Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
File:                     vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json)
Hash identifier:          RdJLK7u7WGxNprWwVEeRVU5gNwNNfdBOQPo5RU0tNM8=
Subject key identifier:   E2:9B:F5:82:24:00:B2:7C:E3:A2:1B:89:F4:4A:8C:0A:20:2B:5D:8E
Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
Certificate issuer:       /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
Manifest number:          9C
Signing time:             Fri 31 Jan 2025 05:35:38 +0000
Manifest this update:     Fri 31 Jan 2025 05:35:38 +0000
Manifest next update:     Fri 07 Feb 2025 05:35:38 +0000
Files and hashes:         1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: qHgzXk4AhlaxxDytg0WX1G/5kMyoBszcc6oGYlA00s4=)
                          2: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: nV0vvomgUuYAvIzu+zUsDjepnjclen17WArrRDCOOcE=)
                          3: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: 8Rz14qqnLJzTDtmQhY87UU9ZmhRFExlX0EXdINFDVKA=)
                          4: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: pMueZdZNVsSO9dkMJ6HNJEYyNaRswTRPg4jNaq1x/N8=)
                          5: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: kU3sDSAugxDvj2jONja3ZA3jP5BMAHMZw6R2ums+q7s=)
                          6: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: Oc+7IC+W0+Xbte63+cuJ+plpWgmKJWGeEg9BO4bYTrQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
        Validity
            Not Before: Jan 31 05:35:38 2025 GMT
            Not After : Feb  7 05:35:38 2025 GMT
        Subject: CN=679c612a-5639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5f:e4:6f:e6:04:d8:9d:6f:8b:5c:29:87:8e:
                    0b:e7:b0:57:99:ff:c2:37:6c:05:ef:7a:af:be:2b:
                    e2:07:02:e7:8f:bc:d8:d0:6a:05:e2:20:cb:d2:90:
                    9b:dd:af:eb:17:5a:4f:f5:62:c0:a3:68:d0:be:a9:
                    19:65:93:22:9e:ad:82:c8:3f:4a:88:d8:18:62:03:
                    31:72:64:1d:a3:97:29:94:e8:ee:d8:10:fa:b2:95:
                    2a:c4:5e:9f:cc:fd:b7:5c:68:a4:b1:e1:3f:91:05:
                    a7:e4:42:1f:30:36:bb:92:e9:69:be:19:34:d3:d1:
                    2f:a9:91:0e:f0:c8:e0:58:47:0b:e8:56:bb:42:4c:
                    02:74:93:d5:e9:d4:3a:36:46:34:41:eb:e9:32:91:
                    1b:ff:eb:e4:70:f1:44:85:f6:ba:8d:2e:2c:8f:8a:
                    93:bd:79:ff:c6:e5:ba:40:b8:97:18:cd:75:4a:5c:
                    ca:46:42:25:73:4e:3b:19:95:a2:ff:3d:b2:6f:3b:
                    a5:06:60:be:a8:c1:43:31:90:5c:81:b6:52:45:7f:
                    75:c3:78:f4:5f:a0:01:d8:37:5f:73:94:61:90:d7:
                    1c:28:34:ef:73:0c:c6:b4:f6:d3:9a:62:f4:f2:e6:
                    25:64:0a:2e:8a:8b:b5:c0:4f:6c:88:42:bb:39:d9:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:F5:82:24:00:B2:7C:E3:A2:1B:89:F4:4A:8C:0A:20:2B:5D:8E
            X509v3 Authority Key Identifier:
                keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:98:29:5f:a3:59:57:c4:6a:79:71:c3:ce:65:82:d1:5e:74:
         ec:d5:18:03:28:96:cd:6e:6c:62:78:10:54:d4:be:cd:84:23:
         1c:7f:25:61:7f:95:e6:f7:3d:c0:ea:62:da:b1:f8:63:a4:70:
         83:9e:9d:b1:96:5d:2e:ed:6a:5c:c0:bb:7c:e1:01:36:ec:97:
         68:07:ff:92:4f:41:e4:98:88:56:8a:ab:cd:d0:7c:7d:b2:67:
         47:94:9b:5c:20:b9:30:e6:25:56:61:4f:6a:bb:9f:ba:b0:98:
         07:87:b2:09:44:82:1d:1b:c1:1a:34:0c:b6:eb:23:5b:37:99:
         e4:29:71:af:76:f1:c8:35:14:d6:75:a8:2a:81:cc:01:fa:2e:
         aa:b9:d8:d9:3b:1f:f3:97:ac:9d:9d:86:b7:e9:0f:15:4b:2a:
         81:69:50:e3:e9:72:0c:14:58:ef:b7:0e:dc:9c:c9:58:8d:45:
         67:af:92:df:7e:a1:f8:d3:d5:52:64:3f:04:ad:d4:a5:35:f0:
         2d:bf:01:75:3f:64:37:30:7f:8a:24:cf:30:4f:08:0d:26:e0:
         c6:ee:47:73:5f:da:bf:1d:68:87:77:7a:56:56:d3:b9:3b:a1:
         5d:8f:64:ed:bf:06:b9:8f:2a:f4:a4:0e:e5:68:ef:b3:33:27:
         ca:fb:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----