Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
File:                     jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json)
Hash identifier:          XGidQ7bPcuiGwh/DKOue1IPR4CbZkpaSdT8+yOirrG4=
Subject key identifier:   45:1B:40:C5:8B:4E:4B:DE:AF:8D:B3:A5:D6:F2:4C:96:C0:31:42:C3
Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1
Certificate issuer:       /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
Certificate serial:       0A61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
Manifest number:          0A5A
Signing time:             Thu 30 Jan 2025 19:48:02 +0000
Manifest this update:     Thu 30 Jan 2025 19:48:01 +0000
Manifest next update:     Thu 06 Feb 2025 19:48:01 +0000
Files and hashes:         1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: Ns+7NwH5NQVKYXJDnZrUSCD/t3QHJKM5Gl9wLJKRmDg=)
                          2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: TCYPp0B7wELGdVmkmZ/2o9IhPqXAxvWxV7x+iOfRhsI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2657 (0xa61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1
        Validity
            Not Before: Jan 30 19:48:01 2025 GMT
            Not After : Feb  6 19:48:01 2025 GMT
        Subject: CN=679bd771-681e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:57:ea:54:ee:db:fe:cb:1f:1b:8d:30:b3:
                    c5:87:67:c9:3b:d4:0c:c1:49:94:b1:2a:bc:63:d6:
                    39:d5:85:aa:b2:2d:ed:df:e7:92:ab:05:49:fe:a3:
                    03:7b:22:a6:a8:da:b2:ab:60:f1:57:e3:33:90:91:
                    f2:db:e7:5e:4a:a0:06:85:95:5b:a5:54:a6:e4:f4:
                    1f:5f:2d:27:28:e4:2a:1a:49:de:dd:d9:26:54:dc:
                    0f:f2:54:be:be:27:69:6b:4a:a6:5b:04:39:75:40:
                    ce:39:93:83:2c:9a:ea:96:fc:99:d4:69:e7:79:1c:
                    e6:af:d0:cc:c4:4f:c8:e3:75:76:59:10:34:0b:02:
                    4f:f3:0c:1f:9e:cf:c7:71:1c:ee:a4:c2:0f:db:ea:
                    a2:19:cc:35:ed:e1:5e:bc:eb:8d:cd:8a:d3:e1:88:
                    55:48:b2:c2:2e:cf:46:9a:ee:20:c8:c1:5a:95:69:
                    05:91:3d:48:81:5b:ee:9b:4b:b9:3d:3d:48:13:5a:
                    cf:da:63:46:b4:1e:a1:4b:17:d6:d1:07:36:77:a5:
                    7c:82:06:9b:ba:4d:57:66:82:5b:a4:66:3c:7e:e8:
                    f5:e0:57:8e:bd:ea:df:bc:cd:1f:cb:7c:25:b4:19:
                    e4:09:fd:63:2e:b1:92:5a:cf:e2:ab:b8:95:60:72:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:40:C5:8B:4E:4B:DE:AF:8D:B3:A5:D6:F2:4C:96:C0:31:42:C3
            X509v3 Authority Key Identifier:
                keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:c1:a5:6e:93:8d:81:fc:cc:dc:75:88:aa:4d:1c:ea:78:
         84:17:f6:13:0d:3a:6c:5a:8f:a9:80:8e:c1:04:e9:0d:ef:8a:
         ad:16:e9:4f:34:a8:2c:ad:33:06:27:84:6f:cb:6e:ed:09:07:
         d5:6e:a1:1b:dd:a5:a4:94:47:6b:1e:3b:ae:11:27:11:b5:bb:
         bd:16:98:85:41:74:99:f7:44:91:18:fd:cd:b2:19:b7:cf:bd:
         5c:74:5b:cd:1a:b3:67:03:26:d5:14:28:11:89:27:47:da:ac:
         6e:51:40:f7:65:5b:61:42:e4:5f:49:21:c6:73:f2:86:4d:2b:
         be:d4:0d:69:5a:e6:9d:67:5c:50:7c:2a:16:11:f8:05:74:e5:
         ea:e0:fd:15:44:e6:3a:2c:6f:5e:33:f9:74:9e:03:b5:ed:41:
         19:25:e4:89:1f:26:a9:5a:bf:35:87:b0:b2:da:2d:0e:35:58:
         6c:f6:14:be:52:aa:7a:20:ce:12:cc:cb:73:60:d2:3c:6d:14:
         70:0b:8f:d9:45:f1:80:4e:81:a7:e1:22:c1:c6:db:32:bf:a9:
         bd:15:2a:8f:b8:d4:5f:f2:6f:64:aa:38:d5:b4:be:1a:0e:89:
         81:66:de:68:37:5f:1b:0d:2d:51:13:83:f3:d6:9b:8e:08:bb:
         88:63:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----