Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File:                     XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier:          9v+Bih22mVvluwYxMKFhvSGwnKA78cEJIhvUElj4Cvg=
Subject key identifier:   31:F1:49:95:97:1C:92:D6:73:F4:DF:86:27:8F:35:58:76:D4:92:B5
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer:       /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial:       095F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number:          0958
Signing time:             Thu 30 Jan 2025 20:16:54 +0000
Manifest this update:     Thu 30 Jan 2025 20:16:54 +0000
Manifest next update:     Thu 06 Feb 2025 20:16:54 +0000
Files and hashes:         1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: nHJnVxzliPrp7RiOU+p6zE0mXKYFrGs+KOLRez+vqUc=)
                          2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: 5OuJk3wuVixq/unKPrRmS/rEXR6rqWNJ7lk0q2nqJD4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399 (0x95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
        Validity
            Not Before: Jan 30 20:16:54 2025 GMT
            Not After : Feb  6 20:16:54 2025 GMT
        Subject: CN=679bde36-0bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:e0:56:77:ca:68:0f:00:f2:0d:be:8e:8e:
                    08:1f:ca:0e:81:84:a9:2b:99:18:cb:82:b6:5e:94:
                    73:70:cb:3e:1d:aa:08:47:73:97:35:7b:d2:5e:4f:
                    91:fe:22:35:c9:69:ab:90:85:0e:d5:d3:ac:b2:51:
                    28:02:f1:12:df:5a:c3:5e:8e:e3:77:bf:3e:8a:c6:
                    a9:98:f1:d5:5f:03:7c:10:4c:25:85:33:88:ed:9c:
                    a8:46:bb:da:6a:e8:85:2a:61:35:dd:38:f6:5a:3c:
                    b5:f8:43:d5:a4:c7:db:6f:a2:b0:e7:c1:01:d6:20:
                    a3:1d:a2:23:f1:88:7b:29:7b:85:cd:09:31:e9:02:
                    f5:79:71:27:b9:3d:db:c2:e5:ac:39:15:c5:72:54:
                    2c:4f:a5:62:d0:88:17:2a:22:fc:9c:9e:eb:30:da:
                    86:bd:b2:14:5f:51:88:01:50:17:78:d8:30:e0:8c:
                    a0:25:c3:c7:06:b9:6b:0a:1f:ab:cd:89:ce:80:2f:
                    e9:c2:65:2c:87:20:4b:2e:a1:5e:7c:02:d3:5e:b8:
                    7e:73:61:0f:39:33:2d:cf:28:f2:bd:2e:ea:2b:2a:
                    8d:5b:e7:e0:1f:52:77:fe:f0:4f:f9:97:10:04:95:
                    88:ca:75:5b:01:6c:7e:03:25:40:39:6e:65:ff:44:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F1:49:95:97:1C:92:D6:73:F4:DF:86:27:8F:35:58:76:D4:92:B5
            X509v3 Authority Key Identifier:
                keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:02:74:f0:70:0e:9a:ab:60:21:e1:95:61:0b:22:b6:3b:
         1f:f5:d9:23:e3:f6:07:23:89:6c:ed:80:eb:01:91:f3:73:f0:
         dd:a0:a1:b3:7f:67:73:ff:b3:fa:6f:e9:12:d6:2d:cd:05:19:
         cb:20:52:e4:65:e9:a9:d2:50:0e:94:18:81:41:5f:82:56:22:
         30:09:92:4b:13:4b:de:90:35:43:8c:d7:72:5b:8f:e9:08:4f:
         5a:c9:96:b0:61:b7:30:49:95:99:4a:1b:22:df:c5:99:88:6f:
         44:43:fb:b3:bf:8d:c2:20:fa:6b:34:bc:09:1a:a7:14:8a:7d:
         44:8b:32:5f:1f:42:39:c4:18:aa:2d:7d:c3:78:a3:ff:f8:31:
         b5:3d:38:b2:c6:3c:20:f1:d4:09:16:a4:4f:cf:65:39:4d:23:
         04:eb:a2:fe:24:e4:7f:5b:fd:4f:e8:3c:e4:ee:64:3a:d4:a5:
         94:ac:4c:76:e0:37:93:65:35:b7:c7:fd:a3:07:90:e6:2e:ba:
         bc:9f:56:a6:e9:63:31:b2:f8:39:3d:1b:32:0f:f4:9c:d9:16:
         48:ed:22:eb:8b:89:31:e5:1f:90:af:f0:54:8d:ab:81:18:4f:
         22:ee:1c:cb:ec:9e:c8:d6:b7:bc:09:e0:cb:28:b9:4c:89:cc:
         8c:0c:8b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----