Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
File:                     ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json)
Hash identifier:          IEddcgJHy43kGNt7PLpI8wxbbyTqh+tK1fKLsRm302o=
Subject key identifier:   75:EE:2F:34:00:34:AD:18:CB:F3:BC:2C:1F:1D:23:F6:2F:5D:EE:6B
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Certificate issuer:       /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
Manifest number:          39
Signing time:             Fri 31 Jan 2025 06:41:53 +0000
Manifest this update:     Fri 31 Jan 2025 06:41:52 +0000
Manifest next update:     Fri 07 Feb 2025 06:41:52 +0000
Files and hashes:         1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: 4LpKSwU8lu4vrbNOWNSBtwLJIp5TiCiB8QMn8Cq16c8=)
                          2: 1A4E810A9C4711EFBCAF2961C4F9AE02.roa (hash: H/SNFy0blXHf51g3f4tDsQMfyr+dfN3zT3EjfHQV3so=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
        Validity
            Not Before: Jan 31 06:41:52 2025 GMT
            Not After : Feb  7 06:41:52 2025 GMT
        Subject: CN=679c70b1-dd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:16:65:53:63:5f:79:e2:d4:0d:98:89:71:
                    a4:d8:eb:80:53:e8:ba:ed:d3:d0:96:16:4e:37:98:
                    73:8b:ed:02:47:19:b4:a7:f2:eb:2e:e5:52:c1:e4:
                    aa:3d:a0:0d:ff:5a:52:6e:32:7e:9f:e5:02:51:97:
                    cf:71:e1:c6:f5:84:c3:55:46:e1:d9:6c:6f:cf:5c:
                    74:ee:73:91:fb:a1:d8:6f:1e:6c:1d:32:93:ba:c3:
                    ec:7d:e3:82:1b:b6:83:39:4e:6e:3a:57:c2:26:dd:
                    28:20:71:3f:05:10:cc:20:42:59:e4:1c:2c:b1:11:
                    ae:05:11:d9:69:2f:e8:76:7a:6d:c5:a2:ec:17:7c:
                    04:69:a3:de:fd:44:e5:2c:47:0d:07:f3:fa:9b:77:
                    6b:ed:fa:39:39:5c:82:e3:34:04:e9:35:e9:71:93:
                    2f:da:27:e1:41:88:51:a8:b0:12:22:86:b4:14:45:
                    15:2a:c9:66:c9:f9:fe:58:70:33:d9:11:3f:1b:43:
                    a1:01:2a:f9:63:ff:08:89:82:8f:bc:eb:a0:2a:e5:
                    f0:48:53:84:e6:54:87:27:86:c4:b7:50:43:cd:ee:
                    63:bd:f3:35:40:c8:b8:5e:51:c4:42:79:90:3d:25:
                    55:97:61:39:a6:4e:52:68:7c:bb:76:6d:89:7b:79:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:2F:34:00:34:AD:18:CB:F3:BC:2C:1F:1D:23:F6:2F:5D:EE:6B
            X509v3 Authority Key Identifier:
                keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:c2:d0:9e:18:c4:a5:78:bd:ad:3a:66:a5:8d:32:4b:8a:
         8a:64:02:b6:30:40:24:95:b3:ed:1f:f7:db:c6:a1:fc:78:42:
         4e:19:71:26:b8:34:c0:7f:fa:83:9c:3d:bf:82:de:29:d7:79:
         29:5a:9b:d5:39:1a:0f:12:e0:e3:79:5f:61:f2:cd:b7:35:f7:
         69:73:57:b0:b2:90:ca:e8:22:a8:0c:51:78:6b:75:02:94:59:
         2b:bf:91:0a:17:dd:5b:94:aa:b7:4a:e4:59:42:66:b4:50:d3:
         1b:29:5e:f6:21:08:4f:e0:b6:63:d0:67:0f:f3:f9:1e:a5:37:
         20:63:aa:58:97:fe:5b:24:8c:75:35:18:0f:a0:18:b7:34:f1:
         5b:0a:67:09:8e:9e:29:70:f9:a1:55:71:98:cb:04:98:b5:9b:
         a8:85:89:1f:4b:aa:7f:6f:44:3b:94:3b:07:b0:2b:00:60:78:
         c7:3c:70:d8:bc:3a:d1:72:85:27:7e:81:45:a8:7d:fb:0c:67:
         3e:a4:80:e9:45:c2:15:c4:aa:46:76:74:1e:01:50:be:04:2d:
         fc:dc:f2:f3:e2:93:41:2c:9e:8c:2d:9e:fb:bb:28:a6:98:4a:
         04:5d:2b:56:44:f4:60:45:79:f3:b2:3d:09:02:3a:d9:ae:80:
         6a:77:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----