Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
File:                     aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json)
Hash identifier:          1y4TNFuY31YLPEp4qAr9qqqp0HOFnzTari143oVXe+A=
Subject key identifier:   A3:81:D8:26:A3:A2:E7:41:C3:63:8F:C4:C2:01:7D:6D:15:A2:E9:7D
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Certificate issuer:       /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial:       0312
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
Manifest number:          02F4
Signing time:             Fri 31 Jan 2025 01:28:14 +0000
Manifest this update:     Fri 31 Jan 2025 01:28:14 +0000
Manifest next update:     Fri 07 Feb 2025 01:28:13 +0000
Files and hashes:         1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: ZStAsVc6vdfTs+fXXizSnzGsiOUJnHOJS4h3Wn4n56M=)
                          2: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: i6v8Xf+0KkaEGhb/TJ+saEyWBQY2o3H9ZszygH46Hd4=)
                          3: 593105685BB711EE8E69584CC4F9AE02.roa (hash: lkS26BT0D3kjQ+vvaIE4qPZCY0e62oxAQkxFZOHBmsQ=)
                          4: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: P57quaW3DlfcRg6H6EBZQJvqJnGiJw0/9o3VwlNBZ7w=)
                          5: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: yRSOmcUbcPon9jEF0ergwI8+pr3n7/XtmbTEl4aDVyo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
        Validity
            Not Before: Jan 31 01:28:14 2025 GMT
            Not After : Feb  7 01:28:13 2025 GMT
        Subject: CN=679c272e-1eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:b0:42:11:4e:4a:b8:d9:ad:2c:71:c8:42:
                    7f:56:f4:06:d2:92:3e:df:af:f8:01:50:da:c3:db:
                    b5:07:ee:26:1a:07:f4:ae:8d:be:8d:4e:5a:b0:cc:
                    77:89:fe:61:e1:6c:eb:ae:c2:7b:eb:f9:80:e2:a9:
                    1a:5e:ea:ce:9c:48:29:a6:cd:49:75:6b:73:3b:ce:
                    df:83:ed:73:5c:ed:f1:34:75:4c:dc:2c:a3:c7:19:
                    1f:4e:62:b7:50:5f:d6:ec:b0:33:b6:f9:61:b3:bd:
                    ec:ca:d1:1c:dd:39:19:8d:d4:e5:e5:ba:0c:83:bc:
                    30:69:7a:fe:d2:a6:bc:47:88:51:6b:b0:57:1f:09:
                    62:92:df:00:13:d4:b9:5d:ad:b6:31:33:0c:50:8b:
                    62:eb:a1:20:44:80:ae:d5:4f:63:4a:33:ab:99:6b:
                    97:c2:5a:2b:90:e1:bb:80:9c:24:fa:ed:50:cc:34:
                    36:99:44:e4:54:3c:54:33:fb:4c:2f:62:72:b5:93:
                    45:c5:42:12:a8:03:42:c5:c2:5c:55:4a:67:d0:ef:
                    52:a6:ad:c1:aa:e9:25:85:0d:b1:a2:09:58:70:04:
                    62:82:1d:8c:08:7d:56:cb:f4:a2:82:34:99:23:a4:
                    11:d1:33:fb:7b:88:7c:00:f0:59:23:ea:f4:17:09:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:81:D8:26:A3:A2:E7:41:C3:63:8F:C4:C2:01:7D:6D:15:A2:E9:7D
            X509v3 Authority Key Identifier:
                keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7b:d0:fc:b9:81:43:e7:84:95:fd:7e:75:27:a3:2a:64:1c:
         66:f1:8b:21:f6:bb:5d:7d:f0:fa:ac:dc:cc:75:34:11:4c:ed:
         9b:89:9a:3e:e9:f4:a0:d4:b7:f3:5c:ae:37:15:2c:68:57:e4:
         ab:d2:62:2f:bf:f3:75:a3:1d:d6:3e:90:a8:3a:01:fe:02:5c:
         0a:3b:10:27:12:91:2a:47:91:73:47:a2:98:5a:4f:d3:71:a8:
         b2:72:fa:f7:51:ed:7c:6b:44:e3:b0:b6:26:d3:8e:c6:89:57:
         44:f0:94:31:27:4b:35:bc:a4:35:39:6c:e8:5d:e8:b7:65:cd:
         53:43:91:20:75:b6:82:f8:ed:bc:88:9c:c1:33:d6:5d:75:6a:
         72:1b:49:c8:73:78:c6:5c:22:96:17:55:9b:fd:ac:c4:97:2d:
         fc:84:d2:30:33:cf:66:ec:d8:be:0c:54:35:81:68:37:4a:de:
         e7:34:16:93:83:b5:0c:6a:69:ae:89:d8:56:15:6a:04:85:10:
         f0:8a:88:66:b9:d0:05:08:2b:d9:0d:42:19:07:bf:5d:de:fc:
         18:10:f7:9d:10:8d:d0:00:3d:20:ff:a1:25:5b:d5:d3:3b:e2:
         70:c8:e6:4a:a3:42:ec:fb:a1:64:21:8c:86:d7:ac:30:3f:60:
         53:18:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----