Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
File:                     Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json)
Hash identifier:          G54N/p5d3VkgTVbsV6IicPYdOO/yr1jJFIGVwfk2Cy0=
Subject key identifier:   A4:D9:C8:44:29:5B:F5:23:C4:2E:53:C0:67:8B:AB:B2:AA:4B:E7:BE
Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
Certificate issuer:       /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Certificate serial:       06F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
Manifest number:          06F0
Signing time:             Thu 30 Jan 2025 21:55:03 +0000
Manifest this update:     Thu 30 Jan 2025 21:55:03 +0000
Manifest next update:     Thu 06 Feb 2025 21:55:03 +0000
Files and hashes:         1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: T9HI5+ifEDRwIozaNH6t2ZQR/BjR3KinikkiWHw92zI=)
                          2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: M4Gqzd39PMwr7C0nKPOIDqHHsIaRLfcCY3hCq+E40tY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
        Validity
            Not Before: Jan 30 21:55:03 2025 GMT
            Not After : Feb  6 21:55:03 2025 GMT
        Subject: CN=679bf537-d7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:ea:e5:92:c9:5a:a2:84:14:c2:da:4e:63:
                    ab:66:61:52:a9:eb:07:20:53:80:4f:8f:ad:b5:a8:
                    fb:71:c5:e3:2e:6d:1b:d6:64:7e:5f:88:46:24:de:
                    fd:c7:dd:15:21:a7:42:37:55:3b:84:65:51:3e:02:
                    61:2d:6d:d0:87:23:26:d9:82:4c:7b:1c:1f:a8:b7:
                    29:b6:5f:d7:ae:83:a5:dc:38:7e:34:ea:75:b7:bf:
                    e1:2e:17:3c:2b:0c:60:fa:40:06:91:69:63:e4:44:
                    3b:1f:65:f5:d2:30:96:10:09:f9:d5:3a:84:b2:5e:
                    ad:66:36:f9:c9:99:9e:97:30:68:a0:ba:b1:d1:44:
                    04:4c:40:ff:ce:e7:9d:4a:36:a5:c8:89:ee:be:cd:
                    8f:ad:6b:c1:48:03:c4:4e:a4:3c:c9:50:3b:2c:dc:
                    d1:aa:f4:d2:df:de:c1:26:16:45:d6:7e:38:59:c8:
                    eb:f6:05:49:bd:fc:8a:ec:d0:27:a7:11:f8:dc:1e:
                    78:48:8a:e4:82:b6:7e:99:c8:71:de:f8:86:05:66:
                    bd:eb:19:bc:da:3b:d0:f9:ae:b8:de:b7:1f:1d:88:
                    6b:7c:2a:5e:3d:a0:f0:b2:02:a5:4d:ef:20:04:9d:
                    a7:f5:5a:a2:d9:12:97:7c:bd:3f:30:84:32:59:56:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D9:C8:44:29:5B:F5:23:C4:2E:53:C0:67:8B:AB:B2:AA:4B:E7:BE
            X509v3 Authority Key Identifier:
                keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7a:8e:56:09:4a:79:8a:65:18:b7:f5:95:11:d0:25:8d:8e:
         c2:bb:82:4e:8d:34:49:31:7c:ab:8e:73:3d:ee:1f:bd:a3:11:
         32:88:ec:4f:19:7e:97:0d:75:13:34:b6:32:53:aa:9e:98:68:
         3f:58:ed:85:82:ec:51:ac:8d:60:f9:b2:86:51:0c:b0:65:70:
         9f:ec:70:5c:0a:83:dd:07:a3:f6:1c:30:3e:48:5a:eb:a9:22:
         b7:e4:54:f3:4e:d7:96:cd:f4:d2:e6:68:19:2b:2a:56:f0:10:
         8a:bd:de:12:5f:0e:db:1f:f0:c6:4f:9d:68:43:4b:8a:48:32:
         52:85:0c:db:8e:f7:9a:f6:c4:a8:04:41:92:46:81:49:a1:a7:
         72:cf:f1:88:0f:bd:ad:b5:5c:62:eb:f2:92:cf:94:eb:84:47:
         c9:79:44:5b:db:7b:93:b2:12:25:97:f9:e7:ca:a0:63:45:04:
         aa:6b:59:8d:6a:df:d2:f8:e8:13:a7:e4:30:4c:e9:91:a3:7f:
         53:0c:e9:c0:47:2e:d8:27:91:f9:67:09:38:e9:76:bf:88:a4:
         4f:9d:33:81:9e:10:30:75:b0:d5:38:58:0e:5f:8a:07:3e:f4:
         c9:10:98:9c:e7:36:7a:fa:4d:52:97:3e:e2:81:91:7f:66:b2:
         27:17:ab:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----