Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
File:                     zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json)
Hash identifier:          R81ioFWvPNN3I+bMOIEEHZsvsHiPi0wTPb5dOV/8ErQ=
Subject key identifier:   89:DE:59:EB:6C:01:AE:D6:2D:BE:ED:76:22:95:4A:B6:94:A5:CA:0F
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Certificate issuer:       /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
Manifest number:          0881
Signing time:             Thu 30 Jan 2025 20:39:40 +0000
Manifest this update:     Thu 30 Jan 2025 20:39:39 +0000
Manifest next update:     Thu 06 Feb 2025 20:39:39 +0000
Files and hashes:         1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: uC0pc3qaLONW8XIbxWNLoN3E2ZrPiL3Rz5SwGPMAQBk=)
                          2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: 7qPOEKIxNomgCIWc/yHC1zpaUnhuR5qP+cJAyuTEkQ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
        Validity
            Not Before: Jan 30 20:39:39 2025 GMT
            Not After : Feb  6 20:39:39 2025 GMT
        Subject: CN=679be38b-4aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:d5:62:c2:89:e2:ec:5a:b7:d4:40:02:4e:
                    36:de:57:bd:f5:47:74:0b:ee:20:47:83:6f:75:92:
                    bf:b4:3e:a6:89:1a:6f:54:35:f6:c5:47:86:df:82:
                    8d:e8:14:c9:d3:28:5e:fa:a9:ed:11:c6:fe:e4:fa:
                    d7:df:70:76:02:d2:1a:47:44:d9:5a:de:b2:01:db:
                    24:ce:79:f2:db:03:3a:68:18:37:de:44:22:c5:e2:
                    ad:51:de:36:19:67:60:52:d9:96:69:48:91:b8:c5:
                    f4:1c:b8:c8:03:21:df:a3:f0:a7:3a:9f:b1:c3:ae:
                    8b:d9:25:78:9f:b7:db:1f:f0:86:78:92:72:21:23:
                    13:c5:76:b9:9e:3b:43:66:90:ae:18:04:6e:40:75:
                    fa:46:32:06:0b:28:39:ee:12:a6:35:97:13:3e:60:
                    50:37:c2:5f:67:da:40:36:11:60:a1:e1:15:69:2e:
                    7f:11:2f:2b:34:e2:d9:6c:cb:7f:a3:a9:f3:74:00:
                    68:4e:08:5a:c9:49:5e:8d:95:bd:fe:a1:38:17:0f:
                    42:b4:59:77:52:97:aa:d9:87:1b:26:57:d1:78:59:
                    76:3e:6a:81:7f:33:40:78:e0:ef:d3:5b:f0:e2:a7:
                    a4:b7:fa:c5:47:c9:c8:0d:c9:0a:2b:6d:08:f6:60:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DE:59:EB:6C:01:AE:D6:2D:BE:ED:76:22:95:4A:B6:94:A5:CA:0F
            X509v3 Authority Key Identifier:
                keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:98:20:28:13:ff:21:ed:a6:35:a6:de:44:34:62:ea:d0:af:
         25:40:49:80:b3:5d:01:e7:6b:df:84:f6:eb:b2:0e:59:9e:61:
         0c:ad:0f:f8:a0:51:b3:bb:b0:7d:63:a7:65:34:08:36:7b:20:
         a8:14:c0:1b:43:10:80:42:ae:61:4c:28:e6:ab:6f:52:a1:c6:
         9f:79:d4:0f:c7:c4:c6:1e:55:6d:bd:9f:bd:c5:4e:a3:6e:08:
         42:dd:5c:89:2b:2e:af:2f:76:12:fd:d6:ec:00:e2:c0:6d:c1:
         d9:27:07:9c:38:dc:0b:fb:70:55:96:20:20:ae:f4:40:a1:2c:
         eb:3c:cf:1a:3d:e5:e3:f7:81:bd:55:12:bf:6b:01:92:29:0b:
         d1:05:ac:35:89:c5:e7:ab:cd:1b:23:83:62:b6:bb:82:53:cc:
         eb:24:3b:0e:3b:b1:b8:b3:5e:7a:f6:b9:3c:49:07:75:79:27:
         d3:fe:1d:f3:80:94:0c:22:59:f6:a4:06:97:d7:03:e1:a5:98:
         59:64:c7:e1:12:1a:d9:42:c7:1d:ed:21:16:47:76:d5:5d:53:
         b8:20:2c:0f:bc:af:9e:ae:5d:a4:06:e5:ac:91:b6:7d:df:94:
         84:5d:3c:00:f4:db:58:2a:e6:10:07:17:5b:51:b5:91:28:5f:
         3f:cf:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----