Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
File:                     4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json)
Hash identifier:          wV0DyZt/Ab3lMLIP7u3j2fsC4xbtiuBbxf3yKUlfih4=
Subject key identifier:   18:74:43:64:C1:E8:5E:9E:7E:ED:E1:97:F7:36:7C:A8:D4:7C:95:62
Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2
Certificate issuer:       /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
Certificate serial:       0777
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
Manifest number:          076D
Signing time:             Thu 30 Jan 2025 21:24:53 +0000
Manifest this update:     Thu 30 Jan 2025 21:24:53 +0000
Manifest next update:     Thu 06 Feb 2025 21:24:53 +0000
Files and hashes:         1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: 2pSiBNW95ruAZ1nGxCGtr2sppZYiToeCbS19Rb29EFM=)
                          2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: wMcaf6KjNyS0A+6aPLv02H8xkgAGjk1qWQXSXwZEtXM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
        Validity
            Not Before: Jan 30 21:24:53 2025 GMT
            Not After : Feb  6 21:24:53 2025 GMT
        Subject: CN=679bee25-ced0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0b:e3:0e:49:6d:d4:0b:db:9a:0f:a2:53:aa:
                    1b:14:4d:9d:8a:2c:7c:f4:d8:4a:ae:22:87:9a:3b:
                    36:09:67:9c:fd:5b:4f:a1:4c:14:96:bb:a3:10:bf:
                    03:2a:e8:af:9a:8c:29:59:58:66:bc:96:6a:21:a1:
                    af:a1:a0:04:0f:25:51:0a:e2:2a:6c:e1:d6:76:fa:
                    a5:09:3d:1a:1b:12:6f:a5:e3:80:52:90:30:9c:7a:
                    c0:ce:b8:c5:e6:85:5e:4c:9e:82:ef:2f:c5:3f:27:
                    cc:e4:e6:9b:83:c3:f5:b9:cf:10:41:5c:a5:8a:e5:
                    e6:29:91:cb:2c:9b:de:8c:4d:d1:ab:43:74:e9:f2:
                    5d:2a:ce:c5:ad:70:49:6c:3e:ac:1d:34:10:0f:6b:
                    70:ae:2b:7a:cf:d1:e2:93:6f:c4:22:ea:e1:c7:8e:
                    d3:14:65:dd:a5:99:f0:bb:46:55:78:81:4d:d1:49:
                    d6:a1:16:0b:3e:a3:3b:fc:12:e0:00:1f:b0:bf:22:
                    04:7c:0d:c4:fa:e0:1e:47:61:a3:5e:c8:60:3b:22:
                    8d:0d:46:85:94:95:27:de:4b:f2:ec:37:ff:0b:43:
                    44:2e:35:cf:7a:02:56:a0:79:38:f4:ee:39:7d:81:
                    6a:eb:31:a4:44:12:b4:5b:23:3a:44:af:8f:55:96:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:74:43:64:C1:E8:5E:9E:7E:ED:E1:97:F7:36:7C:A8:D4:7C:95:62
            X509v3 Authority Key Identifier:
                keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d1:7e:5e:9f:c3:ec:2d:41:bc:11:ca:cc:22:49:38:5d:8c:
         80:c6:56:73:70:c3:8c:1c:66:bc:9c:4c:ba:4f:ff:e0:ce:b3:
         dd:dc:66:c9:a5:0d:2c:d3:3c:75:e3:61:7c:39:34:ea:48:67:
         74:96:26:28:d1:5a:bb:ed:9d:3d:cd:d8:0e:a3:8e:3b:c3:4c:
         b9:35:4a:3c:94:c3:1e:7d:49:34:b7:e8:a0:a2:10:6c:21:20:
         88:c3:31:96:c0:df:1a:e7:63:33:6d:28:2c:bb:cb:10:86:de:
         a6:41:73:4d:4d:ee:d8:d4:75:db:9a:c8:42:7f:d4:61:cf:c0:
         7b:4a:d8:50:f4:5a:28:c1:a6:8b:34:fd:f9:10:f2:aa:aa:fb:
         d3:5c:71:cd:e8:ae:cf:94:9a:9b:76:9e:6b:5c:7a:d0:02:a3:
         c7:5d:99:12:5a:c0:10:21:04:70:de:8b:9d:4a:fd:19:3b:e8:
         d1:a0:5e:ff:c9:a5:f2:27:07:4a:9f:3a:72:18:7c:ef:e9:49:
         63:ef:19:1e:f9:79:8b:5e:ef:be:e4:21:64:62:ac:1d:23:1e:
         a7:25:c0:b7:d2:cb:53:1c:55:4b:14:88:3d:c2:0c:e7:6e:4a:
         8c:ae:17:2e:56:83:a0:ea:34:13:ed:64:e3:f0:cb:6c:29:ec:
         45:1a:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----