Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
File:                     gOknW25uvGrXWF12r7akALUULD8.mft (raw, json)
Hash identifier:          j/YE7PJ2+bO03qlkmqvH2tuOFuG43y973EHvrn6ope0=
Subject key identifier:   8A:3E:8E:39:CB:6F:31:A1:F6:A0:6C:42:BB:A8:0F:45:7A:48:5D:01
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Certificate issuer:       /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
Manifest number:          66
Signing time:             Fri 31 Jan 2025 06:03:27 +0000
Manifest this update:     Fri 31 Jan 2025 06:03:26 +0000
Manifest next update:     Fri 07 Feb 2025 06:03:26 +0000
Files and hashes:         1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: xMVmGKcxGzJa9w8QLaZnycAutKP0PPLA0gO1p/PCKeM=)
                          2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: zLr4joEY+P4VPtuV8/aIjLwuAD3fE/qCh+JRJT72wJE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
        Validity
            Not Before: Jan 31 06:03:26 2025 GMT
            Not After : Feb  7 06:03:26 2025 GMT
        Subject: CN=679c67ae-1632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:92:5b:2f:15:a2:74:dd:31:fb:22:e2:86:
                    34:90:b4:b0:04:c7:fa:40:ec:8e:5c:27:8b:7f:d7:
                    5f:cb:4e:dd:10:2b:c1:a7:9f:c7:70:94:ec:a7:a0:
                    60:49:5e:75:7f:98:c0:5e:ee:8f:30:f8:86:d4:8e:
                    4f:ca:e7:0a:54:2e:07:55:54:14:a2:9e:dc:20:52:
                    69:d4:d4:8c:53:31:f5:71:6c:d2:b8:3f:04:72:b2:
                    26:5b:51:c0:1f:d9:2c:ad:44:3d:c2:21:29:7f:62:
                    10:ea:cb:52:ac:18:52:ed:ec:ff:9d:5b:21:22:7b:
                    f2:e7:e6:05:d2:8b:ba:dd:91:ea:56:77:bd:b8:33:
                    ef:fd:53:64:44:49:9e:35:d1:93:a2:4e:32:45:64:
                    93:fb:02:09:37:0e:72:7a:0d:64:26:3a:39:00:94:
                    e8:37:ec:17:52:90:f8:e7:ef:8a:35:e7:ce:07:78:
                    82:59:9c:d8:f3:8b:5e:e2:54:2f:58:58:e2:ba:c2:
                    58:41:cd:d1:5e:a5:ac:58:aa:43:7d:f8:ab:72:af:
                    3d:7a:58:0e:a2:9d:f9:89:5e:81:26:14:6b:50:85:
                    ca:f2:71:8e:47:45:94:7f:6b:dd:98:20:fc:f5:72:
                    82:83:48:6f:d6:dc:70:4e:7b:b1:a1:d6:10:c0:53:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3E:8E:39:CB:6F:31:A1:F6:A0:6C:42:BB:A8:0F:45:7A:48:5D:01
            X509v3 Authority Key Identifier:
                keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:3a:9c:a9:8f:db:7a:f0:1f:47:8b:d9:b5:3d:f9:54:a8:dd:
         b2:12:18:8d:bf:1f:26:57:4e:aa:4d:8b:51:7b:a5:96:5b:71:
         a1:8b:76:54:7b:47:66:d4:23:96:92:05:7c:31:eb:af:fd:d3:
         d0:33:14:dd:98:a3:2a:eb:d4:cb:42:3f:2b:6d:f1:9c:36:58:
         2e:36:a9:56:1e:78:8a:bd:a1:b2:9e:88:e1:6d:bc:af:d3:95:
         df:f3:5d:92:b3:a3:40:e3:30:a4:a7:31:ed:26:0e:c8:11:85:
         86:df:bc:09:b9:06:4e:35:c6:85:fb:fd:e8:2c:49:16:f6:d6:
         10:8a:a0:31:bd:a8:d0:cc:36:4d:26:eb:47:92:79:dc:e8:52:
         71:1f:2c:b9:f6:01:dd:e0:a7:71:b4:42:59:ba:a5:74:a3:63:
         72:64:30:90:e4:9b:d6:ca:c0:31:5f:e3:48:ea:d0:8d:9d:a1:
         71:97:f6:e6:53:06:b1:6c:6c:55:e8:8f:78:99:53:68:bd:20:
         74:27:9f:5a:a2:d0:53:f9:65:6e:5e:71:c5:4e:fb:da:84:1c:
         43:6e:5d:91:95:2a:90:15:26:6b:fc:82:f9:c4:50:6e:f1:60:
         6a:9f:89:2e:3d:99:c9:90:df:d4:c3:b0:f3:98:90:5e:07:3a:
         0f:48:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----