Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
File:                     Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft (raw, json)
Hash identifier:          5YEB2fQh8mqihSQ+N2i4AJ1kNVZ9afVIqiEqApRoYK4=
Subject key identifier:   02:2C:34:B7:0B:59:08:54:36:5B:42:7F:CD:42:0D:0F:3D:8B:FB:E0
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Certificate issuer:       /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial:       09D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
Manifest number:          09C3
Signing time:             Thu 30 Jan 2025 20:04:39 +0000
Manifest this update:     Thu 30 Jan 2025 20:04:39 +0000
Manifest next update:     Thu 06 Feb 2025 20:04:39 +0000
Files and hashes:         1: Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl (hash: gB5gcMVR+oegZA5B/r4iAy98AlPkIb60wFovWAYshV0=)
                          2: 7C79A58C6E1111ED9880616FC4F9AE02.roa (hash: DpXI7IHTgZ+8TF2AhlH8Vt104anWWa1f0ZyL5HMPP+0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2521 (0x9d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
        Validity
            Not Before: Jan 30 20:04:39 2025 GMT
            Not After : Feb  6 20:04:39 2025 GMT
        Subject: CN=679bdb57-acd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:33:63:6c:c4:1b:67:ad:62:4c:60:cf:6d:
                    21:69:06:33:b7:6c:f6:61:22:2c:f0:da:bf:27:47:
                    e8:49:95:ef:bc:2b:d2:c0:6c:e0:f2:49:a8:f5:4d:
                    b3:3d:4e:c7:3c:40:1e:15:51:69:a5:6f:12:fc:3f:
                    de:86:1b:d1:f1:f7:74:9a:a5:fa:c3:7f:1e:de:52:
                    b7:49:d2:77:cb:85:d3:09:d2:4a:29:c3:43:24:b1:
                    1a:a0:45:b8:1f:22:13:1c:5c:50:23:7c:42:eb:4e:
                    2c:7e:a5:0c:9a:bf:4a:68:e0:bb:8c:a2:65:fa:80:
                    c9:5f:53:0a:18:30:16:dd:c1:08:ed:1c:00:2b:82:
                    4e:0b:c3:2c:e8:98:db:1c:eb:c9:8e:0e:d5:aa:22:
                    bb:85:28:94:dc:d0:07:b4:36:e5:c3:5a:ff:f3:6f:
                    14:17:a0:97:de:d6:12:d9:c3:28:08:57:8d:d2:b0:
                    e2:3a:b4:8c:0f:28:02:08:b3:fa:3a:30:dc:60:da:
                    23:20:15:9d:f9:0f:e1:57:43:8d:c2:11:60:90:d5:
                    ad:18:2f:53:21:48:f3:1d:d6:49:77:4c:d5:e6:fb:
                    52:10:19:a2:40:d1:91:d6:45:f9:12:35:13:50:27:
                    a3:7b:b6:ff:64:99:31:85:e8:38:09:e6:3e:29:b6:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2C:34:B7:0B:59:08:54:36:5B:42:7F:CD:42:0D:0F:3D:8B:FB:E0
            X509v3 Authority Key Identifier:
                keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6d:b5:bd:35:bd:9d:be:71:ed:40:d4:87:13:76:a3:22:82:
         92:e0:67:b0:69:97:47:d6:15:7c:19:93:c5:30:c4:56:a3:53:
         1b:27:66:5f:3b:b9:e0:ea:50:fd:83:22:32:3b:ef:cc:2a:fa:
         55:48:0e:43:51:a3:35:d3:d2:14:13:e2:3d:b9:d0:4f:97:24:
         b9:23:aa:f2:be:7e:e3:53:fa:65:53:60:3e:11:39:a0:50:4b:
         0f:4e:cd:94:c7:3f:3c:16:b3:5d:32:01:1c:66:a0:2e:97:c4:
         c6:03:6a:59:4e:aa:54:49:de:f5:66:9e:1c:97:df:83:22:03:
         da:e2:fa:e9:26:fc:a4:b6:4f:b4:2a:fd:8d:3d:34:61:c2:17:
         28:ef:2f:af:81:63:74:74:ec:a8:ad:50:3a:dd:d7:62:5d:d1:
         bc:84:f8:5b:97:c0:3c:03:cc:28:e4:67:a8:72:a1:ab:a6:fd:
         cf:4a:2c:95:c4:4b:84:46:1a:80:41:90:9a:31:0e:7a:48:a7:
         75:6d:93:f3:b0:22:75:6b:18:eb:4e:3f:eb:da:8c:af:f6:85:
         88:bd:25:2a:65:b3:2a:30:b6:44:b8:6a:5f:a7:ed:6f:83:93:
         73:11:e7:3a:04:2f:9b:75:5f:0d:ad:01:19:08:ed:a2:46:7b:
         a1:5c:be:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----