Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
File:                     ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json)
Hash identifier:          8awrj86OR2s/XHalatJEiOQClIJf+p1zsFFAVk/5Dp0=
Subject key identifier:   34:60:68:AC:03:CB:B6:D5:09:C0:D2:2C:EE:A6:43:61:AD:39:DD:04
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Certificate issuer:       /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial:       11E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
Manifest number:          11B6
Signing time:             Fri 31 Jan 2025 17:12:09 +0000
Manifest this update:     Fri 31 Jan 2025 17:12:08 +0000
Manifest next update:     Fri 07 Feb 2025 17:12:08 +0000
Files and hashes:         1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: tHLiFKvj4eevs+yShddkjwCPHI/mkuZ7OlGREpxPlWg=)
                          2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: Ltv8z6WWaa2+oLDNFCiQZzrXSOvYt4/kd8+B2+9mpag=)
                          3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=)
                          4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=)
                          5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=)
                          6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4577 (0x11e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
        Validity
            Not Before: Jan 31 17:12:08 2025 GMT
            Not After : Feb  7 17:12:08 2025 GMT
        Subject: CN=679d0469-b57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:a1:9c:bc:b6:6f:a0:79:8d:9e:10:b5:38:
                    e9:5b:c9:76:73:4d:d6:62:e1:b5:dd:a6:9b:ce:b1:
                    57:87:2a:29:27:79:bd:60:14:f1:25:69:d7:02:4e:
                    01:34:57:b9:eb:53:a8:6f:7b:33:db:11:63:b1:33:
                    80:ac:7d:7d:09:b9:bf:55:fc:f5:9f:36:9c:15:d3:
                    ba:c5:0e:67:8e:66:05:d9:a2:1a:39:04:1c:05:2d:
                    b0:5b:99:89:8f:c5:19:c0:b8:ba:96:ec:d7:9f:26:
                    48:ae:61:a7:55:93:14:d3:49:b4:39:9e:e9:2d:64:
                    12:e8:6d:80:2b:35:38:53:1e:2b:b8:af:88:98:87:
                    15:94:33:80:13:a8:d3:62:c4:96:18:6c:9f:74:ec:
                    3c:ee:ab:8d:12:4d:1e:1a:d3:08:df:a1:4b:c9:0b:
                    91:a1:71:c4:53:82:ad:54:a8:68:fb:99:1e:57:01:
                    0c:1d:02:f1:c2:90:e7:f4:ad:5a:ad:5a:37:cc:d3:
                    f8:b0:c5:9f:b7:96:ba:3d:92:77:5c:ab:b2:ae:dd:
                    9c:c1:79:c2:49:d5:fa:19:ec:37:61:c3:64:a3:73:
                    c6:41:5a:50:d1:85:2c:8d:15:f3:de:31:b5:75:8d:
                    29:b7:4d:82:b4:4a:ad:cf:ef:79:1e:99:b1:c0:cb:
                    93:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:60:68:AC:03:CB:B6:D5:09:C0:D2:2C:EE:A6:43:61:AD:39:DD:04
            X509v3 Authority Key Identifier:
                keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2b:e7:f5:70:32:34:fa:a4:04:3a:c8:a1:29:01:6d:a3:89:
         a3:f3:9b:87:a7:c7:49:9a:06:46:9e:79:f8:46:e6:af:cf:82:
         75:0b:fe:7e:8c:bb:fe:df:c6:d1:9f:ab:67:74:d8:85:9c:c4:
         f7:ea:d7:a9:f7:7e:85:e8:66:c6:68:56:40:4e:54:8e:c1:87:
         06:52:48:1b:d4:e6:75:9e:aa:a4:a2:9f:ca:33:45:36:98:67:
         c2:1c:b4:8b:3d:5a:f2:dc:33:55:f3:9f:65:f3:90:59:2c:99:
         18:55:24:84:5b:2a:c5:5c:29:bb:7b:6b:e3:50:f2:dc:d8:4c:
         32:a0:52:73:59:ef:5b:bd:25:2b:b4:ed:4c:61:22:80:8b:b6:
         a9:07:fe:d4:af:26:a6:d9:81:f8:60:89:65:3c:b7:eb:75:f2:
         8b:f5:eb:43:f6:92:6d:1f:1c:a3:37:d6:bf:61:c7:f7:f7:f2:
         0f:1e:63:cc:fd:9c:3b:80:6a:de:fb:e4:ee:97:9d:94:b2:92:
         1c:0b:2b:91:59:70:01:e8:e3:3b:b0:76:02:5f:ba:45:a4:c5:
         ca:60:9a:e8:df:68:a4:ec:95:0f:0a:b7:2b:cf:0b:55:41:21:
         fc:f8:c7:fd:cd:4c:f6:0b:51:ea:38:14:0b:20:99:0c:37:93:
         a2:dd:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----