Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
File:                     FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json)
Hash identifier:          xioyT6j37y6Me0NX6k8ty4s6eilRbd2ilathFwXY9hg=
Subject key identifier:   CE:DD:2F:3D:F9:A7:7E:89:CB:34:0D:BB:98:02:3E:E5:26:82:E1:8A
Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
Certificate issuer:       /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
Manifest number:          77
Signing time:             Fri 31 Jan 2025 05:48:44 +0000
Manifest this update:     Fri 31 Jan 2025 05:48:43 +0000
Manifest next update:     Fri 07 Feb 2025 05:48:43 +0000
Files and hashes:         1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: 67CEY4RD2uattzam3lwrpSxbPWPch/YjL8BLTCHiiNI=)
                          2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: AqGZytLz79ZmCSne/bhw4dD+/PQ46qKOd6q10ehPEX0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
        Validity
            Not Before: Jan 31 05:48:43 2025 GMT
            Not After : Feb  7 05:48:43 2025 GMT
        Subject: CN=679c643b-03a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:d8:6e:45:2a:7b:7a:a1:95:11:fe:e1:64:
                    e8:fc:20:01:a2:33:66:ac:09:77:2b:e5:7e:9d:9d:
                    1c:7a:74:0b:5b:61:d2:3f:8d:7b:d2:19:2d:cd:fb:
                    3b:ad:c3:40:fa:69:45:3c:66:a2:29:4c:0f:f2:d0:
                    1e:fc:6f:9b:1c:26:68:d5:c5:7c:14:f3:f8:ee:3c:
                    7c:7d:c0:ab:2a:1f:94:92:4f:73:c1:48:ea:83:fd:
                    fa:2f:be:4e:70:fb:52:9e:f3:6a:fe:f8:0f:fc:68:
                    96:ff:28:e8:45:52:37:c9:ee:f0:69:66:70:3d:e4:
                    2f:1d:aa:34:fb:ae:e2:91:53:d5:c5:51:f5:bb:11:
                    e2:2a:1d:04:a2:d4:96:92:40:8e:5e:62:f4:9b:b9:
                    68:a4:91:95:fb:04:86:fc:26:f9:df:ad:44:21:7e:
                    13:3a:44:b5:35:28:e6:00:92:65:e7:8f:8a:6e:26:
                    22:b7:8f:0c:f6:32:ce:d0:ee:65:05:81:fa:9c:8f:
                    68:be:8a:76:c4:34:bb:30:6e:77:29:e5:7f:bd:94:
                    7c:f2:c7:bc:fd:20:77:8e:17:c1:e2:d6:8c:9b:13:
                    b3:f3:ed:71:e6:f2:fd:a4:6c:61:de:93:65:60:3d:
                    f4:8f:03:93:04:8e:a0:f7:2a:7b:92:7f:8c:79:25:
                    6a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DD:2F:3D:F9:A7:7E:89:CB:34:0D:BB:98:02:3E:E5:26:82:E1:8A
            X509v3 Authority Key Identifier:
                keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:86:52:0d:48:8a:ae:0b:f2:2b:58:db:7c:d9:01:c8:ca:9d:
         2e:4d:39:56:8e:0f:ca:87:31:a2:f4:5f:d3:22:d1:55:4a:72:
         bc:dd:52:c2:8c:c3:85:6e:f9:fd:0f:d8:b2:8b:14:3c:42:c4:
         0b:76:4e:de:64:13:7e:e2:cd:2f:82:6b:0c:0e:7a:9e:15:4d:
         13:1e:0a:23:83:8f:79:63:e5:50:8c:53:2e:a6:7d:9a:2e:14:
         55:00:bd:f3:49:ee:c6:f6:e8:67:69:20:0b:49:f0:c5:f9:40:
         76:90:cb:01:3a:23:cb:ce:65:9c:58:4a:41:57:f8:1c:f8:0d:
         82:58:cd:7a:12:38:14:d0:27:87:24:97:36:30:fb:39:3f:a2:
         e9:d9:76:36:63:09:21:17:e4:56:de:74:78:75:24:2f:b7:41:
         48:6a:31:b3:ce:33:18:a4:fe:fe:5e:f9:99:a1:71:de:a4:5f:
         77:72:74:01:42:aa:7a:91:7a:c5:63:53:5c:8f:69:6a:27:b5:
         ea:d5:45:6e:b0:38:6b:e3:ea:1e:78:44:fa:99:16:d2:9b:54:
         30:dc:b3:9d:f2:db:38:bb:a7:44:5a:fa:60:04:06:31:85:99:
         ed:04:e0:0e:65:96:46:99:82:c6:e0:4a:81:a6:79:7e:db:0f:
         55:b3:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----