Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File:                     l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier:          CZfgYX0VeWz8Rwmkc4YSLdOCfCDpA40s4ZQY9lwPgJU=
Subject key identifier:   9E:1E:70:C4:75:0C:1E:DD:6E:FD:37:94:12:88:C1:22:8F:50:C3:AE
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer:       /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial:       0C38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number:          0C32
Signing time:             Fri 31 Jan 2025 18:16:01 +0000
Manifest this update:     Fri 31 Jan 2025 18:16:00 +0000
Manifest next update:     Fri 07 Feb 2025 18:16:00 +0000
Files and hashes:         1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: Nv+KByLxT5s47NIZsOpviMy6Gk0aMuUejbK+EjgCy3Y=)
                          2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: xyYlJncaSUNWmGDmUFY6Ptm1YpyAyeIUKxqpTgZgQ8c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3128 (0xc38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
        Validity
            Not Before: Jan 31 18:16:00 2025 GMT
            Not After : Feb  7 18:16:00 2025 GMT
        Subject: CN=679d1361-6acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:d7:2b:0a:5a:89:5d:2d:b8:ed:6d:8f:fb:
                    d8:f4:9d:dc:0e:97:ab:7e:e8:2f:04:92:76:ee:d9:
                    45:2a:94:30:cb:a5:0b:ae:2c:f3:e0:14:6c:5c:da:
                    44:24:90:4d:a7:d4:c1:18:74:36:ea:24:ab:6a:21:
                    da:a0:de:44:8d:76:ff:3b:43:c3:66:0a:fe:bc:58:
                    ad:e2:63:c6:f3:2b:f8:a8:ce:11:00:3a:9e:ac:6f:
                    f1:9c:dd:1a:5f:f8:2e:4d:3e:4f:d2:a1:25:73:47:
                    d0:c2:d3:4c:b9:f7:14:ba:42:b1:eb:14:5b:ef:97:
                    49:b8:04:e9:1d:c5:66:af:1b:01:f9:00:75:36:a1:
                    5b:23:e5:a2:9f:18:7c:77:91:b2:66:ef:d5:09:7c:
                    fd:8d:f5:3b:05:d5:5a:6a:38:4e:f4:38:cf:5d:b2:
                    50:3c:6a:ea:b2:94:0b:cd:da:32:5c:39:c4:2c:a0:
                    59:7a:23:10:41:b9:90:7b:c4:2a:ad:76:7d:9c:5b:
                    d1:ad:59:62:d8:85:1c:67:76:c1:94:91:e8:45:07:
                    65:41:bf:ee:d6:da:f6:9e:8b:99:cf:82:c7:d0:80:
                    cd:e9:60:20:32:81:d3:2d:b9:0f:ec:74:87:a1:e7:
                    60:7c:d2:9c:96:e4:91:89:15:ce:35:98:81:35:82:
                    8e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1E:70:C4:75:0C:1E:DD:6E:FD:37:94:12:88:C1:22:8F:50:C3:AE
            X509v3 Authority Key Identifier:
                keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:7d:65:17:ca:77:0f:07:76:11:a0:17:b4:b1:67:05:e1:
         8e:66:b4:28:e4:06:63:f3:3b:a8:f3:a6:88:41:2a:37:43:b1:
         08:34:e9:0e:ed:c8:2c:6d:b2:72:99:86:2b:b2:c2:e1:9f:c5:
         19:f3:c1:6c:56:49:88:82:5b:8d:07:10:2d:58:96:46:58:92:
         89:24:12:75:56:5b:6a:d1:30:7a:17:f0:ea:a1:0d:16:b6:d1:
         bb:2f:36:2e:cd:42:4c:65:c4:ed:97:75:b4:5a:68:39:a3:64:
         76:c8:bb:f1:61:26:1f:2c:41:ce:09:6e:14:a7:89:ac:0f:a6:
         f8:ef:a1:a8:6a:4a:5a:e0:ff:92:de:88:9f:f6:48:ba:15:dd:
         23:2c:01:3e:8e:57:e5:1b:6b:e6:49:96:d3:3f:46:a5:27:61:
         f1:d5:90:89:34:e4:9e:ee:4f:ff:38:66:0a:9b:3c:c5:73:01:
         e8:ad:e4:7d:39:a4:1c:75:5c:22:e4:52:c2:d1:c0:19:69:3e:
         20:28:25:72:e7:94:9f:8c:07:91:bd:27:c3:01:22:69:b5:91:
         a5:da:24:10:21:69:8b:1c:25:0b:dc:e2:61:40:9c:29:d9:66:
         36:83:7c:61:be:d4:b7:79:88:40:7d:82:90:2b:af:bf:57:04:
         77:5d:26:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----