Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
File:                     Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json)
Hash identifier:          BQVlyM5wpckFLi+jGgJ2TfVfebxr51yzO7cMtJQX4eg=
Subject key identifier:   1E:2B:7F:5A:52:82:FA:8A:9C:05:C8:D1:54:92:29:96:F3:48:E4:93
Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
Certificate issuer:       /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Certificate serial:       16F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
Manifest number:          16EE
Signing time:             Fri 31 Jan 2025 16:38:45 +0000
Manifest this update:     Fri 31 Jan 2025 16:38:45 +0000
Manifest next update:     Fri 07 Feb 2025 16:38:45 +0000
Files and hashes:         1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: RKPhgGmcvHChtCcs0RYnRryjgV85FebPv3mshyHaUr0=)
                          2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5880 (0x16f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
        Validity
            Not Before: Jan 31 16:38:45 2025 GMT
            Not After : Feb  7 16:38:45 2025 GMT
        Subject: CN=679cfc95-b487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:b8:89:27:71:dd:86:a5:f1:2f:4c:8c:d9:
                    7c:bd:23:ce:7e:4c:a3:7f:19:38:fc:81:c5:bc:a6:
                    88:2d:c8:e8:a9:84:63:03:51:7f:ba:f9:60:89:c0:
                    79:92:5a:a0:52:d7:7b:0c:ee:53:ea:8e:f5:d7:1d:
                    85:29:8f:15:34:4c:06:99:90:2d:ba:60:61:cd:aa:
                    55:00:bc:30:9e:c5:f9:ab:e3:18:07:a8:e6:18:ea:
                    e4:b3:93:cf:85:66:f3:91:cf:9d:2a:25:dc:04:4b:
                    fc:e2:cc:89:0c:7e:4e:6f:8e:9e:b9:83:1f:0b:5d:
                    52:0f:c3:26:f3:cd:e4:40:e7:73:fd:21:c9:f6:67:
                    e6:a1:25:b8:6b:c5:ee:80:7e:22:fe:b4:a3:71:34:
                    14:51:8a:9b:ae:7c:62:b6:d9:ef:fd:a9:2a:4a:c5:
                    04:5b:f2:81:48:d5:e6:22:27:4f:75:71:0e:3a:56:
                    64:7d:de:e6:7e:fa:48:f1:31:4d:51:16:2f:89:e2:
                    e7:04:a2:89:3d:f0:31:e5:3a:19:fd:4a:ac:b7:93:
                    c6:43:0f:3f:1d:56:b5:36:71:f2:e5:82:58:6b:2e:
                    6a:c5:a5:03:94:6f:e2:c8:43:0a:fd:4c:6a:03:c9:
                    8c:cf:c0:b9:2c:7f:3e:84:74:86:5b:65:49:cc:f3:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2B:7F:5A:52:82:FA:8A:9C:05:C8:D1:54:92:29:96:F3:48:E4:93
            X509v3 Authority Key Identifier:
                keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:be:ba:20:6c:be:5b:c1:e8:6c:84:58:3b:ba:0b:49:69:ff:
         27:ae:31:82:eb:18:c2:e9:66:99:5d:c9:69:ed:77:7f:61:3d:
         68:29:18:31:de:c1:b6:85:06:95:27:7d:a5:1f:51:2f:93:48:
         e5:17:35:e4:b1:f3:63:f8:4d:a6:18:10:48:77:15:a2:de:3e:
         f6:a1:16:a1:8a:c6:14:65:51:cd:0a:b1:77:a4:12:3b:4f:7c:
         a1:1b:33:27:3f:e3:59:74:16:b4:e9:28:db:1b:d5:49:b2:51:
         66:d6:fd:b7:6c:27:cf:c3:05:2a:f3:e6:10:6b:ed:12:63:fb:
         aa:e5:fd:03:8b:fd:5d:c2:59:fb:ef:14:6e:bb:96:aa:ab:80:
         96:eb:7d:f6:ce:3d:65:ea:35:29:b1:cc:83:8b:45:c5:53:8e:
         95:4c:bf:f6:2b:a8:9f:a7:87:e8:8d:28:f6:ce:11:4c:2d:b0:
         db:28:92:5f:18:ce:df:48:0a:b5:c5:f3:ef:d2:7d:a6:2a:bb:
         d9:a1:56:6e:98:af:97:04:d2:12:87:70:ec:2f:a7:95:45:ca:
         fe:20:05:25:5d:f3:1c:1a:ca:ba:5a:0b:de:da:8d:96:91:40:
         fe:3b:32:44:57:af:f9:38:62:e0:3a:f2:2b:9e:12:69:01:d6:
         95:d1:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----