Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft
File:                     LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json)
Hash identifier:          sSjtshwdlreqVFA6Y9SjsjtPfkOcJg+g1Bn4afaCK7s=
Subject key identifier:   D9:64:1C:76:0F:55:79:53:E6:79:9F:49:5C:68:20:74:3C:CD:DE:1D
Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65
Certificate issuer:       /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65
Certificate serial:       0D18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft
Manifest number:          0D09
Signing time:             Fri 31 Jan 2025 18:01:51 +0000
Manifest this update:     Fri 31 Jan 2025 18:01:50 +0000
Manifest next update:     Fri 07 Feb 2025 18:01:50 +0000
Files and hashes:         1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: afQSH41C9IxCJIcMoaoRRjGwxE6dxSALJ3ghHcoPsFw=)
                          2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 2//beVUEUtWDd/tf9scv/4G9JclsWxR4JDywFndSmnQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3352 (0xd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65
        Validity
            Not Before: Jan 31 18:01:50 2025 GMT
            Not After : Feb  7 18:01:50 2025 GMT
        Subject: CN=679d100e-6199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:22:42:c5:d1:8e:fc:36:f4:cc:4a:bb:b3:
                    d7:86:3d:1d:89:81:f3:10:bf:f3:22:8e:0a:a7:7a:
                    db:90:d7:ac:42:1d:e7:97:6d:19:6d:8d:44:82:9e:
                    3c:7f:ec:c1:29:07:ca:44:8c:53:04:73:b5:0c:4f:
                    27:40:31:6f:fc:b9:94:2d:08:d3:40:d1:05:50:7a:
                    ca:8a:26:ea:6c:49:59:a7:c7:b3:96:e5:48:0e:04:
                    e8:60:1b:b5:08:a6:ca:67:5e:1b:3c:e2:07:05:e9:
                    fb:2d:80:96:08:15:10:48:04:99:61:91:16:f9:8f:
                    54:fb:f5:f6:e2:3e:2a:39:b8:80:cb:08:87:c8:a9:
                    8c:1a:ec:64:90:e3:0f:8e:a5:5d:af:df:30:e8:3d:
                    e7:75:f7:55:4e:85:94:ff:4d:37:2e:87:14:33:92:
                    6e:c0:70:d0:88:7a:70:ec:e9:ec:f6:ab:68:3c:54:
                    8c:de:9a:d5:35:88:60:d2:ab:2e:eb:0e:08:42:84:
                    3a:63:3d:9c:85:1e:2f:6a:52:02:0c:c0:eb:6b:8d:
                    94:4a:a7:58:3e:98:27:17:17:2e:ea:8c:bd:2c:e9:
                    c9:07:59:73:bb:05:ee:31:5a:96:ec:0d:7b:03:90:
                    09:39:37:fc:19:52:93:dc:8f:15:91:03:49:75:1f:
                    92:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:64:1C:76:0F:55:79:53:E6:79:9F:49:5C:68:20:74:3C:CD:DE:1D
            X509v3 Authority Key Identifier:
                keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:6a:27:2b:35:5b:b5:6b:56:d8:64:df:89:71:a1:c8:e6:ca:
         8e:88:2d:8d:7a:30:35:66:2a:cc:ce:bf:55:81:80:2b:c8:db:
         b0:0d:57:61:06:a2:de:bb:af:e1:b7:ea:f9:45:75:9f:10:54:
         17:b7:9b:c1:36:dc:67:ae:1d:d6:f6:08:c8:2f:13:96:ef:d6:
         78:f6:7f:c2:69:bc:51:d2:ff:a7:e6:2d:ef:9f:19:44:cf:92:
         87:dd:91:69:1f:95:5d:9d:0f:0c:e3:fc:ae:65:f9:fa:18:b0:
         bf:15:73:6a:99:89:b9:1b:6b:d4:9d:7f:f5:83:1c:bc:99:d9:
         b1:7c:02:f6:cf:c7:a0:6e:34:91:a2:3d:96:e4:f3:c6:73:46:
         ee:85:76:06:d8:c7:ce:33:98:d3:b6:b7:81:49:0b:36:91:66:
         f3:c9:f1:b9:1c:ce:7d:16:3e:77:9c:04:0b:d5:e9:47:fc:12:
         d1:19:ee:5f:23:79:d5:bc:c6:29:ed:f3:de:25:4b:87:69:18:
         6c:81:46:a9:b3:f1:ba:6f:c8:aa:ff:c7:fc:26:5c:45:82:f3:
         ad:60:75:e5:2b:e6:fc:07:b7:76:6e:1a:b5:27:42:3d:a0:37:
         9e:7c:e8:67:32:fb:d1:01:3c:1a:92:65:d7:41:3e:40:68:b7:
         cc:a1:6d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----