Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
File:                     up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json)
Hash identifier:          h7xdzcgzxyjEk9qT8/wDwTys64zkRRHsJtHAuVv/G4s=
Subject key identifier:   ED:6F:2F:75:9D:5E:32:9D:D7:53:3B:DC:E4:85:A6:A9:A9:00:F2:75
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Certificate issuer:       /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial:       346C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
Manifest number:          345B
Signing time:             Fri 31 Jan 2025 14:31:26 +0000
Manifest this update:     Fri 31 Jan 2025 14:31:26 +0000
Manifest next update:     Fri 07 Feb 2025 14:31:26 +0000
Files and hashes:         1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: rG+4iBDxDg0m/xSBd38S30vzZKHDBj/IOVPn0Qp2Zyc=)
                          2: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: CO44ykdfCTQ7Mv5nVqTIPuTfPATeSesiwshtkZkvJFE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13420 (0x346c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
        Validity
            Not Before: Jan 31 14:31:26 2025 GMT
            Not After : Feb  7 14:31:26 2025 GMT
        Subject: CN=679cdebe-f6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:9d:81:f5:79:07:7b:80:73:45:1d:68:66:
                    af:45:b2:8d:d9:e3:d4:96:be:07:c6:21:ed:6b:5f:
                    99:27:b0:9a:aa:52:22:f1:a0:bc:f3:b4:b4:31:98:
                    43:c0:7b:52:e2:9b:49:e3:93:78:49:52:9f:98:5f:
                    bf:50:3d:18:be:33:29:eb:e1:c4:ee:dc:af:b4:3a:
                    52:e9:46:3f:41:e3:22:73:ae:05:2f:e8:bb:bf:2b:
                    f3:08:21:72:43:5f:9c:46:f3:aa:22:d5:cc:48:06:
                    f6:93:fc:ce:e7:51:7c:b4:44:b2:9a:3b:5c:4c:05:
                    3f:5f:72:92:1e:3b:42:a4:65:f1:97:d7:ee:4e:e9:
                    3e:e3:a0:bd:cc:10:9d:24:a9:61:cc:74:f8:bf:e5:
                    7c:35:aa:78:e4:58:f6:53:75:41:1c:fe:0c:1f:61:
                    30:0b:4f:85:12:0a:fd:42:f7:dd:2a:3c:06:f4:59:
                    a4:dc:65:04:5c:ee:c8:dd:c1:33:b8:bc:15:bc:75:
                    e0:ca:5e:b4:6f:a3:b9:6b:82:89:43:7e:a4:de:3a:
                    b9:09:f5:cc:cc:54:3e:a4:89:e0:b0:68:bb:67:f7:
                    61:34:cd:72:e6:e2:8d:f4:c9:19:58:d8:db:bd:12:
                    13:09:9e:9f:68:bd:c5:e2:1b:57:9b:41:0b:93:d6:
                    5f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6F:2F:75:9D:5E:32:9D:D7:53:3B:DC:E4:85:A6:A9:A9:00:F2:75
            X509v3 Authority Key Identifier:
                keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fb:8d:01:f4:60:13:a3:0a:26:e5:8f:38:4d:37:76:71:1f:
         8f:4c:72:b4:ad:e4:89:65:b4:9b:03:ee:17:75:80:63:49:c0:
         5e:03:83:66:d9:b8:df:0c:0d:35:26:df:fc:50:c1:a5:a6:db:
         5e:07:f6:9e:21:4d:fd:12:cc:95:9e:78:2e:c1:68:90:1e:09:
         67:7b:44:ed:4c:5f:af:1c:b8:ab:20:45:ef:a1:73:83:3a:62:
         56:7c:a4:af:df:3d:c7:ed:db:e8:6a:dc:fe:db:5d:69:f0:67:
         f4:3c:4a:81:0d:55:01:f5:b9:7a:16:33:91:bb:a3:fd:b4:b2:
         0a:da:5c:ef:5e:0c:26:45:da:7f:87:17:2e:3a:de:c4:36:53:
         18:36:98:0d:17:70:1d:50:bf:d8:f5:13:8a:0b:38:bb:ab:6f:
         86:4b:3f:a8:17:f8:c7:3c:d4:34:f6:7f:ae:d8:0d:6d:a1:c1:
         36:95:c6:43:aa:e7:c3:14:c1:ae:ca:37:af:3a:c5:6c:d8:71:
         65:b0:42:ae:4a:23:75:39:8a:f7:4c:fb:f6:a4:59:85:52:87:
         2a:d7:c4:c1:af:f6:c0:b8:2f:2f:39:68:0f:a9:99:a7:fd:5e:
         d1:00:93:f8:9e:d7:a9:4d:0d:62:7f:fd:71:c3:e8:1e:10:62:
         6e:2a:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----