Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
File:                     yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json)
Hash identifier:          FcfOzSF/sGET3teOt/aM3lOYtfNKvYDyNebT6Kg7nTw=
Subject key identifier:   D4:99:46:84:95:8B:9B:70:8E:0A:D4:03:CF:BC:C5:76:D8:15:77:F6
Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
Certificate issuer:       /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Certificate serial:       0D09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
Manifest number:          0D00
Signing time:             Fri 31 Jan 2025 18:01:43 +0000
Manifest this update:     Fri 31 Jan 2025 18:01:43 +0000
Manifest next update:     Fri 07 Feb 2025 18:01:43 +0000
Files and hashes:         1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: Z1/H7FbbuZiCel5wVAfGnp5KvyLgvrTRwdN+Pmaumww=)
                          2: 002EAE98D49311E997CAE52BC4F9AE02.roa (hash: bl9dVIN3Lch5GhjF7DxFUXIR57anV3IMuX/4gETtdJo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3337 (0xd09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
        Validity
            Not Before: Jan 31 18:01:43 2025 GMT
            Not After : Feb  7 18:01:43 2025 GMT
        Subject: CN=679d1007-55f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:59:eb:62:85:9d:5a:91:1c:b3:84:9b:0b:
                    70:49:87:1b:45:5a:a4:ff:b5:ff:0e:74:80:ef:e5:
                    a8:9e:21:3a:a8:73:f7:90:fb:3f:59:35:e8:92:fa:
                    73:a8:7b:c2:d2:a3:a1:49:22:2a:d9:42:7f:2e:f5:
                    fb:23:4c:f8:cc:a5:75:04:dd:f6:59:3b:30:f0:e2:
                    b4:4d:e5:a1:dc:d6:d3:ff:5e:ff:a4:f7:5f:b9:4a:
                    20:2a:ca:ed:37:15:7f:3c:a2:29:80:48:4b:c3:31:
                    02:92:33:05:90:21:fd:1f:47:73:3e:87:5d:e1:3b:
                    35:2f:41:c2:f7:5f:bc:0c:dd:72:93:1f:e6:49:17:
                    f4:3e:7d:4d:e4:b7:d8:b8:98:eb:db:10:1b:97:a1:
                    3c:6b:5a:9c:98:17:1a:65:67:76:8a:a6:d3:21:8f:
                    dc:39:db:74:e2:a4:d3:e7:64:26:2f:4e:9d:8f:56:
                    75:1f:07:59:4a:98:06:97:26:54:71:04:3e:df:7a:
                    25:1d:7b:6b:27:be:a4:b6:26:5b:7d:79:13:74:09:
                    90:f5:e6:17:85:b3:ef:5b:06:3f:60:cc:26:c2:49:
                    da:5c:ac:f8:63:85:e9:7a:d3:53:f6:b1:9a:2c:2a:
                    f5:1b:e5:db:12:53:6c:87:d4:6a:c6:8c:6f:13:f9:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:46:84:95:8B:9B:70:8E:0A:D4:03:CF:BC:C5:76:D8:15:77:F6
            X509v3 Authority Key Identifier:
                keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:32:ba:b5:8f:b5:b0:84:e9:9c:51:77:80:5e:5c:ea:8d:09:
         4b:a5:1f:a9:6e:1e:c5:99:42:c0:4d:e0:49:a7:d0:c2:e4:02:
         38:6b:07:8a:e7:a0:ac:0f:a2:92:ce:d8:3a:c4:97:cc:75:02:
         44:c6:c8:11:c6:36:9e:89:69:8e:61:15:c5:9d:38:b7:ec:e3:
         9b:b4:27:3d:16:43:fb:e5:db:77:ab:ad:5c:a0:2c:57:ee:30:
         46:55:e8:c3:61:ac:7f:03:d0:ba:4e:51:ca:ca:35:d5:b2:c0:
         fb:21:5f:f7:5a:c4:7d:2b:83:c5:59:a4:4b:50:b1:64:46:98:
         13:da:b9:72:09:26:99:a1:a0:6e:ee:3c:e7:be:6b:86:1d:d8:
         6e:e1:de:2c:58:02:09:13:7b:e1:9b:23:7b:b9:13:d4:6b:ca:
         15:8d:5b:86:43:bf:02:28:3a:e1:de:b6:60:eb:81:55:20:25:
         d4:dc:9e:8e:9d:97:81:52:91:4d:e2:43:b1:c8:4a:6a:db:89:
         85:55:50:32:7a:c7:60:c0:26:bc:16:5a:76:cd:39:fe:a7:ae:
         0a:e9:26:f8:ab:43:8e:d3:31:c5:ce:5e:56:23:90:a3:78:0a:
         c4:86:3f:0e:2c:2b:1e:58:cb:8e:9f:f7:8f:0d:05:92:48:50:
         ae:19:e4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----