Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
File:                     vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json)
Hash identifier:          DjSGCUGA2Vi7nDJla8xWlBKJFzxKvfVRNjHxov12B1k=
Subject key identifier:   3F:B3:EB:11:79:54:A4:1E:30:53:DF:5F:B7:E7:1F:3E:4D:33:00:4B
Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
Certificate issuer:       /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
Manifest number:          97
Signing time:             Fri 31 Jan 2025 05:28:17 +0000
Manifest this update:     Fri 31 Jan 2025 05:28:16 +0000
Manifest next update:     Fri 07 Feb 2025 05:28:16 +0000
Files and hashes:         1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: nZKgzdMtZ2Xb231AVI7musMwpi50+17K8IJAyKnuI/4=)
                          2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: gx9z09oQ5hTA8YH4iSWgc7528eikGurKJ+1nJAQYPAQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
        Validity
            Not Before: Jan 31 05:28:16 2025 GMT
            Not After : Feb  7 05:28:16 2025 GMT
        Subject: CN=679c5f70-cc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:2f:c2:8f:30:b2:71:00:74:5c:bd:a0:49:
                    49:39:08:4f:24:9a:22:44:d1:11:20:4c:6c:25:d4:
                    fb:5e:11:1b:aa:03:b1:94:04:07:97:34:2d:31:3d:
                    aa:b3:84:9e:1e:99:1a:de:c6:69:94:1a:9d:e6:e0:
                    07:ec:fa:89:16:42:f8:4e:96:2e:4f:53:94:7c:84:
                    fe:0d:bd:af:77:7e:1d:e1:9a:f3:28:77:08:30:4b:
                    58:b8:f0:56:50:83:c3:a9:cb:d4:ed:fd:33:ab:67:
                    4c:b9:70:7f:1f:2a:fd:5f:76:2e:c3:32:0c:45:23:
                    bc:7f:52:19:87:4f:61:c5:ee:bc:48:5f:bb:84:2d:
                    7e:22:a3:b1:cf:32:d2:23:9b:5d:62:3d:d4:f5:c0:
                    3f:90:ce:a7:1a:fc:3a:f3:e3:1a:56:9e:6b:2c:f9:
                    10:eb:58:f3:ac:09:4c:14:73:26:43:a4:d9:9f:50:
                    1a:e6:5e:11:ea:44:9c:06:79:17:d5:42:84:53:ee:
                    fc:c1:54:f8:20:5b:85:b1:ae:f0:c7:f0:26:c1:49:
                    d8:88:39:36:d9:1b:d6:b3:f9:d7:b7:9d:39:a2:50:
                    15:40:3e:14:dc:e8:a7:71:a8:af:c3:32:7e:66:10:
                    82:c1:76:55:4c:ae:4b:3c:6a:12:ee:fe:e8:06:96:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B3:EB:11:79:54:A4:1E:30:53:DF:5F:B7:E7:1F:3E:4D:33:00:4B
            X509v3 Authority Key Identifier:
                keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:e7:f9:3d:0a:4e:b5:2a:55:0c:65:2f:26:dc:03:2f:a7:8d:
         fc:fd:0d:52:85:1f:4b:20:68:fe:c0:1d:2e:80:2f:c0:4f:48:
         b8:9f:ca:e9:16:5e:01:f5:b5:c8:c0:c6:a8:93:53:b6:fb:c9:
         c2:92:3e:00:82:37:9a:34:7b:61:2f:9b:77:f2:b6:2a:f8:d4:
         38:58:05:df:df:bc:4e:e0:f2:72:ae:22:f7:5b:68:aa:f7:fc:
         31:d4:fd:66:de:41:c7:ce:64:f3:68:2d:86:dc:5c:f9:f5:08:
         85:c3:59:6b:d7:71:4d:4e:0f:40:74:70:7d:55:32:87:3b:80:
         20:d8:28:f2:dc:32:e2:41:18:8f:84:36:25:e8:aa:92:90:ff:
         a8:32:2b:6c:61:b8:05:38:8a:e5:42:0c:21:11:4e:0c:03:ff:
         57:2d:16:13:86:7a:cd:29:6b:82:2e:5e:d0:00:10:9d:43:bb:
         28:86:09:77:0e:5b:81:1e:b2:3c:f0:2d:ab:f4:a4:f5:a8:29:
         48:90:1f:87:77:d7:36:84:d0:a3:57:5b:23:69:36:0d:5d:a1:
         f4:e8:9e:3c:76:ad:6d:15:c2:b6:50:66:be:9f:0b:2b:72:13:
         7c:c3:06:91:09:2b:a5:2f:ed:de:e5:3e:a7:50:5f:1e:fd:c7:
         51:69:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----