Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
File:                     8bt55W0rCYaSzH0fIm91bHlh4Zs.mft (raw, json)
Hash identifier:          55HeDKNk7HyqmhA4ZJb5mZ6H0hL+ahoCTDsYoqGNL2E=
Subject key identifier:   61:F0:7D:E5:08:2E:B1:0F:07:D1:A2:10:32:EF:8E:85:F3:60:D1:1A
Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B
Certificate issuer:       /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
Certificate serial:       072B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
Manifest number:          0726
Signing time:             Thu 30 Jan 2025 21:43:59 +0000
Manifest this update:     Thu 30 Jan 2025 21:43:58 +0000
Manifest next update:     Thu 06 Feb 2025 21:43:58 +0000
Files and hashes:         1: 8bt55W0rCYaSzH0fIm91bHlh4Zs.crl (hash: gMT9UGCOxflE2YCYBjRvqepejCEZBYppvifb55ruqXU=)
                          2: FD33BACA1E5211EBA055EE2BC4F9AE02.roa (hash: rp0zrUH9UGHjL2DLYngSyvnoyMj95GbsV1MCoTzBwJ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
        Validity
            Not Before: Jan 30 21:43:58 2025 GMT
            Not After : Feb  6 21:43:58 2025 GMT
        Subject: CN=679bf29f-618c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:64:f5:18:e2:fc:8c:bb:37:64:27:d1:22:
                    44:7a:75:47:3b:29:0e:b1:85:77:ce:a0:df:72:0c:
                    61:d4:8b:44:9a:94:1a:d0:10:30:f0:d4:d3:99:ed:
                    14:d5:fa:3a:65:c2:9c:6b:1c:13:14:d6:83:68:8e:
                    73:26:8b:b9:65:18:b6:33:28:39:cd:f1:c1:df:4d:
                    7d:66:a9:30:b7:d6:ee:4b:f6:32:25:69:52:a7:0e:
                    f1:6a:f8:2c:5f:5c:9a:c2:e3:c8:38:4d:3e:20:e0:
                    f3:d6:28:8b:91:f0:58:89:d2:b5:76:9e:92:5e:82:
                    87:22:02:2b:46:25:24:d5:6a:b2:e6:35:8c:57:dc:
                    4c:34:ae:63:98:75:0a:10:ab:a3:a1:8e:57:a6:95:
                    a3:1b:f4:c3:2a:e3:4f:04:41:a7:87:10:3d:bc:77:
                    30:7d:dd:b0:92:b4:92:43:1f:57:2a:da:1c:f4:41:
                    82:f7:04:a4:5b:25:cf:ad:2b:84:a8:22:57:e8:9c:
                    4a:a5:75:49:98:2b:2f:7e:ff:51:3b:4a:24:f8:ce:
                    ae:1b:c2:6b:be:c5:d1:27:65:46:ad:b7:4f:bd:a6:
                    ba:bc:18:5b:e6:74:22:a4:51:d4:ea:44:ca:ec:a8:
                    fd:c2:a3:1f:8e:9f:94:09:a7:2b:08:6f:28:5c:4d:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:7D:E5:08:2E:B1:0F:07:D1:A2:10:32:EF:8E:85:F3:60:D1:1A
            X509v3 Authority Key Identifier:
                keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a9:0d:5c:7c:79:68:8d:06:2a:44:91:46:8b:33:7a:ff:df:
         43:ab:d9:60:22:d6:14:9b:cc:c8:e4:2e:19:5d:28:26:19:99:
         e4:d0:42:f2:8b:66:1b:15:e1:4b:f8:c4:1e:8f:48:bf:ac:aa:
         34:d1:99:fd:a8:f5:95:86:6b:2d:c4:93:45:a9:5f:8a:d0:2b:
         9f:fe:5d:72:5b:1d:b9:4d:30:36:5d:eb:26:c8:c6:b0:de:e0:
         39:72:ea:bb:a6:fa:6d:09:18:b4:81:63:0a:46:d2:6a:2d:8b:
         dc:ee:b8:7c:3d:31:8e:91:87:b2:6d:6d:21:c8:2a:64:e9:f6:
         6e:a5:13:55:08:da:a5:93:e1:ea:ce:76:6b:dd:7d:91:8c:a0:
         3d:79:91:1b:78:07:d3:2d:8d:4d:75:8a:c5:a4:e3:f0:40:ef:
         67:1a:b3:82:ca:fa:80:0c:3f:3f:30:9e:c6:2a:6b:bf:81:17:
         dc:c8:ec:1e:41:fa:4c:3a:36:5e:46:d7:9c:fb:a2:e1:17:be:
         b5:7f:66:21:48:b7:f2:c9:bd:f6:55:f2:9b:81:7a:51:17:62:
         56:00:f7:84:52:a0:f3:06:8a:0e:2d:e7:d4:c9:6a:38:06:0d:
         e0:32:43:38:90:db:6b:d9:5c:f1:01:ef:9d:de:3a:d2:48:f9:
         50:8e:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----