Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
File:                     IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json)
Hash identifier:          MZDzmJ29Z1YK7tkypmZbJybSxDTZ3VXd8+BbfqBi7lM=
Subject key identifier:   66:84:A4:1B:22:F7:DE:C9:CC:05:AD:5F:93:8B:A6:AC:D0:06:95:F6
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Certificate issuer:       /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
Manifest number:          02CD
Signing time:             Fri 31 Jan 2025 01:30:18 +0000
Manifest this update:     Fri 31 Jan 2025 01:30:17 +0000
Manifest next update:     Fri 07 Feb 2025 01:30:17 +0000
Files and hashes:         1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: iILF9dvzJifpi3HKuA3YZROpCdBYmHtGhn9Gm8Y6g+o=)
                          2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: NomuIY8Tv9X/mYInZROxbO2w9blxvzJn6kYiUIriBwQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
        Validity
            Not Before: Jan 31 01:30:17 2025 GMT
            Not After : Feb  7 01:30:17 2025 GMT
        Subject: CN=679c27aa-701c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:58:65:c3:eb:ed:f5:f1:15:bc:b4:8f:e6:00:
                    d4:2d:94:7a:03:bf:4c:92:c1:3b:34:6f:c0:a4:b6:
                    4f:cf:40:22:e3:85:6d:86:ce:54:59:a5:f6:1e:68:
                    94:59:2e:53:17:83:b2:fc:17:e6:2e:4b:da:94:a2:
                    54:08:72:e2:2e:e3:d7:8b:6b:03:42:aa:2e:25:39:
                    8a:c8:85:80:1a:29:87:a5:b5:0c:32:31:6f:1f:42:
                    e6:7c:47:67:ef:95:45:17:c0:d2:33:be:8d:5d:58:
                    9a:f7:0a:74:c7:ae:73:85:aa:c3:98:ea:da:9d:88:
                    c5:cf:72:20:aa:df:18:c5:42:12:42:db:30:9d:b8:
                    06:a2:55:42:9c:a9:5f:bf:83:b0:8d:24:60:99:df:
                    04:8e:97:bf:a8:5f:02:3d:f1:7f:9e:f0:22:08:48:
                    ca:88:8d:e7:f8:8e:1b:e4:69:02:8f:24:9d:04:3b:
                    fe:4d:65:d9:60:18:21:f3:05:e6:eb:fe:d8:58:cb:
                    ce:cd:ed:4f:b2:d4:87:89:2c:f3:d6:73:e0:e0:cf:
                    9c:42:5d:46:89:bd:ca:01:67:4c:db:28:01:21:a7:
                    e9:f9:31:86:90:f6:79:0e:1c:23:62:bc:48:c7:34:
                    44:2e:f2:dc:af:75:2f:16:a7:17:5a:b6:85:cd:b7:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:84:A4:1B:22:F7:DE:C9:CC:05:AD:5F:93:8B:A6:AC:D0:06:95:F6
            X509v3 Authority Key Identifier:
                keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b0:2c:0a:5f:b6:85:75:57:0b:18:fa:15:12:de:a1:1f:c9:
         a9:db:f5:b6:7b:52:f6:fb:87:01:80:f4:76:14:cb:c4:59:73:
         53:e9:a6:e5:d0:1a:e3:18:ce:7d:18:53:11:4f:e4:f8:a3:53:
         f7:18:88:a4:47:f7:08:5c:88:7a:31:a9:09:ae:d9:99:75:ba:
         dc:ac:60:50:07:3d:4e:8e:05:0a:b0:42:20:97:16:06:49:55:
         11:cb:bc:59:80:3a:99:36:b0:8f:a5:48:1c:9c:7a:d9:32:ec:
         7e:63:5b:d8:b5:67:d9:c8:bf:5c:bb:4a:80:74:94:52:fc:79:
         1c:eb:b0:12:e7:a0:dd:e9:52:1f:35:8c:1c:a9:fa:95:81:9b:
         10:c4:6f:07:50:e1:bb:85:a4:db:13:65:f3:c6:fc:e0:fd:02:
         7b:a5:0c:7b:93:e9:30:a8:9a:4f:3c:35:71:a6:4f:90:35:2f:
         18:94:86:88:09:ff:73:2b:21:21:11:60:d2:05:46:4b:67:cb:
         7e:30:6b:ac:f3:3f:9b:a0:81:9f:e9:90:dc:9a:99:95:3a:20:
         d9:6c:32:71:a5:1c:58:08:60:90:e4:02:e7:1f:c7:12:6f:0e:
         29:5a:3a:f6:c2:cc:8a:cc:e1:da:44:12:4a:a1:d6:91:3d:fb:
         2b:a6:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----