Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File:                     bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier:          LDSVkmeUXEQKOjuLchnQV/1ChMrzKp/OeNy5k3oqoY4=
Subject key identifier:   D3:DD:9C:E4:03:5D:8B:F1:0A:74:DE:1C:C6:E5:D7:0B:A1:D5:56:EA
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer:       /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial:       0EF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number:          0EEE
Signing time:             Fri 31 Jan 2025 17:37:49 +0000
Manifest this update:     Fri 31 Jan 2025 17:37:48 +0000
Manifest next update:     Fri 07 Feb 2025 17:37:48 +0000
Files and hashes:         1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: IrdoAYimduxz/P/CYnSxTNvdrscS2hYf+c1iSX50HOI=)
                          2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: nPLVWy54o20K9NCgnKMQdW3UHlJN80xYDJGM9u1xe5s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3830 (0xef6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
        Validity
            Not Before: Jan 31 17:37:48 2025 GMT
            Not After : Feb  7 17:37:48 2025 GMT
        Subject: CN=679d0a6c-f4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:7a:17:be:0e:82:4b:06:f9:2b:01:1f:bc:
                    8a:7c:49:96:7b:1d:34:a0:4f:d4:ac:7e:e3:7f:f9:
                    e5:38:18:f2:d2:2c:a5:09:23:6a:e2:76:ad:bb:d6:
                    83:97:5b:45:31:01:d2:b5:15:ae:b1:c2:09:f7:33:
                    70:d6:b3:cc:28:a1:f0:38:c1:80:db:f1:ac:45:b3:
                    ce:10:bd:bf:41:8c:be:ff:14:38:14:e9:87:ad:e1:
                    de:9b:d3:cd:99:92:20:fa:a4:1c:b1:52:5f:d0:99:
                    b1:f1:43:7e:31:27:92:a9:ed:4b:6b:84:fe:9a:c2:
                    56:16:60:65:fa:7f:ad:df:ef:2b:2c:22:81:df:80:
                    07:ef:eb:f7:fd:be:ad:0c:a2:1b:b3:4c:55:26:68:
                    fc:0b:dd:96:71:2f:70:d9:46:2b:12:7d:dd:a2:46:
                    3e:e1:f8:ac:b8:ef:0a:67:ce:4a:06:21:89:95:03:
                    a3:19:71:9c:aa:77:d7:83:54:c3:d8:61:a8:91:86:
                    09:0c:48:49:ef:9d:08:e1:f6:0e:c4:18:08:45:d5:
                    c0:7e:77:b2:91:0c:5f:81:65:c9:04:1e:e4:b7:0a:
                    e8:f5:12:ad:8e:4e:f6:8e:1c:73:be:f1:f4:4d:3c:
                    54:be:7f:35:41:a6:af:3c:54:b3:1d:0c:ed:61:e4:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DD:9C:E4:03:5D:8B:F1:0A:74:DE:1C:C6:E5:D7:0B:A1:D5:56:EA
            X509v3 Authority Key Identifier:
                keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:55:1d:40:2a:13:b9:e2:8f:5a:ba:c3:92:82:36:c7:b2:74:
         92:5e:f9:d0:de:a1:30:89:3d:34:ec:f2:b0:85:43:ad:f1:df:
         d4:4b:b1:bd:f1:bc:85:a5:30:a6:ad:fa:1c:d8:b4:7b:d4:2c:
         dd:0a:4b:1e:c3:68:94:19:d7:1e:26:e7:7f:64:bb:47:50:d1:
         33:9f:02:f9:40:b4:59:03:c5:f6:07:20:4c:7f:2a:dd:2f:2a:
         e6:fe:83:88:e1:1e:9d:3f:f1:6b:f0:18:48:57:c6:04:1a:f5:
         27:22:21:cc:56:f9:02:88:22:0b:7b:fd:e0:be:56:ca:c0:bb:
         ca:e0:52:c0:71:d2:9e:2f:f7:ce:9c:93:d3:ad:f0:ab:5d:2f:
         7b:f6:36:38:d7:7f:e7:47:f9:0e:24:06:5b:b6:79:95:b1:f1:
         8e:82:3a:1a:f4:54:95:39:c9:18:5d:00:bb:3c:6b:58:8d:cc:
         b2:5c:43:67:04:4a:bf:c0:56:27:3d:44:3c:39:45:77:26:fe:
         ac:cc:0d:a5:1b:d7:48:e8:7d:3e:7c:01:4b:66:67:f2:75:ae:
         d2:79:0a:96:94:8c:2d:4e:54:60:b5:73:81:7c:40:71:36:cc:
         bd:41:6d:6c:ec:d5:9b:12:fa:fc:dc:72:64:6f:90:19:ed:00:
         08:87:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----