Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
File:                     asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json)
Hash identifier:          Mvk1XGrtspgzM2NArrhI8AmCT1cdNqIbFd0kXyf8Ay8=
Subject key identifier:   42:99:DA:93:20:20:D6:9F:BE:68:AE:B4:03:2D:38:71:7E:5F:84:E4
Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
Certificate issuer:       /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Certificate serial:       1015
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
Manifest number:          100E
Signing time:             Fri 31 Jan 2025 17:24:44 +0000
Manifest this update:     Fri 31 Jan 2025 17:24:43 +0000
Manifest next update:     Fri 07 Feb 2025 17:24:43 +0000
Files and hashes:         1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: 48uhvuMepyspNqM0IQiJQ09522UXO7STbIaPFu0tLbE=)
                          2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: Xl08iUFukXE24X8fvGUzm4LLhTQ/xSXJRNuZF2QZScI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4117 (0x1015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
        Validity
            Not Before: Jan 31 17:24:43 2025 GMT
            Not After : Feb  7 17:24:43 2025 GMT
        Subject: CN=679d075c-8576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:36:21:51:3d:b0:79:d4:53:f8:8b:4a:81:
                    d4:d9:14:18:2f:84:48:8f:4a:67:7b:84:17:2d:cf:
                    6b:9f:11:6c:20:b6:db:51:0c:b7:ff:c6:25:fe:d5:
                    91:1f:6a:b1:d1:10:02:4e:c0:e9:ce:1d:b2:57:98:
                    9f:92:63:ac:91:63:6a:76:80:83:ff:fc:d4:18:41:
                    51:cb:c3:e4:63:54:b7:04:1f:0d:e7:9c:db:cd:b9:
                    ee:82:6f:34:10:3b:d9:df:86:eb:b3:6e:89:b3:51:
                    a3:17:b9:ca:9a:c3:6b:84:7e:0f:bf:dd:28:fb:3a:
                    7c:81:10:1c:45:28:a7:43:09:6f:b5:d5:10:f1:3f:
                    57:83:0d:9a:2c:4e:7b:99:d1:ee:f4:bc:00:50:89:
                    8a:db:b6:df:f7:e3:19:51:69:f6:24:e7:c2:69:40:
                    98:c4:99:4b:7d:53:0c:16:9d:4c:46:2b:da:3f:54:
                    b1:9a:28:77:f2:ff:a8:06:2a:f5:d9:8f:ef:c9:85:
                    e4:e1:66:77:71:eb:ec:b1:54:75:a2:03:13:17:d1:
                    01:59:f3:ec:4f:9d:62:0f:cc:eb:b8:69:9a:e8:05:
                    c6:a4:04:de:96:04:14:f2:38:05:f4:eb:a3:0a:6f:
                    ec:a5:df:93:d6:2b:80:f5:98:a1:34:f3:d4:2e:61:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:99:DA:93:20:20:D6:9F:BE:68:AE:B4:03:2D:38:71:7E:5F:84:E4
            X509v3 Authority Key Identifier:
                keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4e:07:17:21:7f:60:a5:da:0b:9f:02:18:7b:be:c6:40:c7:
         63:f9:57:dd:ec:03:17:2c:55:b5:59:87:2f:4e:6d:42:5c:62:
         a6:30:e6:fa:06:30:73:9a:c3:27:ea:f3:07:21:13:83:bf:d2:
         7f:8a:1d:82:c4:86:92:67:33:8d:c1:5b:83:04:b7:16:36:fe:
         f1:73:8a:ac:4d:79:41:7a:c9:3a:00:8b:bc:cd:02:c3:2d:b4:
         03:de:84:e6:2a:18:4b:b3:40:06:4d:04:92:e5:f3:d9:55:bf:
         fe:6c:11:66:36:85:78:7c:21:f8:16:fd:38:15:c2:11:91:2c:
         4f:13:5b:2c:f3:62:2f:5b:73:40:c5:d4:2b:8f:3f:13:a0:51:
         45:fc:37:20:df:08:d0:fc:88:c8:e1:25:91:25:b4:dd:55:86:
         73:81:6b:6f:d8:b5:69:3b:6e:d0:9f:97:57:41:79:e9:e8:77:
         1f:71:9f:30:16:d2:65:0e:e9:f5:be:68:a3:2e:4a:2e:26:dc:
         b4:23:0d:c8:08:f1:32:da:d6:43:6e:37:d2:28:b9:a7:a4:79:
         7a:c0:62:44:ea:90:51:d9:87:94:9e:b4:2b:78:67:1a:ec:84:
         ca:a8:96:8e:2a:ae:c2:ca:b9:16:84:bf:3e:92:e6:4b:57:f3:
         d8:f3:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----