Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
File:                     tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json)
Hash identifier:          qnAu+JwkE+N3kgzswU1GZAwJWjT9kRpHjk/iVxQrtBU=
Subject key identifier:   D8:72:A3:1A:A2:BE:CB:5C:DE:6D:8A:70:E5:4D:9E:A0:3C:91:A3:1F
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Certificate issuer:       /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
Manifest number:          012A
Signing time:             Fri 31 Jan 2025 03:45:18 +0000
Manifest this update:     Fri 31 Jan 2025 03:45:18 +0000
Manifest next update:     Fri 07 Feb 2025 03:45:18 +0000
Files and hashes:         1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: 6KtsfUEPsOnf8brwPLLTbF8OZmIIt6v2Rhby3CYFbsw=)
                          2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: SF9Y/S/Ql9q4YuiPXmmr85flblCi8Ls3X2BfxxKztwc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
        Validity
            Not Before: Jan 31 03:45:18 2025 GMT
            Not After : Feb  7 03:45:18 2025 GMT
        Subject: CN=679c474e-c262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:e1:c3:43:0c:c9:0d:a1:65:59:50:7e:30:
                    93:87:5d:41:04:fc:b3:c6:26:cf:3b:7f:05:9e:c2:
                    0f:4b:f4:11:91:a3:d1:d8:28:c6:7b:fd:e9:d8:f8:
                    7a:7c:01:e5:93:93:68:72:a9:11:3e:b3:77:49:99:
                    f7:4e:73:da:df:0e:02:4e:f8:ea:43:3e:0a:51:0a:
                    d4:8e:68:24:b0:3c:4b:e8:e5:46:18:88:15:83:ae:
                    c8:5a:43:b7:cd:92:1a:91:30:d8:f5:b2:b7:3f:61:
                    3a:64:d9:b1:6e:b5:42:86:f1:00:1c:1b:9d:9b:5f:
                    6f:84:81:9c:46:a5:77:41:bf:77:86:e7:b6:bc:69:
                    4e:f4:ee:e6:f7:9f:99:44:f3:8b:0e:5c:65:19:00:
                    b8:d5:03:87:2d:d9:53:8b:02:85:6f:cb:6b:2d:84:
                    52:71:86:56:0f:3f:3b:5b:54:ae:68:99:68:3e:ba:
                    eb:64:9c:e1:9c:c6:09:73:a6:6a:31:3b:7b:5d:50:
                    86:4a:00:1c:f0:7f:d0:e7:cc:18:fe:35:20:15:9c:
                    91:02:84:3e:e8:c3:05:40:53:bd:10:a6:9c:bd:c6:
                    b9:70:68:45:54:7c:af:17:d3:47:23:1d:34:8e:24:
                    f9:48:87:b5:08:58:fc:05:68:b9:c5:df:f9:35:02:
                    ab:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:72:A3:1A:A2:BE:CB:5C:DE:6D:8A:70:E5:4D:9E:A0:3C:91:A3:1F
            X509v3 Authority Key Identifier:
                keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:55:a5:d5:6f:91:22:6a:9e:4a:77:46:99:24:63:44:7a:92:
         af:e7:05:1a:5a:d4:20:10:6e:86:2e:28:a1:65:38:a9:d7:4a:
         f5:5f:77:a7:01:11:8f:39:3f:bb:e1:8a:f9:d9:b1:24:18:39:
         7a:a0:dd:9c:6d:b7:e2:2c:36:91:7d:85:1d:14:67:4f:79:73:
         3a:f8:7a:87:f8:32:9e:1f:26:ee:d3:6b:19:c2:8e:44:54:c6:
         7f:71:19:c6:fb:87:50:9f:1a:87:50:61:0a:2a:95:ab:89:18:
         93:e7:91:fc:84:0a:74:b1:d4:b9:97:ab:33:71:d4:9a:06:31:
         e0:d5:6e:c3:3d:ca:20:49:52:a9:15:b1:47:f3:d5:ea:ba:2d:
         cf:9e:ee:6a:f2:d9:96:7a:3d:6c:42:0c:4b:ed:e9:a2:66:24:
         f9:1a:d7:cc:12:6a:d7:16:9c:35:0a:e7:a5:c4:56:d1:08:b9:
         40:2c:2d:c9:f5:d6:1b:0f:e9:10:7d:9e:e3:1c:e1:5c:de:86:
         df:7a:3c:33:3f:59:1f:5e:52:70:85:39:5b:34:3d:a2:33:65:
         0a:42:23:05:0e:cf:b4:f2:12:e4:95:84:0a:2d:6c:77:25:ea:
         22:4e:7e:92:97:28:74:35:42:48:81:d4:e5:c9:ae:14:82:c0:
         f6:8e:0e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----