Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
File:                     GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json)
Hash identifier:          vjXxB6FBJanLUNz2FGbUxZoMvqfwipYc+PzNpgGU5DQ=
Subject key identifier:   B0:BE:E3:66:A3:83:6A:67:D1:76:7C:32:86:D2:22:DB:65:72:6A:20
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Certificate issuer:       /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
Manifest number:          0127
Signing time:             Fri 31 Jan 2025 02:51:08 +0000
Manifest this update:     Fri 31 Jan 2025 02:51:07 +0000
Manifest next update:     Fri 07 Feb 2025 02:51:07 +0000
Files and hashes:         1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: /KKvpeGOXBpqViXdwEnweEE1Paui1pr6tIcNdYS+dB4=)
                          2: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: ezxJgBFw2tKKcU962PajWcu+NU//ODot2RyjD71Fn24=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
        Validity
            Not Before: Jan 31 02:51:07 2025 GMT
            Not After : Feb  7 02:51:07 2025 GMT
        Subject: CN=679c3a9b-1bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:a3:65:fc:17:7e:f2:80:41:16:51:4c:88:
                    82:65:ec:ca:30:91:12:e4:d8:f1:a2:fd:f5:fc:b0:
                    69:d7:9d:46:da:aa:e6:bd:90:0e:4f:eb:18:72:4b:
                    b3:d5:19:c1:d1:0c:a5:87:c5:80:35:ba:cf:7e:6a:
                    15:c5:02:3b:ad:5b:f6:ec:19:81:7c:43:ac:17:38:
                    14:5c:8d:99:14:b0:cd:57:8b:39:a9:e4:0e:95:db:
                    61:06:f3:69:18:5e:98:f2:24:35:c7:02:71:35:a4:
                    ca:9a:87:c3:d1:5f:79:d0:11:ed:7e:ed:52:02:fd:
                    e6:29:f0:df:ec:4b:39:5d:cb:3e:19:e7:14:83:6f:
                    5e:21:f6:24:85:65:e8:e6:fc:07:77:a7:25:b0:d5:
                    c9:fd:e5:cb:51:85:13:5d:38:31:c5:88:c5:42:ab:
                    15:3d:f4:85:e6:9b:53:66:79:5c:50:cc:35:20:86:
                    16:0a:38:2d:be:cd:b8:cb:37:be:7f:80:61:b4:8a:
                    60:a7:69:d9:a5:66:6a:23:b0:4f:72:43:fb:47:07:
                    78:c3:bb:92:b4:18:45:c2:46:e1:6a:9d:8a:de:24:
                    8d:48:0b:9d:ff:9b:c7:9d:c7:c7:f8:2c:19:30:02:
                    3a:09:b5:a3:93:8a:1c:b0:6b:7f:18:72:fe:55:eb:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:E3:66:A3:83:6A:67:D1:76:7C:32:86:D2:22:DB:65:72:6A:20
            X509v3 Authority Key Identifier:
                keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:04:9e:c1:b8:0b:91:5b:82:e4:a6:81:4f:57:33:d8:dc:68:
         ba:7d:3e:9e:b5:74:25:68:b5:7a:c9:cb:ff:ee:1c:73:cf:7c:
         80:70:f3:19:68:7f:4a:00:75:c3:a0:5e:61:ad:97:86:58:f3:
         6e:9b:23:e5:67:08:e2:56:d3:9b:cd:27:77:4e:ac:94:43:94:
         07:5a:4c:c6:44:b0:88:7e:8c:f2:b2:e4:6f:8a:af:12:a1:36:
         9a:53:df:1a:af:72:79:9d:a6:6c:eb:1d:b6:91:eb:be:7a:c6:
         37:6c:21:5c:66:19:b1:45:84:57:07:1f:60:d8:d7:44:ab:ec:
         ef:6b:01:c7:8e:a9:39:3c:de:a2:59:68:73:b1:1a:8c:9b:80:
         09:22:d4:0a:f9:3e:63:0a:4a:2c:f2:bd:f3:54:7d:ee:d0:13:
         d0:af:e5:2a:68:b5:3e:47:58:4e:09:b2:da:68:c0:e6:af:f1:
         84:66:27:43:ab:9e:8f:ff:1e:3d:4d:08:ff:6d:1a:a8:86:87:
         37:fa:f3:14:17:3d:2c:3c:86:93:9e:03:1a:57:7c:6c:d5:42:
         80:e0:a5:aa:d9:d8:2d:46:91:cc:33:65:84:c2:8f:ed:de:bf:
         34:09:06:1d:d3:54:0d:33:3b:55:04:d5:dd:59:66:05:71:d2:
         a4:8b:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----