Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
File:                     MJoqNkM0qd26Sm1EBB15pdMrr6s.mft (raw, json)
Hash identifier:          OjvlWxf0VOsugMVxVZBlx6TeItGW7ozJuKxjymJ3J1I=
Subject key identifier:   A3:72:E6:45:05:72:A3:4C:21:09:8C:A2:AA:D0:4D:49:FE:7D:BA:80
Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
Certificate issuer:       /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
Manifest number:          0280
Signing time:             Fri 31 Jan 2025 01:42:13 +0000
Manifest this update:     Fri 31 Jan 2025 01:42:12 +0000
Manifest next update:     Fri 07 Feb 2025 01:42:12 +0000
Files and hashes:         1: MJoqNkM0qd26Sm1EBB15pdMrr6s.crl (hash: 3/1ywRNXpRlArvOnWQDYcpcSIQn8Q8qmimLIkjSOJJs=)
                          2: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (hash: O9VH081pE8F9Lw59kLD8OKGix93beOfAyf1mf+VTITU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
        Validity
            Not Before: Jan 31 01:42:12 2025 GMT
            Not After : Feb  7 01:42:12 2025 GMT
        Subject: CN=679c2a75-ad6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:d5:2c:65:7d:31:80:0d:af:19:6b:90:f8:
                    24:68:13:46:5c:bb:ba:9c:6c:23:60:17:f2:97:49:
                    d5:fd:2c:a9:e0:71:7c:20:69:62:99:56:20:cf:e7:
                    06:64:3e:52:c2:59:e1:5c:27:3b:5e:fe:50:68:b9:
                    04:0f:63:a0:b8:55:f1:10:bd:88:02:8d:04:80:76:
                    01:38:3e:20:f7:25:fc:a7:5d:9f:55:06:43:69:7d:
                    09:88:b0:ce:3f:71:ed:7c:c5:fd:49:0b:85:25:09:
                    05:23:fc:d1:42:36:c1:72:c3:ea:c2:ff:cc:f9:a4:
                    af:c6:9f:38:e6:b1:7c:ad:fa:c3:1d:e8:e8:a9:6b:
                    02:94:77:a5:f7:49:fb:76:ee:8b:e2:5a:a5:2f:a6:
                    3d:4e:9d:20:39:78:f4:e8:a7:af:2d:94:f2:0a:b1:
                    6b:2f:4c:c2:09:e3:f5:bc:15:d8:79:2b:79:18:55:
                    d2:f5:18:44:84:a5:ea:5b:1e:de:eb:8f:5c:e5:7c:
                    11:fa:b9:e9:cb:a7:5f:bd:f9:df:16:7a:5b:45:4f:
                    13:40:f0:56:3e:21:6d:48:ba:89:bd:1d:3e:4a:4c:
                    10:79:cb:53:b3:1e:37:48:24:b1:cb:3b:48:ae:c6:
                    30:bc:fe:00:82:a3:87:f7:52:8c:47:bb:bd:87:18:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:72:E6:45:05:72:A3:4C:21:09:8C:A2:AA:D0:4D:49:FE:7D:BA:80
            X509v3 Authority Key Identifier:
                keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1a:3c:44:20:ab:eb:a6:b4:96:6c:59:55:16:6f:49:72:e9:
         0b:f0:f6:e5:49:1d:dd:64:ff:e1:4e:c5:b5:3b:b5:bb:b3:4c:
         2c:26:b4:48:6e:36:4f:6d:21:9d:d5:4a:97:95:1c:f9:53:75:
         5b:bd:09:66:f6:0b:a2:7d:33:6f:42:30:0e:dc:ab:d3:7f:c1:
         d9:7c:ba:bd:ad:e1:cc:a1:94:3b:76:96:13:c9:97:e4:26:24:
         b8:6d:2d:94:10:d9:9d:6c:a0:4a:68:6b:2d:16:55:30:51:2a:
         d0:31:89:d0:40:b0:bb:f8:66:c8:1f:f3:55:16:a4:bc:14:ae:
         1a:2a:39:f8:73:bd:df:e9:6d:2a:0c:b2:ee:1e:4c:58:d3:17:
         64:b6:56:93:47:4d:ea:ca:6f:3c:21:76:87:3c:fb:83:2b:78:
         4b:c7:6c:2c:9d:9a:0c:04:be:69:3d:e8:c9:f0:8b:91:5c:ca:
         d2:04:6f:46:da:70:91:c4:99:82:d5:88:ee:1e:89:2f:c8:37:
         8b:6e:b5:dd:10:a1:8b:10:2e:42:c1:0e:62:e5:b8:5d:86:fb:
         f7:ac:81:11:33:6e:f8:66:1f:e6:34:ed:86:04:e7:7e:a5:ad:
         e2:67:81:58:62:76:02:bf:49:f6:13:6a:9a:44:3c:d8:3e:c7:
         17:3b:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----