Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft
File:                     CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft (raw, json)
Hash identifier:          PK9WG68YrYY1IAX1P1mitpBcovzuduLPApgY1Z5jBo4=
Subject key identifier:   FA:F2:EC:B4:A0:6E:24:77:D8:F4:EB:AA:0A:70:76:AF:6D:FE:0B:13
Authority key identifier: 08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31
Certificate issuer:       /CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31
Certificate serial:       032D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft
Manifest number:          0328
Signing time:             Fri 31 Jan 2025 01:11:57 +0000
Manifest this update:     Fri 31 Jan 2025 01:11:56 +0000
Manifest next update:     Fri 07 Feb 2025 01:11:56 +0000
Files and hashes:         1: CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl (hash: xdHb9SV9TztCF8jXLJFpkVxfNnVyP6Sv5d2fr3jXcd8=)
                          2: 97E05E58B15E11ECB6B31625C4F9AE02.roa (hash: 814gK30vRsw3f3GeLBYUI3A+K0FBKsWqCyMte+6ZS3M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31
        Validity
            Not Before: Jan 31 01:11:56 2025 GMT
            Not After : Feb  7 01:11:56 2025 GMT
        Subject: CN=679c235d-98d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:dc:88:5b:c7:62:21:d5:1a:6a:0d:86:eb:
                    ba:a6:70:97:c6:05:d7:76:a0:64:f8:a4:e6:d2:b7:
                    d0:86:4e:ba:f7:6f:04:95:54:2c:f7:e6:1c:23:f7:
                    28:c1:1e:80:1b:d7:69:06:3f:8b:3c:22:8f:b7:71:
                    68:2f:b9:c5:db:37:4b:82:5e:fd:47:07:98:f8:9f:
                    06:00:47:3e:6e:55:f4:03:44:1b:c1:d5:a1:f5:25:
                    ac:78:b7:ab:47:9f:fa:0b:32:51:2d:a7:12:1a:25:
                    c5:12:2a:be:e2:f9:e0:7d:d8:1b:d7:fc:f7:14:6f:
                    e1:1a:f4:0d:47:e1:c9:f6:18:ba:2e:5d:6d:52:74:
                    8a:7a:a1:d3:df:5c:55:45:4c:be:f8:09:67:cc:eb:
                    4c:7d:a8:31:c0:68:ab:ba:83:40:ad:d6:50:ed:40:
                    13:9c:ea:2e:1e:99:0c:b0:b8:a7:51:51:13:e7:de:
                    0b:b4:b7:ac:81:7f:17:e7:51:86:cf:a7:40:ee:7d:
                    99:18:c1:79:fa:24:75:1f:08:d2:1b:99:40:65:8e:
                    f0:1a:b5:a8:3c:32:19:24:52:c6:a6:f3:8d:85:da:
                    f1:0b:14:86:62:1f:bc:40:8a:71:6e:76:5a:6d:ae:
                    63:f1:00:a0:a3:57:de:a2:6b:e4:07:7d:2a:df:f0:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F2:EC:B4:A0:6E:24:77:D8:F4:EB:AA:0A:70:76:AF:6D:FE:0B:13
            X509v3 Authority Key Identifier:
                keyid:08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:05:41:a6:2c:3c:49:9f:a8:00:67:75:e7:ea:76:d3:40:2a:
         a7:a5:f4:11:97:7c:01:f9:be:cb:90:9d:67:4b:66:78:16:89:
         67:fe:47:74:69:74:ea:13:35:10:18:db:3e:68:db:9e:45:f8:
         b0:ae:38:04:fa:ef:39:54:b1:31:0d:1a:61:a8:3e:02:2b:e9:
         cf:44:c6:c5:db:6b:fe:c4:5f:bf:9f:93:1b:51:08:0f:4e:4d:
         c3:46:2d:fd:cd:88:f9:d0:be:c3:49:f6:95:25:d2:78:bc:c3:
         cf:98:cd:55:54:c9:02:0d:ad:b6:b3:9c:c6:a6:db:e5:6c:86:
         46:83:33:fa:2e:0a:ad:86:2e:ab:ea:16:06:69:b5:88:b7:89:
         dd:43:cc:9e:48:aa:68:6d:1f:a2:11:1a:15:9c:5e:16:38:4f:
         6d:de:79:98:67:09:1e:54:fc:98:a0:db:34:6c:77:42:00:19:
         b4:9b:08:c9:51:72:3b:09:8c:67:41:02:a4:77:93:6c:bb:48:
         f7:c2:b0:b7:e9:e8:b6:f5:2c:40:ef:bc:44:15:dd:ab:93:8d:
         03:8e:39:47:01:f2:84:8b:d6:1c:3e:e1:72:3b:89:1c:21:8c:
         77:8c:c0:2b:98:43:ab:b0:60:a1:76:f2:74:8d:e4:9c:82:88:
         0a:b3:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----