Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
File:                     AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft (raw, json)
Hash identifier:          aJfti2b6YzG1uIIOozbCE8qQgNnaNLt2q+hAAvRs9t4=
Subject key identifier:   2A:31:E3:3C:17:69:11:98:92:84:D9:7F:A5:23:75:60:67:94:45:A0
Authority key identifier: 02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12
Certificate issuer:       /CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
Manifest number:          0173
Signing time:             Fri 31 Jan 2025 03:03:43 +0000
Manifest this update:     Fri 31 Jan 2025 03:03:43 +0000
Manifest next update:     Fri 07 Feb 2025 03:03:43 +0000
Files and hashes:         1: AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl (hash: d2albmfZ/zPHLXt70maqn5wI9kiRLzhYOYYtxd1YqQo=)
                          2: 12AE9E92AA9711EDAAEB8345C4F9AE02.roa (hash: ZbTPGmKh281ymLxinCV1W0SdNG3gcop2OrOUFYRhJy4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
        Validity
            Not Before: Jan 31 03:03:43 2025 GMT
            Not After : Feb  7 03:03:43 2025 GMT
        Subject: CN=679c3d8f-1366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:d2:91:6f:e8:35:e9:79:5e:5d:6e:4b:29:
                    6a:e4:fd:bd:86:62:74:52:55:26:35:f3:97:dc:fd:
                    86:e5:56:01:70:33:2f:75:3d:e1:d8:84:3c:2a:c3:
                    ba:93:1b:e4:64:10:80:0d:60:7c:bd:25:aa:c2:56:
                    66:90:f9:ed:ba:ff:61:d0:15:b5:d0:b1:93:19:57:
                    99:12:c5:fd:e5:69:74:80:b2:c9:96:6a:a1:e5:c1:
                    a6:07:36:0f:55:53:a2:c3:c0:8b:25:81:75:bd:d3:
                    c2:5c:22:79:c2:95:a1:9d:0c:b8:6a:f4:b9:57:63:
                    9d:a6:da:d1:e2:8b:39:60:48:4e:18:13:09:e4:e8:
                    34:2b:db:9e:8f:80:4d:8f:52:62:da:43:88:3e:13:
                    a7:52:de:20:93:94:f2:4a:8e:7a:55:e4:ba:7c:6e:
                    10:6f:6d:18:5b:86:68:8d:43:bf:63:86:f3:06:13:
                    ae:61:e9:5d:df:8a:47:34:d7:ac:be:03:19:f5:5b:
                    79:c9:57:14:31:01:33:45:59:db:5f:c5:29:d5:24:
                    6f:b8:ba:a4:79:7a:5d:b3:ff:cc:c3:b7:03:86:97:
                    51:53:e3:db:19:91:d6:80:af:13:07:1a:44:3b:8a:
                    81:db:2c:f3:d6:3e:4b:1f:03:ec:47:bd:b2:bc:1e:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:31:E3:3C:17:69:11:98:92:84:D9:7F:A5:23:75:60:67:94:45:A0
            X509v3 Authority Key Identifier:
                keyid:02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3a:14:20:94:f3:8e:e7:a1:b1:65:61:ad:84:80:f7:4a:65:
         2f:49:61:77:af:9c:bb:06:bc:80:7d:25:ae:3a:3c:ae:53:69:
         c1:dc:12:14:c0:18:a7:7b:e9:b7:bb:44:24:63:92:c6:a0:f7:
         d9:4b:32:40:ad:54:70:22:ec:f7:42:59:d3:cb:c1:c9:07:ec:
         c2:82:1e:31:53:2b:0d:a7:e1:3a:0f:41:6a:de:c1:37:3c:ce:
         77:17:86:b5:32:3c:45:bf:c0:38:63:2e:01:fe:c5:cc:fe:89:
         e3:c8:68:1b:9e:ff:5c:d0:b9:a5:d6:0e:dd:c3:69:79:b1:00:
         f7:47:d6:7c:99:cf:bf:4c:9b:83:10:4e:bd:68:21:17:be:45:
         f1:e2:22:67:46:b2:8e:70:68:ad:81:22:12:e3:e3:c4:56:96:
         59:fa:ad:cf:90:0b:db:2f:a8:ff:15:e8:35:a8:81:23:11:46:
         25:cf:2a:71:b9:63:c3:79:9f:36:65:1e:c1:46:a8:d3:36:d8:
         f8:a8:db:0e:42:56:96:e4:6a:f0:0f:5e:72:5f:36:1c:0b:95:
         d7:25:de:bd:9f:f0:89:e5:fe:0d:a0:84:be:ba:c3:5f:54:7e:
         7d:64:ae:68:06:34:f5:80:0b:da:aa:43:13:40:ef:b3:f1:5d:
         e6:e8:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----