Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
File:                     jIdTtwqo02LsUz6Sfxlv62mbGF0.mft (raw, json)
Hash identifier:          2lwSoeRwhwIucZMC1b7R6Dih/9GpOvirDPVsjasEoI0=
Subject key identifier:   30:3C:55:9A:F7:7C:E0:70:4D:FE:1C:3D:47:CA:7E:67:DE:FC:8B:FA
Authority key identifier: 8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D
Certificate issuer:       /CN=A91E7BD5/serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
Manifest number:          0250
Signing time:             Fri 31 Jan 2025 01:52:06 +0000
Manifest this update:     Fri 31 Jan 2025 01:52:06 +0000
Manifest next update:     Fri 07 Feb 2025 01:52:06 +0000
Files and hashes:         1: jIdTtwqo02LsUz6Sfxlv62mbGF0.crl (hash: zOG2QrTKbxtqW+G8ca2Wa7cLjYh1j7cRZYAsOdc2kLg=)
                          2: 286A010405AB11EDB94A1E32C4F9AE02.roa (hash: y1hhWIvYIRZY5Wcz830NbFtZiEa8PFTfSRZiRyReX/E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7BD5/serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D
        Validity
            Not Before: Jan 31 01:52:06 2025 GMT
            Not After : Feb  7 01:52:06 2025 GMT
        Subject: CN=679c2cc6-2935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:e3:d5:18:2b:e7:8e:fa:c1:72:56:14:e4:
                    fd:84:ae:06:c5:17:0f:8a:ce:41:ab:b2:da:86:19:
                    73:e9:86:77:14:84:e6:4b:a2:15:ae:8e:4b:52:f2:
                    09:6e:14:b5:bc:96:e0:4f:06:71:de:6b:c3:5f:1d:
                    74:b3:62:e6:a6:d6:9f:4b:b0:e3:be:e1:82:97:7d:
                    7e:8a:19:0c:6f:4e:90:38:2a:11:cd:8a:0e:1f:91:
                    74:6a:82:93:2d:7d:32:66:f5:a0:b2:f7:db:08:66:
                    2c:3f:bd:83:eb:0c:e2:12:4d:90:d8:a7:25:b7:9a:
                    bf:cf:2a:c2:a9:28:e1:40:36:0c:72:a2:b2:3f:6e:
                    60:15:14:1b:82:07:0b:65:f9:02:b4:ab:44:57:a9:
                    de:6d:10:00:4b:6f:f1:10:ff:6f:17:5f:8e:fa:73:
                    b3:e5:10:18:1c:6d:63:67:46:a3:c1:50:84:8d:58:
                    dd:b4:22:a1:03:f3:fa:69:f9:53:d4:c7:97:54:49:
                    ff:a1:49:b3:65:5a:44:6e:b2:03:26:fd:99:4e:63:
                    5a:d7:34:6a:13:48:89:a4:68:d8:56:22:ef:67:57:
                    a0:a9:3f:d2:a6:93:a3:d8:a5:19:94:c4:5c:7f:87:
                    f2:bb:d0:cb:8d:18:bd:44:8f:63:ab:9f:bc:44:b5:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3C:55:9A:F7:7C:E0:70:4D:FE:1C:3D:47:CA:7E:67:DE:FC:8B:FA
            X509v3 Authority Key Identifier:
                keyid:8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:45:c5:25:bb:44:88:bf:07:31:b3:d4:05:f3:26:3a:49:
         8c:24:29:97:d2:21:7c:e6:cf:b7:b5:07:9a:35:c7:23:0a:83:
         4f:de:b3:ba:49:27:98:a9:7d:d7:0c:9a:7b:b2:32:ac:26:d4:
         d9:54:23:e5:e9:5d:e1:07:c1:f9:41:66:03:f5:7a:71:c7:3f:
         32:bc:5b:59:98:6f:0e:49:00:90:e6:11:8f:43:c5:1b:ca:26:
         51:1b:9a:f5:2f:88:82:cb:83:d9:54:19:62:29:64:fc:b2:a8:
         38:47:3e:a4:3b:cc:36:9d:fe:a0:ea:d0:49:01:55:a2:6c:b6:
         72:dc:10:28:58:39:ce:0a:39:5b:33:61:ed:51:7a:c8:d4:65:
         02:69:48:af:c7:97:cd:83:94:f8:47:a4:2b:37:e6:0a:70:65:
         bb:8c:50:7c:61:7c:59:cb:4d:91:f0:cc:6c:45:53:87:be:f9:
         ad:e4:3e:58:ce:43:f5:49:df:0f:98:c7:93:02:1d:30:51:29:
         47:08:a4:ac:38:fc:8d:de:7c:b8:0e:68:0d:2d:cd:6d:fb:ed:
         fc:6d:56:85:0a:72:bb:f6:82:55:f6:5b:8c:36:2e:1c:8f:0b:
         22:34:bc:54:eb:f0:df:c4:ad:cf:dd:c4:1c:a4:e6:f0:4a:cb:
         e2:e9:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----