Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
File:                     664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json)
Hash identifier:          TN4K8OJ77cePBFMai1d3Y+cFzG+gT2vp0MxBjwNAFdQ=
Subject key identifier:   3B:68:09:C8:AD:5E:24:B8:F2:1C:1E:54:3A:30:83:93:F8:AD:7F:57
Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
Certificate issuer:       /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
Certificate serial:       0480
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
Manifest number:          0478
Signing time:             Fri 31 Jan 2025 00:11:02 +0000
Manifest this update:     Fri 31 Jan 2025 00:11:01 +0000
Manifest next update:     Fri 07 Feb 2025 00:11:01 +0000
Files and hashes:         1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: p6GwVISbj+xpV3a6wtjLZgeBtfWx/ofrttPz+WdGAG4=)
                          2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: 1V7aP/VrpDWRfbx48ExD+guKYQgGjkaPqkclj0jq9EU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
        Validity
            Not Before: Jan 31 00:11:01 2025 GMT
            Not After : Feb  7 00:11:01 2025 GMT
        Subject: CN=679c1515-dda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:86:a6:d5:cd:3b:e0:b4:f4:4d:5f:2c:dd:
                    8b:05:67:06:05:81:83:25:10:35:09:3d:5c:a2:95:
                    7c:bc:b2:ac:25:19:f2:3c:cc:63:54:89:e1:a6:d3:
                    46:04:44:46:44:05:de:b1:63:de:4e:e7:7c:d3:c0:
                    07:8c:70:cf:91:20:44:1b:d9:75:16:f3:51:db:cc:
                    5c:57:b5:01:9f:7c:e3:e3:4e:ae:a7:bd:fd:4d:db:
                    32:66:8c:42:a2:1f:9a:de:2b:09:84:08:ef:27:cb:
                    15:03:ad:6c:71:67:ae:e7:b8:e3:39:9a:77:b2:ab:
                    2d:3e:46:1c:48:bd:4e:ac:15:d6:6e:97:76:03:25:
                    f3:08:63:a0:55:ad:7b:ac:d1:64:41:86:62:b4:72:
                    cf:42:25:a5:67:e5:ca:de:6e:4f:da:72:4a:80:b0:
                    7d:f1:78:31:eb:81:70:23:cf:31:a5:91:46:cc:aa:
                    10:bb:aa:8e:79:63:7e:21:be:df:8f:08:6b:c3:db:
                    19:63:98:1f:1d:28:71:44:89:6a:57:a6:30:bb:92:
                    04:93:2a:61:b2:9e:1e:17:67:ed:1d:78:77:90:1d:
                    90:ef:98:a8:54:20:22:9d:d0:ba:24:3c:b8:d3:58:
                    f2:87:c5:00:1f:93:f7:64:a2:7b:95:20:d1:1e:10:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:68:09:C8:AD:5E:24:B8:F2:1C:1E:54:3A:30:83:93:F8:AD:7F:57
            X509v3 Authority Key Identifier:
                keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a4:bd:87:23:3d:07:c7:89:12:15:c2:58:86:f5:09:35:11:
         0c:59:a8:26:1e:88:c6:93:b4:a8:1a:60:b9:7a:91:7f:f7:65:
         7f:99:55:d0:e7:4a:19:15:bf:69:f4:7d:83:9d:32:b1:37:0d:
         af:0e:e9:cd:29:85:df:b1:16:8b:46:ce:ce:74:c7:e4:5a:15:
         ce:68:1b:ff:48:64:f7:04:7b:08:4a:c2:f6:8d:de:40:a4:13:
         ab:a3:ac:22:71:bd:05:46:9b:32:f2:e9:6c:8e:3c:e0:38:fe:
         25:05:35:16:f2:ca:4b:e8:e1:71:31:8d:dc:31:f4:dc:0e:d4:
         27:ef:6f:46:96:80:00:4c:c4:56:04:58:90:0b:65:cf:dc:da:
         be:53:87:5a:53:3a:e2:d1:c9:43:f2:8b:c0:ca:63:c7:3e:1c:
         75:37:c0:0a:f7:3a:82:04:11:de:bc:1f:8c:4c:01:38:08:ec:
         59:f3:b9:bf:7a:d9:32:9d:5a:cf:f2:03:d4:f6:33:e9:d7:0d:
         59:3c:46:a2:b7:b3:af:2f:46:98:77:e2:4c:fc:d6:5e:cb:ad:
         41:28:af:35:89:af:71:a0:47:c3:a6:bf:0a:e6:52:ce:0a:68:
         e4:c5:bb:83:75:9a:1a:c2:80:74:af:a8:96:6a:ae:94:65:df:
         c8:50:6b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----