Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
File:                     f_ZWW3k9deFOctx32CgmvUO3_nU.mft (raw, json)
Hash identifier:          F566AAIrI+wVKOB+GZDGjwqbO2FxIi+IO0mJb1JnJIc=
Subject key identifier:   5D:CD:83:A7:C2:58:69:E6:7C:89:48:E8:F3:26:AD:C6:7B:B8:05:D9
Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
Certificate issuer:       /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
Manifest number:          0164
Signing time:             Fri 31 Jan 2025 03:14:30 +0000
Manifest this update:     Fri 31 Jan 2025 03:14:29 +0000
Manifest next update:     Fri 07 Feb 2025 03:14:29 +0000
Files and hashes:         1: f_ZWW3k9deFOctx32CgmvUO3_nU.crl (hash: 1xrsHAsKFFruD1aKDtAdzhLkS7MXnFU7GRA+3mT6PEc=)
                          2: 7B45598CC3F111EDAB69B855C4F9AE02.roa (hash: oy6CuXznzDxvCcCTLX+ycRnbigXZxdsphsPYMQnW6Ew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
        Validity
            Not Before: Jan 31 03:14:29 2025 GMT
            Not After : Feb  7 03:14:29 2025 GMT
        Subject: CN=679c4016-2230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:d2:2e:38:50:3a:57:a3:fd:68:5d:cc:d3:
                    18:74:1f:35:ad:22:ed:07:f6:ab:55:dc:e2:15:4a:
                    f9:0d:c4:d3:5e:4e:88:ec:b8:1c:e7:35:f6:26:26:
                    ef:b5:d2:83:a0:5e:92:6a:dd:33:4b:a4:36:ec:fd:
                    4a:fe:8b:7f:34:b3:46:dc:64:75:50:b4:a9:40:9e:
                    08:8c:b9:d5:53:70:1b:51:b3:4e:cd:8a:7d:b6:ca:
                    80:84:20:75:05:cc:97:d3:ab:ef:f4:33:f1:60:f5:
                    e2:30:bc:36:d2:a2:1e:f7:cf:f4:6b:c1:35:bb:15:
                    e4:b6:18:db:2d:77:9a:61:4f:8d:14:63:95:f4:a3:
                    44:cf:15:00:1c:47:9a:63:54:6f:78:f3:a5:62:df:
                    5c:86:69:c3:03:ee:d7:59:41:7a:09:76:02:46:69:
                    b6:8a:d2:04:72:76:79:03:42:e6:51:e2:26:b3:06:
                    bc:72:04:62:95:21:ee:f7:9c:9f:d4:c3:c7:7e:fa:
                    91:52:65:ef:94:f5:4b:3e:d7:3c:3a:5c:2d:ca:32:
                    cb:dc:aa:80:fe:e0:c7:f3:45:98:f0:8c:2f:3e:99:
                    59:4f:9c:df:a2:64:92:3d:39:b9:f4:89:c2:c5:7a:
                    77:e0:e6:95:3f:99:e8:5f:12:4b:c0:29:2d:4c:52:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CD:83:A7:C2:58:69:E6:7C:89:48:E8:F3:26:AD:C6:7B:B8:05:D9
            X509v3 Authority Key Identifier:
                keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0a:08:dc:d6:57:5a:9b:a3:6b:cb:ef:b3:cf:cf:9f:dd:15:
         8a:bc:db:57:52:dc:ed:79:cf:a5:8d:d4:75:d5:a5:c0:b1:2c:
         b8:35:d6:e0:57:79:e1:33:c2:b1:4b:a9:0c:f6:91:41:b9:38:
         a2:c1:f4:04:90:e1:2c:9d:39:80:33:2e:ac:b5:a7:2f:e5:c8:
         d0:51:67:02:36:2e:eb:49:e9:ae:41:c0:c1:27:f7:34:4e:94:
         7a:59:19:6a:75:08:56:7e:44:2e:10:53:02:ad:de:15:67:4b:
         3e:05:6c:64:63:85:b4:7c:be:db:ce:73:58:f7:ba:4a:15:09:
         85:00:b8:d5:a7:20:06:78:bc:75:57:52:37:00:ad:7a:86:57:
         a4:0a:0f:83:8e:0a:c1:64:4e:95:e9:d8:98:c6:df:01:fa:b0:
         80:91:25:79:e6:ed:cc:8e:0b:88:e4:d0:07:e3:b9:61:33:3d:
         2e:75:05:8c:59:a5:c8:64:34:b4:6e:e8:a7:85:d5:a1:4f:98:
         54:33:67:eb:85:25:21:4c:de:3d:ac:82:d5:b5:ef:fb:0e:32:
         15:54:0c:a9:4f:bd:48:be:52:2d:02:8d:58:22:09:14:95:9c:
         a7:c5:72:17:9f:40:1d:c0:58:f6:3e:4a:14:e8:31:45:9f:7f:
         4a:e7:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----