:ad:5b:93:d1:67:d7:bf:5e:5c:3a:20:7c:6c:f7:
                    81:f8:14:20:05:a5:61:01:fd:1a:ac:39:ca:2d:ee:
                    c1:45:6c:34:9d:a1:01:67:e8:00:d7:f6:a6:73:9e:
                    f9:c1:77:1e:ca:e5:e5:3e:e8:a2:f1:7f:38:90:0d:
                    43:1c:e5:68:35:53:b8:ff:b8:7f:4a:0b:c3:64:b7:
                    54:65:1d:7a:f5:8d:10:07:73:68:11:72:bc:5e:a6:
                    2b:12:74:09:c3:3d:d8:83:ec:df:54:1c:b3:b3:c1:
                    d8:cb:ed:9d:90:35:12:94:b7:66:47:c6:09:47:39:
                    5b:88:8a:4f:57:91:ff:51:27:e0:63:42:c7:7d:18:
                    61:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:94:17:B7:95:63:70:AB:AA:46:23:F8:56:DC:80:9F:64:DF:E6:57
            X509v3 Authority Key Identifier:
                keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:59:7b:49:c4:63:87:df:bd:02:7e:c9:cf:8a:0d:2f:ae:3e:
         2a:93:73:06:3a:21:36:75:21:e8:72:e6:53:8b:4d:18:b7:d1:
         c7:41:42:ad:32:0a:0b:20:6d:39:39:cc:e3:41:d0:b4:15:45:
         c2:67:a6:f2:41:a4:c8:9f:9d:ef:92:51:1f:77:be:bd:53:77:
         b5:4e:f5:e0:d5:49:41:92:5b:92:f4:5a:9b:23:e3:b4:46:1d:
         e7:f7:55:92:ff:85:c4:91:da:0f:08:0f:0c:70:f1:5a:09:50:
         0d:a9:5d:66:1a:34:47:2e:ed:a9:87:c1:ab:0f:5d:16:c1:38:
         21:44:ac:98:38:91:80:9a:a1:ee:e8:06:02:c9:ec:88:2c:dc:
         e8:62:2a:1d:b0:9d:a4:be:f9:60:84:b5:5f:9c:72:5d:84:15:
         28:86:c9:0c:4f:42:59:d5:8e:07:f8:24:f5:ed:72:38:9e:67:
         f5:6a:da:14:07:08:74:14:7b:15:a5:18:11:bd:94:3a:d9:72:
         60:7d:51:ca:b1:e2:3f:d6:5b:b1:0c:df:27:3f:fa:8c:3a:38:
         ec:9f:73:d8:d4:f3:1c:e8:97:8a:a8:45:de:e1:32:fc:7d:6f:
         bb:92:6a:64:87:9e:4f:10:e2:d6:e4:43:55:8e:30:1e:28:cd:
         38:0d:73:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----