Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft
File:                     oKMiStDIKz-aYvNHrKP5RdsI8rA.mft (raw, json)
Hash identifier:          G+FNi51s8v/gSgiiGX+A10rcEADqzmemfj/k8mU/jC8=
Subject key identifier:   F1:2E:8C:81:0B:A0:ED:27:CD:E3:CF:D8:AB:5F:C0:32:A2:82:39:C2
Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
Certificate issuer:       /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Certificate serial:       3019
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft
Manifest number:          2FEB
Signing time:             Fri 31 Jan 2025 15:29:32 +0000
Manifest this update:     Fri 31 Jan 2025 15:29:31 +0000
Manifest next update:     Fri 07 Feb 2025 15:29:31 +0000
Files and hashes:         1: oKMiStDIKz-aYvNHrKP5RdsI8rA.crl (hash: J9i6RexnSOUFms3PxgyGhvQmEPkXWFm/ygDwoac4QL4=)
                          2: 583C1F6854F611E79DF7E643C4F9AE02.roa (hash: J9SJ4DIJ/7Jqarub1sf8j6PHgZAGlGGdRbRsMiv9apI=)
                          3: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (hash: 9deMiuArgkPyt65CV7Ht+L/9JKrWYVcP+qJb8LKGzOI=)
                          4: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (hash: 2+WTGnYcaeWw8w6rtvBrYx7uq+JHkK1rDrCVxpG+T+Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12313 (0x3019)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
        Validity
            Not Before: Jan 31 15:29:31 2025 GMT
            Not After : Feb  7 15:29:31 2025 GMT
        Subject: CN=679cec5c-5764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:fa:7c:bf:6a:97:7e:17:4a:63:f6:22:09:
                    06:ee:c8:0b:02:06:c5:4d:7a:e2:f4:4c:92:56:80:
                    c3:81:13:6b:10:32:69:50:01:95:77:e4:f9:ac:81:
                    18:17:1d:50:26:b9:57:52:24:e0:32:7b:92:d3:ca:
                    4d:4c:33:f8:5c:17:80:4f:0a:5c:c6:d3:b5:35:58:
                    ce:8d:df:89:89:1c:0c:ab:c8:39:1f:6b:58:99:27:
                    7f:de:67:46:e0:ad:b6:b8:35:0b:c1:a2:61:e2:4c:
                    e4:06:0c:4a:d3:db:51:c4:9e:9c:18:b4:35:df:0e:
                    70:d5:26:d4:15:e0:33:d6:9b:45:1a:b5:58:b6:0c:
                    36:0f:90:9f:2d:ce:8b:41:0a:c0:25:95:0f:5c:75:
                    3a:7f:be:7c:40:c9:4e:a8:59:0c:dc:90:5b:fb:e6:
                    9a:38:02:c8:cb:d3:8d:bb:52:ba:1e:21:17:a8:2a:
                    4f:dd:55:2f:39:12:c1:43:6d:60:ab:d7:31:68:97:
                    21:f3:5e:a1:8d:8c:05:43:df:89:1b:57:e4:b0:79:
                    fa:e5:68:56:5c:61:01:fb:2e:01:53:d0:03:a9:4e:
                    d7:7f:35:49:13:76:80:0b:e4:a9:17:6a:7f:0b:95:
                    18:87:10:1d:bd:2b:29:72:9f:f9:aa:bc:e6:35:54:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2E:8C:81:0B:A0:ED:27:CD:E3:CF:D8:AB:5F:C0:32:A2:82:39:C2
            X509v3 Authority Key Identifier:
                keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:76:38:01:96:05:81:0a:47:dd:a7:e8:0c:de:1c:0f:52:21:
         6c:18:95:f9:a7:36:f1:bf:5e:0c:ed:81:3c:ff:97:15:cd:ca:
         8d:50:00:92:02:84:ce:60:54:71:36:16:fd:82:43:7b:56:f7:
         7e:d9:83:9e:10:6c:bf:f8:35:bb:96:d5:78:19:c5:10:cf:fe:
         ec:59:3b:9d:e8:d3:b7:ba:40:00:b5:47:a8:ba:ad:73:c6:4b:
         37:f5:c1:5b:3a:c5:49:f7:ca:95:62:fc:8b:0b:80:50:0f:3c:
         fc:9b:8d:65:cd:81:65:78:e2:b9:1b:cb:87:5f:24:00:d0:89:
         3a:af:5d:da:e5:ad:46:69:3c:00:88:ba:5f:89:a4:8b:43:f3:
         49:33:e5:43:e4:12:0f:93:50:29:b6:d7:6f:92:36:79:52:b6:
         98:30:32:cb:2a:4d:71:f9:b1:a9:40:6a:0f:ec:0d:76:c1:2b:
         72:b8:1b:93:49:f2:a0:3c:28:e8:53:8e:d3:aa:3f:cf:97:e1:
         ff:65:8c:14:b6:ac:f5:96:bf:6f:2f:08:75:5d:74:49:fd:35:
         39:4d:03:72:95:24:f5:60:c4:9d:b8:1a:4c:aa:60:36:d0:3f:
         b8:a8:c6:26:7e:ee:d1:4c:16:e5:db:86:83:49:8c:5d:db:a2:
         11:4a:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----