Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
File:                     xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json)
Hash identifier:          UViBNti2g4Db/I2gxswLLH3+OCBi5fDeEEEldyrLGTU=
Subject key identifier:   A0:94:DD:C2:7C:86:FE:12:10:26:2D:36:9C:DD:4A:60:79:E8:5B:B0
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Certificate issuer:       /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial:       0C2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
Manifest number:          0C0C
Signing time:             Fri 31 Jan 2025 18:34:02 +0000
Manifest this update:     Fri 31 Jan 2025 18:34:01 +0000
Manifest next update:     Fri 07 Feb 2025 18:34:01 +0000
Files and hashes:         1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: GBgWXXHmHyrTy0cd2xYmcmqj2wjMla3LPyjUHDkZG3Y=)
                          2: 2C1A71D81A9B11EFA4886942C4F9AE02.roa (hash: UTQp4c4ErG5PlENypT/6nQS39iV0gb18Daq4T/Ea0Ug=)
                          3: 022432421A9B11EF8C724E37C4F9AE02.roa (hash: dm8SxeGSmUIEnKBAxZSYW3Vlgy+3VExTf1YjJz0ds5k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3119 (0xc2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
        Validity
            Not Before: Jan 31 18:34:01 2025 GMT
            Not After : Feb  7 18:34:01 2025 GMT
        Subject: CN=679d179a-560f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:b6:d9:d6:6e:ae:9f:23:fb:86:0e:d6:c7:
                    0c:2d:fa:dc:1d:31:35:da:0e:1e:df:39:e0:df:43:
                    8f:63:95:68:96:10:0a:1b:b6:25:f9:36:69:45:ac:
                    04:05:95:6f:8c:45:a4:e1:4e:f1:7d:f6:dd:28:71:
                    88:c6:39:33:07:c9:6b:86:1d:1d:fa:4f:60:75:25:
                    a8:39:82:64:2b:4a:5a:72:28:8f:a3:6a:23:8d:41:
                    d8:aa:69:17:17:0d:d9:62:52:29:e9:e9:1e:7c:47:
                    7d:21:28:d2:fe:37:a5:38:62:db:00:25:7c:89:a5:
                    32:c6:56:38:56:ab:65:4d:e1:a4:fc:65:70:38:22:
                    6d:bb:3b:c6:8b:d8:72:87:c6:8a:b1:8b:5b:64:db:
                    31:94:bd:13:f5:68:ed:e2:36:fe:42:4f:ef:c0:0c:
                    4f:dd:4c:15:e6:c4:21:8d:9b:29:d1:b3:f7:b2:19:
                    b3:7e:b8:5a:15:76:2a:f1:79:c9:e2:75:b8:4b:40:
                    7f:0b:b2:af:94:54:81:e7:d1:f6:69:6d:82:6e:47:
                    43:0c:e3:e8:d5:56:05:57:71:75:d1:31:b1:e2:7a:
                    d8:7f:19:6b:5a:db:22:73:9c:ef:ba:ca:41:6e:3d:
                    46:17:8a:67:90:0f:2b:32:f7:72:bc:90:c9:13:df:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:94:DD:C2:7C:86:FE:12:10:26:2D:36:9C:DD:4A:60:79:E8:5B:B0
            X509v3 Authority Key Identifier:
                keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:b5:4e:c4:59:89:e9:23:33:87:95:7e:00:58:d0:1d:ce:
         21:48:66:ad:12:a7:de:26:aa:29:63:c7:e2:50:59:4d:45:c4:
         83:17:51:56:0a:23:ab:72:da:7b:e9:59:20:94:8b:b2:9b:5f:
         c3:b8:23:93:6b:44:4c:f1:7c:ba:a6:8c:2c:f9:77:55:41:b5:
         9d:d5:af:36:b7:71:2f:6b:17:de:56:e2:c9:59:cb:ba:20:72:
         4c:b5:7d:e9:0c:93:6a:63:9f:b6:e7:37:ad:d2:48:3b:62:21:
         47:1e:e6:33:13:2d:7c:b2:3e:3d:76:29:93:eb:72:5f:d5:46:
         24:1b:b1:6d:71:0a:8f:0a:12:fc:4e:97:74:ea:01:8b:c6:9d:
         1b:35:14:49:a0:96:a1:ff:9a:71:46:91:de:69:80:78:6a:af:
         17:e4:75:73:f6:74:b8:d1:5b:5f:ec:ec:91:2e:f0:40:a6:0c:
         8b:f0:72:b3:75:56:41:99:97:1c:3b:bf:f3:42:5a:2a:43:c6:
         07:a0:ca:a7:e2:e0:4c:f6:77:5e:a3:68:5e:3f:3c:59:c5:fb:
         16:b6:bb:b0:c0:4c:a0:59:86:b6:e0:52:bf:b9:fa:67:2b:ee:
         69:cd:8b:06:a0:d9:0a:d9:9a:0f:0c:00:63:ce:c6:de:0a:5d:
         ec:ca:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----