Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
File:                     Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json)
Hash identifier:          cCqW7LkqpDALzTYuNuMc/lMphcg6czDg2ncDgt5rpps=
Subject key identifier:   99:9F:C4:A1:67:97:F6:95:84:20:AF:4E:E0:7A:14:61:46:48:C4:25
Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC
Certificate issuer:       /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
Certificate serial:       03F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
Manifest number:          03F1
Signing time:             Fri 31 Jan 2025 00:36:29 +0000
Manifest this update:     Fri 31 Jan 2025 00:36:29 +0000
Manifest next update:     Fri 07 Feb 2025 00:36:29 +0000
Files and hashes:         1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: GTy+MF9jNKeeIOjcC9K2Th+7OTkdbRT9ugflQyAkXHo=)
                          2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 7MtcxTQ2rMr9wRU4t+OZ5IgSjQo76u9up+VI67f9CpM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
        Validity
            Not Before: Jan 31 00:36:29 2025 GMT
            Not After : Feb  7 00:36:29 2025 GMT
        Subject: CN=679c1b0d-6f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:f1:de:74:d6:9f:c5:f3:28:7d:dc:f8:0e:
                    3f:ce:50:7c:bd:6f:76:c6:14:ac:32:f9:7d:62:36:
                    4e:87:06:de:2d:8a:00:92:f7:65:71:ab:15:69:af:
                    5a:10:6c:8d:ec:ba:cc:a7:15:fb:29:79:c3:94:ae:
                    8e:4e:5d:a1:1f:73:1f:62:d5:52:22:d4:ec:fa:f6:
                    2d:03:53:6e:b7:f5:01:83:42:83:ec:bb:98:5f:23:
                    9f:ca:06:cd:b0:84:d0:6a:94:e1:20:d4:65:8f:31:
                    5b:b2:63:01:af:54:5d:93:99:cc:85:76:18:45:81:
                    7d:51:9a:72:33:e4:7e:5e:41:ab:e3:de:44:5c:c0:
                    33:34:b1:b1:27:cd:33:b2:64:12:d8:6b:55:47:c0:
                    87:a8:ea:05:3e:99:18:b2:9d:d9:77:c0:6e:32:e8:
                    62:1d:0f:e1:e3:f4:d6:1d:d9:7e:e3:87:95:2b:1d:
                    29:cc:80:d1:7d:b3:f7:0d:a5:24:e7:1a:30:b7:10:
                    b0:fe:43:a0:06:68:06:42:50:f0:32:7a:da:b8:d4:
                    b2:7e:ea:3d:0d:a2:74:73:d1:89:b6:a9:34:3b:5d:
                    b1:25:d1:1a:2a:d5:90:90:91:4c:b2:00:68:24:52:
                    ae:01:fb:c9:a9:70:f4:49:44:e6:41:8d:84:04:2f:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9F:C4:A1:67:97:F6:95:84:20:AF:4E:E0:7A:14:61:46:48:C4:25
            X509v3 Authority Key Identifier:
                keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:a1:c6:dd:26:0d:24:f9:73:7e:ae:15:15:e0:e6:d1:86:
         10:3a:e8:85:e2:bb:37:5c:fc:94:c7:58:f4:d7:d7:05:d6:2c:
         71:b2:6b:9a:4c:0c:31:2d:d7:56:ca:58:55:e6:c4:af:9d:e5:
         f6:86:99:5f:19:0b:29:69:b7:ee:ee:2b:d0:45:61:59:92:6f:
         8c:0f:51:ba:97:b3:70:28:22:65:f4:df:cd:4e:5d:f8:96:df:
         a1:c4:98:79:f8:77:39:3f:a5:39:b6:be:1e:16:ce:c1:70:a8:
         8a:1c:b3:b9:9f:7e:87:c0:7b:e1:2c:98:09:5a:5b:80:a5:44:
         47:a1:c4:9b:0c:b2:00:55:34:21:13:27:fc:ac:2e:14:d5:56:
         b0:c8:23:b5:7e:ba:ac:da:e5:60:63:9f:d7:05:8f:3e:77:ab:
         f7:69:09:ee:87:33:a1:4a:9a:00:92:24:e9:99:2d:37:5a:d6:
         e3:de:3b:10:d2:f5:82:92:6e:f3:4b:cb:14:f4:89:c4:8e:de:
         25:60:bb:ea:5f:e0:65:52:8d:73:1b:8c:de:29:61:31:47:85:
         c5:19:10:1e:01:5c:b1:19:81:73:f9:e7:2b:bb:44:f8:2d:48:
         61:48:53:25:59:27:aa:91:f0:31:e9:3b:78:28:36:58:cd:3f:
         7b:ba:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----