Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft
File:                     aaSG-_IUhPFBL7ioCieKJIzvvrI.mft (raw, json)
Hash identifier:          O4IIxhYWGqfuM1QZMxdmXX/N2JH7Nk7UKIwTG4urybI=
Subject key identifier:   18:E0:28:E7:F0:54:17:11:D2:0F:1E:CE:A6:00:A3:E4:DF:C5:2E:4A
Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2
Certificate issuer:       /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft
Manifest number:          E5
Signing time:             Fri 31 Jan 2025 04:36:08 +0000
Manifest this update:     Fri 31 Jan 2025 04:36:08 +0000
Manifest next update:     Fri 07 Feb 2025 04:36:08 +0000
Files and hashes:         1: aaSG-_IUhPFBL7ioCieKJIzvvrI.crl (hash: u9st25DMEPdXZ/fnoLuqhKc4AB+DUxZcsKPWOrJndXc=)
                          2: A5656D2E892B11EE94747D6BC4F9AE02.roa (hash: 01zpHNpEXp5bla5wzGX7psaD7zJbZ+wyzWYL5eybWGY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2
        Validity
            Not Before: Jan 31 04:36:08 2025 GMT
            Not After : Feb  7 04:36:08 2025 GMT
        Subject: CN=679c5338-2ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:c3:79:63:60:d0:ae:5a:d5:b2:dc:92:85:
                    be:1b:11:5f:84:ae:21:a9:70:a1:b4:7b:d7:32:a4:
                    de:ae:99:5f:47:83:c3:f5:94:97:31:8a:3a:0b:23:
                    3f:a2:a3:13:d6:59:93:99:26:26:97:20:35:71:f2:
                    c6:8c:3b:46:76:52:5e:d0:48:4a:7d:c9:ce:dc:65:
                    aa:81:da:33:97:f5:31:dc:8e:c6:6b:48:34:8d:9b:
                    a7:0f:b1:9f:87:6c:2b:43:6e:8c:7b:1d:4f:6a:9b:
                    69:c6:3a:87:3e:7b:c2:17:70:89:a7:bc:6d:df:67:
                    2f:2a:5b:3f:24:ee:4b:bc:71:c8:87:dd:c7:93:8d:
                    5b:3f:d6:d1:5d:06:15:d4:65:64:aa:9c:6f:e0:78:
                    f9:b9:49:77:e2:31:38:dd:8a:61:c0:2d:53:bb:03:
                    86:7e:aa:7e:38:dd:6f:1b:4f:3f:1f:00:ad:a3:20:
                    38:53:92:4b:3b:ab:b0:64:9f:fd:7e:67:cc:5b:f0:
                    e2:c3:c2:8a:cb:9e:60:56:f1:7c:48:78:0d:02:75:
                    d0:b4:0c:0c:a6:56:c0:33:fa:e4:9c:db:f2:09:14:
                    22:53:eb:91:77:7b:8a:1c:db:b0:49:28:aa:62:39:
                    4e:ed:36:2a:db:eb:0f:b5:a4:8f:7e:1e:ab:86:8a:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E0:28:E7:F0:54:17:11:D2:0F:1E:CE:A6:00:A3:E4:DF:C5:2E:4A
            X509v3 Authority Key Identifier:
                keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9f:18:39:34:60:d4:56:06:b4:74:d1:d2:ad:96:64:ae:3a:
         cc:57:af:1d:b2:68:a1:d7:c0:b5:0f:ee:19:27:33:00:99:70:
         97:77:68:9a:6d:18:36:88:5d:a6:cb:29:4d:75:ff:e3:fe:ea:
         13:93:74:59:4e:83:96:f6:7f:b1:7b:33:2e:2e:9b:8f:65:63:
         4b:d9:6b:cb:c4:ec:6d:1f:8c:61:e5:37:ad:95:7f:03:8c:58:
         30:e7:30:46:4a:51:f6:22:33:ec:a4:6a:b1:64:f1:97:7c:15:
         dc:10:7d:0e:e7:ba:9a:a2:3c:e4:53:0d:07:1a:8a:5d:6f:a7:
         84:94:48:eb:19:56:9c:71:7c:32:67:66:e0:af:7e:87:7c:1f:
         e6:b9:52:74:ea:ef:cc:bd:c3:20:c4:a2:14:6c:8c:ab:ca:5f:
         e7:f5:1c:83:4b:e4:bc:ea:1c:23:55:66:ec:4b:b0:ea:36:26:
         22:30:69:8a:02:d1:c0:83:88:ac:12:24:11:6a:cc:f1:7c:3a:
         c4:e8:9b:6e:99:1f:45:62:8c:6c:9d:1a:10:b7:56:f8:5f:5a:
         83:b8:03:47:a1:02:16:91:a3:5b:c9:92:4c:42:5c:26:c3:3a:
         ad:44:09:f1:24:e3:71:0f:1e:5a:9a:8c:a9:ac:75:2b:a4:af:
         68:8f:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----