Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
File:                     C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json)
Hash identifier:          qroN7s5tFTWVQvkhPrLZueWgndiu+40H9wMpSg7ZhdA=
Subject key identifier:   D4:73:CF:88:83:62:02:A8:84:67:49:D4:0E:49:F8:58:D4:04:EF:E0
Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B
Certificate issuer:       /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
Certificate serial:       1AB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
Manifest number:          1AB0
Signing time:             Fri 31 Jan 2025 16:20:05 +0000
Manifest this update:     Fri 31 Jan 2025 16:20:05 +0000
Manifest next update:     Fri 07 Feb 2025 16:20:05 +0000
Files and hashes:         1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: rHow0rZiD9geegYimyXzvZLQ/U3lOMpn5DLk6Yqe+eo=)
                          2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: /62jKiDxw2Oukb67ZNvZbycxbr1ec0Y/2pAmP4Kn+R8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6839 (0x1ab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
        Validity
            Not Before: Jan 31 16:20:05 2025 GMT
            Not After : Feb  7 16:20:05 2025 GMT
        Subject: CN=679cf835-6962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:95:40:89:00:d2:78:2d:63:6d:99:df:fd:0f:
                    c5:54:f4:d2:27:70:e4:69:62:c4:50:e9:17:6a:d0:
                    06:f7:06:e6:07:30:6a:73:16:3d:aa:65:d5:41:70:
                    e7:2c:a3:9b:fd:02:e2:93:93:d4:02:48:89:7b:98:
                    8e:97:1e:ca:b4:85:05:44:51:4e:2c:13:d6:03:7a:
                    ff:52:8a:04:d8:9a:db:59:69:9e:2c:17:6d:e5:cb:
                    bb:60:3d:80:7d:c6:a1:eb:24:40:12:6a:58:43:a3:
                    32:c3:2a:8e:10:df:d1:48:90:45:a6:fa:27:db:eb:
                    1a:5c:b0:b3:49:9e:96:20:c8:ec:6e:43:d7:d2:78:
                    dc:42:6b:f6:37:9e:8b:0c:a4:6d:c8:2a:62:50:37:
                    e3:b3:d0:a5:72:4f:78:50:bd:38:e9:f1:87:e7:a1:
                    92:9d:11:a8:7c:69:49:d7:2b:d3:70:33:04:44:7d:
                    8e:13:1f:e2:dc:5f:22:1b:39:39:07:c1:64:40:74:
                    e5:34:b7:ec:b6:3f:17:86:b4:70:02:61:a2:30:9b:
                    16:6c:9d:ae:30:50:12:79:4e:03:31:09:6e:99:3f:
                    11:0b:a2:cf:b5:0e:99:cd:7b:bd:eb:6a:5a:90:74:
                    ea:c4:01:ff:73:ef:0a:ca:df:92:2e:40:ea:52:13:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:73:CF:88:83:62:02:A8:84:67:49:D4:0E:49:F8:58:D4:04:EF:E0
            X509v3 Authority Key Identifier:
                keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:02:24:91:55:13:a5:fc:d8:62:6e:35:cf:19:48:00:83:71:
         3e:94:8d:98:c7:b7:d1:15:f2:97:7a:19:fa:28:44:aa:1f:e1:
         81:03:35:e9:64:6f:ba:ae:b3:20:34:88:4a:3e:28:bb:ed:7f:
         da:09:04:cc:80:64:65:8f:12:6f:9d:0a:78:a4:c7:71:82:74:
         3e:bc:de:f4:7c:d9:e3:5f:4a:d7:21:c5:78:1b:eb:c4:c9:82:
         13:7a:89:58:90:5a:b8:b3:6c:8f:ba:4c:c2:32:5d:4e:38:c3:
         af:e7:a4:1f:7d:97:09:d7:4f:81:05:04:91:63:5e:76:e4:eb:
         d8:e0:02:ab:60:b4:26:38:c1:ec:f8:94:74:9c:9c:71:23:87:
         b6:9d:84:c5:cb:7c:97:72:d8:a2:1c:ce:ee:c0:a6:fb:a7:b7:
         71:8f:e3:56:3d:0e:79:37:c2:2b:c7:1c:f0:7a:e9:f6:77:60:
         35:58:a5:84:a1:c6:bc:6f:9a:70:92:f1:48:7e:17:7d:cf:13:
         e0:ba:a9:67:74:7e:9c:14:bb:9d:71:25:69:39:f4:b9:31:0b:
         a2:10:72:e8:9e:ac:c2:ae:35:9a:dc:b1:bf:8b:df:3d:21:69:
         c8:1c:d4:4f:7a:21:86:5d:ad:ac:36:bc:a7:13:71:1e:8c:aa:
         11:b0:ab:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----