Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft
File:                     oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft (raw, json)
Hash identifier:          rfmlEdhYl5pX08B3wXl1NJIj7prd3L0gIZT+Dedk22o=
Subject key identifier:   03:FB:DD:6D:04:E5:C5:B3:16:F3:2B:58:3A:21:56:87:C9:DC:56:32
Authority key identifier: A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44
Certificate issuer:       /CN=A912E092/serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544
Certificate serial:       0BCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft
Manifest number:          0BBA
Signing time:             Wed 12 Feb 2025 01:42:55 +0000
Manifest this update:     Wed 12 Feb 2025 01:42:55 +0000
Manifest next update:     Wed 19 Feb 2025 01:42:55 +0000
Files and hashes:         1: oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl (hash: gHqCOhrlUzCf0/CR2yZR5WIaAIBq+AFIei7Q8ciR++s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3022 (0xbce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E092, serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544
        Validity
            Not Before: Feb 12 01:42:55 2025 GMT
            Not After : Feb 19 01:42:55 2025 GMT
        Subject: CN=67abfc9f-38da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ae:c0:03:99:86:36:55:fe:7d:fb:09:f4:ae:
                    19:8a:8a:fc:f3:14:b1:97:19:02:ea:9f:75:3a:38:
                    d7:d6:24:d6:0e:04:56:a6:f8:dc:82:39:34:6d:d8:
                    99:e4:dc:c1:fc:2b:2f:46:94:c5:49:7b:96:a5:2b:
                    e8:6b:bb:f4:5d:9c:4d:16:28:d2:ab:5a:9d:01:fc:
                    a6:3d:f3:36:b4:2d:fe:1f:75:2c:f6:ad:3b:18:32:
                    b2:92:7e:7b:99:1d:4b:c4:5f:37:ac:33:7a:50:91:
                    aa:d7:64:c8:c1:11:cc:a0:6c:3d:b6:9b:fc:80:fb:
                    88:34:f4:ce:26:d2:23:b6:db:8e:95:76:11:45:e5:
                    c9:44:3b:05:8d:92:50:9d:2b:c2:76:0f:0c:9d:95:
                    52:d1:e7:ef:e1:e3:99:69:77:32:4e:f3:83:46:4e:
                    23:8d:84:bc:d9:15:a0:71:60:3c:e8:b6:5b:98:8a:
                    37:55:29:1e:a6:f2:9e:de:41:42:94:36:db:97:18:
                    15:ed:5b:9f:f3:a2:50:5a:17:4a:ca:6b:23:53:ac:
                    36:20:f7:7b:56:e1:3b:6e:31:32:7f:b9:02:c2:c8:
                    fc:37:64:4e:ab:57:bb:6d:b0:f7:a4:ce:66:54:e3:
                    dd:12:78:d8:0f:f1:51:21:df:d5:1d:9d:4d:aa:bf:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FB:DD:6D:04:E5:C5:B3:16:F3:2B:58:3A:21:56:87:C9:DC:56:32
            X509v3 Authority Key Identifier:
                keyid:A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:95:62:ac:0b:85:bc:3d:cd:9b:39:0d:05:09:5b:6a:33:b3:
         8c:2f:0c:1c:ba:ec:de:7a:6a:b1:8b:8d:c2:b4:69:36:16:89:
         91:1c:de:44:be:2b:55:db:fd:86:98:1f:f0:c8:81:ff:03:74:
         97:0b:01:1e:4e:64:35:aa:24:53:71:78:41:1c:e7:cd:72:44:
         bc:50:ac:66:13:70:ea:a2:25:ef:99:42:88:13:7b:55:bc:70:
         fb:a9:46:65:34:89:8d:be:58:a7:b5:69:71:86:83:ab:24:ee:
         12:72:1e:1f:4f:53:52:e4:04:3d:d5:0e:b9:f5:c5:ce:f2:a6:
         a3:c5:84:72:75:27:38:41:6a:87:bf:a4:fb:15:00:15:87:10:
         32:50:b2:8f:4d:d4:b5:32:69:47:c0:0d:2b:e6:7e:eb:d7:66:
         2f:1a:e6:29:8d:52:33:b7:68:4d:08:65:43:ed:cf:2d:8e:b7:
         aa:3b:c1:a7:89:4b:17:24:19:d0:01:46:ab:1d:c2:ae:35:6a:
         47:dc:3c:de:ca:07:53:48:b5:ca:2f:51:7a:31:c6:96:c7:23:
         22:4a:55:ca:81:3f:4b:8a:86:13:dc:cb:5b:48:80:c1:27:a2:
         fc:59:08:ce:b4:db:22:d6:72:02:92:62:c3:e5:c2:6b:6f:05:
         51:53:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----