Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft
File:                     2h2yzTH0VPaVYdhmXck--BLzl7A.mft (raw, json)
Hash identifier:          LQ0l1HE1k1aY67XQ/bTmcD/GMexp/6aGZbeUgwcnsww=
Subject key identifier:   64:92:56:CD:5B:4E:10:EB:25:FC:56:7A:F8:39:52:61:B4:B9:6B:11
Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0
Certificate issuer:       /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft
Manifest number:          E9
Signing time:             Fri 31 Jan 2025 04:31:22 +0000
Manifest this update:     Fri 31 Jan 2025 04:31:22 +0000
Manifest next update:     Fri 07 Feb 2025 04:31:22 +0000
Files and hashes:         1: 2h2yzTH0VPaVYdhmXck--BLzl7A.crl (hash: bbsid7eN5ty8AQnX1XPeGGAYpN49b0++ZbCVFPpBbaM=)
                          2: 730B201A81E911EEAEFE7735C4F9AE02.roa (hash: +MbNfxyhCamzN9tHOdSAmjfpdzIa0MaUiU8CGByu53M=)
                          3: 4317395081E611EE9EFE132BC4F9AE02.roa (hash: nEgdbI6cuLNeRuLPJnkG4QO1ReMDMeUPyTkJXfsO5xE=)
                          4: E71AB92A7F7D11EE8C183162C4F9AE02.roa (hash: shdTH9d6PBZ6zz9OKDDb+zRKMfpyDz4E/FhykKTuDEk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0
        Validity
            Not Before: Jan 31 04:31:22 2025 GMT
            Not After : Feb  7 04:31:22 2025 GMT
        Subject: CN=679c521a-f484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:bb:cc:65:97:6e:e9:7f:d0:31:d5:5d:61:
                    ad:41:fd:51:9b:f4:b6:17:19:33:60:f3:b7:d5:e9:
                    73:fa:a5:7c:a1:a0:68:ed:bb:24:52:30:ab:ed:f1:
                    17:bb:52:b3:30:a3:65:10:f8:51:75:50:45:6a:58:
                    02:4e:37:d1:42:2c:fa:d4:2a:4d:8b:f1:9e:05:7e:
                    47:ed:e9:bd:28:00:d1:10:96:d9:cd:a3:a1:e4:82:
                    35:0b:6b:b7:9f:a7:3f:9a:c8:56:9c:f8:29:b9:6e:
                    7b:e3:1e:0b:02:4c:30:b0:62:68:24:f1:7a:47:21:
                    cd:77:a9:b6:91:34:a0:29:9e:95:7c:01:83:f9:ae:
                    57:4e:b9:3b:eb:fa:f5:99:48:b0:f6:28:63:40:2d:
                    df:4b:d3:39:81:86:90:bc:63:ca:c6:8c:82:bb:e6:
                    73:56:5a:04:58:25:6a:c4:51:5b:7a:23:63:47:67:
                    6b:d6:1b:85:a8:45:2c:ac:73:22:b6:dc:b2:95:56:
                    ef:d6:a4:d4:44:8d:dd:76:f9:30:e4:f9:de:04:47:
                    69:17:09:b9:87:e6:7b:95:f3:72:d4:af:bf:aa:72:
                    a0:83:73:93:be:29:99:f0:ac:34:a0:96:23:cd:c2:
                    50:3d:ca:89:d4:73:dc:b3:1e:1e:fe:ea:cc:28:77:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:92:56:CD:5B:4E:10:EB:25:FC:56:7A:F8:39:52:61:B4:B9:6B:11
            X509v3 Authority Key Identifier:
                keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:eb:d2:3c:c1:d8:fd:15:63:ef:10:07:b7:e6:57:63:74:be:
         f1:2d:25:1b:7b:32:45:b0:87:23:1e:7c:2d:56:8e:98:6e:c9:
         a2:b4:15:77:f8:0c:cd:29:3a:9a:07:8b:12:47:0f:78:34:13:
         ba:a5:b5:cb:f8:b8:73:d7:f6:93:75:c1:3d:77:43:f3:3d:30:
         fd:a9:1d:88:2a:12:0c:6e:b5:f8:d6:ed:31:cd:09:8a:21:3b:
         85:bb:98:6d:1e:5d:9c:be:96:5e:9a:73:a6:cb:71:ac:33:94:
         06:52:a4:69:3b:c9:a3:e2:46:cd:93:5b:ce:34:2f:2e:49:30:
         d4:04:38:37:a7:49:e5:82:80:26:99:f8:27:aa:63:5c:b9:bb:
         18:8f:ae:a0:da:1f:81:20:0f:cc:a5:50:84:3a:f1:5c:df:4f:
         b9:2d:a5:a9:26:8d:41:b8:f6:99:eb:b7:47:28:a2:d5:9f:f5:
         87:12:26:67:c4:13:4e:44:a6:c2:d4:33:76:8c:e3:ba:8e:fc:
         8a:aa:7b:ac:26:48:5c:c0:ad:2c:c3:d6:8d:32:b1:ef:5c:a1:
         44:3a:9b:56:b9:2f:c7:a6:39:a7:d0:f5:5e:9c:28:3f:fa:a7:
         94:fe:8d:d5:a5:7c:01:79:e1:b8:cf:bd:bc:c5:b6:c0:d1:03:
         07:8e:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----