Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File:                     8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier:          W0ZK805fCGjx0kdUS8jcjHeaUO4c3tqcsD069lXiuQ8=
Subject key identifier:   BD:12:82:3C:B8:70:7A:8E:0E:4C:50:59:DC:86:C5:22:B1:C7:B0:B9
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer:       /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial:       0320
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number:          031C
Signing time:             Sat 29 Mar 2025 01:23:55 +0000
Manifest this update:     Sat 29 Mar 2025 01:23:54 +0000
Manifest next update:     Sat 05 Apr 2025 01:23:54 +0000
Files and hashes:         1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: kPG4chKKG4UC9REbDrjRiDHlBFRXMjCf8lD/xLjfTQE=)
                          2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: 1WkNyyyiFt1FW+4vq2oaXotjB9v8sAKNGelCyY+t8Uc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB5F
        Validity
            Not Before: Mar 29 01:23:54 2025 GMT
            Not After : Apr  5 01:23:54 2025 GMT
        Subject: CN=67e74baa-30fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e2:78:b8:f7:61:fd:1a:62:a2:b4:fb:b5:86:
                    f6:e1:4e:39:17:99:4a:72:93:3e:a0:5a:10:2a:1b:
                    97:19:96:be:98:7f:70:69:89:80:76:b2:49:29:43:
                    ea:4e:94:53:e6:68:56:e7:68:18:81:9a:fb:1d:d0:
                    6e:1d:38:78:03:11:3a:cd:23:6f:a3:62:3b:6c:96:
                    6f:c2:72:ca:42:e0:68:2f:8b:98:37:ce:0e:1b:ad:
                    90:8f:7c:11:75:94:25:0d:3d:f7:c4:56:cd:da:6d:
                    c1:14:d6:d3:3e:f5:f9:f5:2b:f2:25:71:aa:f7:11:
                    b2:f7:59:90:ad:da:52:a5:d6:07:c4:4f:28:da:ee:
                    8c:d3:10:0c:e2:6e:7f:01:43:13:8e:1e:53:fa:97:
                    0b:a9:13:9b:bc:b2:1b:e3:b3:78:48:f2:a8:a2:b6:
                    46:62:67:55:47:04:7e:e6:37:8b:38:06:fe:f6:1d:
                    b6:95:70:a2:33:8b:36:76:ff:0f:1f:64:a6:92:d2:
                    d0:30:72:7f:e4:e2:c0:4d:63:50:08:87:b2:56:b8:
                    ac:c9:dd:c2:be:9e:d3:4b:dd:6e:26:11:3a:b3:de:
                    6c:44:bb:55:86:21:1b:0b:1e:ca:80:5d:4e:e7:d9:
                    5f:e9:27:99:1e:fc:e4:fe:a0:fd:53:d8:f8:2c:8a:
                    48:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:12:82:3C:B8:70:7A:8E:0E:4C:50:59:DC:86:C5:22:B1:C7:B0:B9
            X509v3 Authority Key Identifier:
                keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:7d:11:41:bc:2f:ad:9c:27:e1:d0:b7:f2:05:dd:7b:fe:
         98:4d:fb:3a:88:b7:3e:89:36:90:30:23:02:cf:d6:cd:21:36:
         d7:62:f1:69:af:c8:6e:4b:bf:8c:8d:00:5c:2b:ac:e9:20:41:
         b5:88:5e:1b:0c:76:3a:d4:a1:16:b3:95:8b:e2:d8:b6:5f:33:
         9f:28:bd:cb:3d:b7:b6:ca:5e:41:9f:2a:5c:1e:f1:e7:43:51:
         80:3f:1d:1a:80:1a:08:1b:3c:88:cd:cb:4a:97:0b:37:53:14:
         99:c5:fb:cb:07:99:2f:d3:ee:90:4b:f6:47:30:44:cc:09:a8:
         e0:85:d4:a6:a5:30:60:11:03:6e:bf:42:08:b4:72:d7:b3:38:
         60:4b:2e:0c:72:01:81:1d:83:a9:3c:52:ba:4a:6e:4b:f9:d5:
         f2:21:b8:ed:d3:c2:2d:21:97:e8:e5:e7:ae:5f:00:c0:2a:ab:
         3a:b2:5e:08:ef:2d:7c:39:86:30:d5:74:16:8c:c0:05:71:6b:
         c2:08:59:b0:21:c6:f6:5c:1a:65:e8:c2:54:da:ba:b0:9a:3f:
         c1:cf:6c:0a:5e:2c:b2:b7:61:90:7a:2f:65:66:10:d1:da:9a:
         5c:03:62:5a:16:17:47:96:fb:98:98:01:91:51:9f:ff:02:aa:
         7c:3e:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----