Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
File:                     EE3r2037i5__46TvfbFlevst9-I.mft (raw, json)
Hash identifier:          J4D5y7TMsQeHsQkXfO0z/sxBn4B3I3ev9Xj8uRazcnI=
Subject key identifier:   44:2F:16:91:CC:04:C5:4E:C2:6F:AE:77:65:44:B9:75:18:60:4F:45
Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2
Certificate issuer:       /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
Manifest number:          0160
Signing time:             Fri 31 Jan 2025 03:16:57 +0000
Manifest this update:     Fri 31 Jan 2025 03:16:57 +0000
Manifest next update:     Fri 07 Feb 2025 03:16:57 +0000
Files and hashes:         1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: 8OsSnCWEzjHLB/FCKKFiyORWKTbdXeT04L6MDSGt+mM=)
                          2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: KSfw6IBecAIXXXtQTk/28sHhzeNjJPQPF3dORiab4B8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
        Validity
            Not Before: Jan 31 03:16:57 2025 GMT
            Not After : Feb  7 03:16:57 2025 GMT
        Subject: CN=679c40a9-f395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:4a:78:1b:63:46:8e:1f:b4:86:bd:ce:c5:
                    93:5b:ea:60:11:56:ec:8d:32:28:02:4a:36:12:31:
                    8d:6a:e7:fa:0f:28:a5:3c:eb:6d:0c:65:5d:5f:d1:
                    e4:d3:de:18:95:34:54:98:99:75:28:22:c1:a1:a6:
                    15:20:b0:73:d5:a2:2e:ef:66:a0:2a:c0:1d:9f:3a:
                    6f:f9:19:5f:b4:c4:eb:db:19:91:e6:e9:17:df:1b:
                    d6:41:18:c1:65:c5:4b:5f:83:be:be:37:dd:e8:38:
                    ac:fe:6e:eb:bc:a5:9b:2c:7a:37:ae:52:99:76:25:
                    e0:45:b9:4f:9b:2d:49:d9:5a:30:a3:af:4b:aa:fd:
                    8e:64:b7:5e:21:77:04:83:9e:6a:61:c3:b5:42:92:
                    4c:d3:b7:c6:b3:2a:d0:0b:d9:9b:88:ed:18:94:61:
                    e1:04:60:91:6c:da:f1:5a:90:b8:5f:53:e0:d7:00:
                    5f:90:ba:90:c2:96:fd:fe:54:85:38:4a:35:16:36:
                    93:e5:55:ff:94:64:91:4e:ce:39:3c:39:96:c4:1a:
                    8a:f1:24:6c:61:13:e9:2b:87:0d:48:13:57:40:7e:
                    d0:6f:73:58:e1:54:81:85:99:a9:23:32:e2:0f:65:
                    a3:78:2d:b1:33:60:02:75:16:6f:9b:40:a3:d4:cb:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2F:16:91:CC:04:C5:4E:C2:6F:AE:77:65:44:B9:75:18:60:4F:45
            X509v3 Authority Key Identifier:
                keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:93:91:4e:55:dd:55:37:e7:16:15:dd:e2:7a:08:1c:e3:1b:
         95:ae:7c:1f:7e:6f:41:4e:50:17:ab:ee:d3:af:ae:72:6f:af:
         65:4c:0d:9e:8a:03:22:5d:aa:4d:58:a1:d1:da:1c:53:29:27:
         0c:52:21:54:d4:c1:e9:20:54:5d:d2:07:e1:fe:cd:69:9b:80:
         9e:3b:02:94:a2:f9:66:15:c1:f1:d4:15:eb:ca:99:5c:6a:3a:
         d1:78:22:66:cb:b6:e6:02:20:09:37:8e:be:d6:c0:9b:50:11:
         95:e7:74:49:8c:2b:31:3d:19:c1:a5:62:e0:10:fc:11:e9:63:
         20:b4:e9:d6:09:b1:04:ad:f1:ec:b6:b6:02:fa:64:ab:5d:e1:
         7b:23:d1:ee:e9:29:5f:57:5a:6d:f6:f0:29:47:08:49:04:db:
         3d:db:20:aa:9a:ad:d5:86:e5:b7:21:de:f9:5c:a7:de:e4:76:
         f5:af:66:eb:62:46:04:b5:b8:24:68:25:64:23:ae:fa:61:73:
         13:79:c6:00:85:a7:29:03:a3:04:a8:30:d3:6e:58:38:7c:d2:
         35:a1:4b:1e:f7:f8:e9:35:0f:05:0c:a2:62:ae:54:1b:60:fd:
         7a:65:1c:e2:92:76:be:33:29:3f:fc:a9:57:c8:19:a8:90:92:
         db:97:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----