Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
File:                     5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft (raw, json)
Hash identifier:          Wz5QExyKwpJjH8Ym7FtoiSLnZGMnqxuIrd7ya/MfPzg=
Subject key identifier:   FF:94:3C:08:87:1A:12:1B:BE:12:0E:01:53:C2:DB:31:AD:11:48:B8
Authority key identifier: E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75
Certificate issuer:       /CN=A91B9B0D/serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
Certificate serial:       0616
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
Manifest number:          0611
Signing time:             Thu 30 Jan 2025 22:45:44 +0000
Manifest this update:     Thu 30 Jan 2025 22:45:43 +0000
Manifest next update:     Thu 06 Feb 2025 22:45:43 +0000
Files and hashes:         1: 5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl (hash: PcNyk1pKT5xEX+mtzKKrurOkyzVjgPUk3cZwYMQzgO8=)
                          2: 3F9CDA68179911EDB9008D18C4F9AE02.roa (hash: uQ87OwRIbPff2rIgxwDqjjJe9H/t71HNB3Wpu5Q8ifI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9B0D/serialNumber=E4D62D31297F17E49C42FA7A7B6623624AD94175
        Validity
            Not Before: Jan 30 22:45:43 2025 GMT
            Not After : Feb  6 22:45:43 2025 GMT
        Subject: CN=679c0117-dc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:ad:b1:1c:bc:0e:03:b0:b8:e7:fe:a3:d3:
                    79:94:4c:79:c1:d7:42:84:4f:64:29:c6:72:d8:04:
                    85:c4:d2:d3:ea:48:53:30:1d:c5:97:6c:e3:4c:2c:
                    fe:e5:a0:07:15:87:4f:67:13:d3:49:08:fe:a1:fd:
                    26:bd:31:42:04:09:3f:24:05:b3:08:fe:0f:a5:54:
                    65:b3:f8:2e:0b:b5:52:9d:71:3b:9f:fb:3b:3e:ad:
                    73:c4:57:cb:4e:66:84:ae:90:27:12:80:a5:c3:61:
                    66:10:14:8d:f9:d3:61:2d:c3:1a:a6:8c:00:fb:22:
                    32:30:9d:60:26:b5:ae:7a:ea:94:ce:a7:7d:1d:58:
                    ad:1e:91:82:fc:d6:91:4a:27:01:88:7a:e9:65:b3:
                    29:27:30:84:0d:47:83:72:2f:4a:d1:05:cb:f5:9b:
                    0e:3b:72:d6:08:cd:67:2d:b3:19:36:a4:8c:b8:61:
                    5f:52:51:20:a8:6d:0c:e1:f4:a6:ef:1c:c8:cc:2a:
                    51:7a:64:d5:83:16:51:56:d4:df:e2:9c:1f:c3:0f:
                    d9:f8:47:1c:c9:36:17:9d:ae:15:8f:1a:1d:36:d1:
                    ce:b7:f0:82:6e:e1:7b:47:4a:31:5b:e6:5c:dd:27:
                    58:2b:3f:9a:7e:43:f2:b9:17:65:dd:11:6b:11:ce:
                    18:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:94:3C:08:87:1A:12:1B:BE:12:0E:01:53:C2:DB:31:AD:11:48:B8
            X509v3 Authority Key Identifier:
                keyid:E4:D6:2D:31:29:7F:17:E4:9C:42:FA:7A:7B:66:23:62:4A:D9:41:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NYtMSl_F-ScQvp6e2YjYkrZQXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/A28ECBC08AB611EB8237D414C4F9AE02/5NYtMSl_F-ScQvp6e2YjYkrZQXU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:da:0b:98:53:16:22:15:56:51:b6:28:09:93:0b:45:b2:31:
         3a:26:cc:91:7a:7f:df:48:0a:f4:f4:6a:02:3e:51:c5:43:dd:
         86:ca:c5:7a:a0:ed:e5:93:92:2b:1b:59:3c:3c:d6:e1:55:22:
         23:49:de:49:3c:3f:be:33:01:16:e2:2e:a1:fd:36:5a:07:b3:
         8b:95:a7:8e:df:03:bd:28:49:c1:ce:b4:77:03:18:ce:7c:b6:
         c4:25:c3:44:18:eb:26:af:84:44:8e:f8:b8:53:fb:88:fa:73:
         40:36:3f:38:83:61:d7:fb:c4:82:29:a7:c1:3c:9a:6f:96:4e:
         b4:dc:c6:cf:dd:98:a4:7c:48:64:9a:87:e6:ef:a7:ed:24:1b:
         fe:17:5a:7d:f7:04:3d:46:d6:38:58:88:79:1d:5f:f7:a1:5c:
         55:d4:3e:b5:dc:0d:f6:d0:04:c5:56:fc:c5:cc:87:f3:3c:7a:
         52:34:b7:4a:38:f8:49:7d:40:49:fc:eb:35:0b:0b:1f:37:fd:
         53:45:92:75:ad:b7:a5:c5:ac:75:a3:73:e9:01:de:2f:9f:f5:
         4e:ad:8c:37:87:26:73:d0:f4:12:75:85:71:68:d5:58:27:5a:
         27:c2:2c:60:76:cf:a6:be:c6:76:73:0c:94:6c:22:78:52:c9:
         7c:f7:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----