Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File:                     Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier:          QPK1kmCmmF1M96VFP8XOlnFamIzx0xfj1MOGP8wbTUo=
Subject key identifier:   8B:09:53:62:6B:4E:C2:47:E0:82:52:90:5D:BA:E8:30:56:5D:EB:D5
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer:       /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number:          016E
Signing time:             Sat 29 Mar 2025 03:21:14 +0000
Manifest this update:     Sat 29 Mar 2025 03:21:13 +0000
Manifest next update:     Sat 05 Apr 2025 03:21:13 +0000
Files and hashes:         1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: enz4eewPzcEVvDPH4RxREzql25t2lu4LJdDy5zWu5fM=)
                          2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: /9Uf2838bCZKpE133UWLyKcpXUA7N6aybd5lPLH4kiM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E951
        Validity
            Not Before: Mar 29 03:21:13 2025 GMT
            Not After : Apr  5 03:21:13 2025 GMT
        Subject: CN=67e76729-7f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:d4:7b:79:78:41:44:1a:d1:c1:3f:87:88:
                    40:43:29:e8:26:69:0f:2f:e5:9a:44:ac:9c:60:02:
                    40:85:cd:cb:62:f5:b1:e7:36:4f:5e:74:0c:c5:cf:
                    77:0f:8d:b6:f8:80:89:f6:ca:20:24:91:35:29:9b:
                    5c:89:f0:06:bd:72:6d:03:15:fb:02:5d:ad:06:fd:
                    65:76:ad:8f:05:31:66:e7:e0:4e:30:4b:31:54:7c:
                    a1:70:83:30:00:1c:0a:27:33:34:33:39:6c:84:3d:
                    e4:17:71:88:43:0d:da:9e:76:1e:94:6d:03:f9:0f:
                    ac:08:3c:4b:15:9a:84:28:e2:d5:54:a6:d4:31:b9:
                    ad:67:a0:94:ec:2f:40:68:9b:8f:b6:6e:65:7e:30:
                    80:66:b8:3f:d2:f3:8f:4d:be:88:a4:68:28:c0:15:
                    de:4c:a6:5b:31:c1:b0:3a:74:3d:a7:2b:4c:55:cb:
                    99:48:f8:b6:d9:97:f6:e4:bb:e0:e8:aa:eb:75:4a:
                    78:27:27:08:45:9d:fb:38:2c:47:cc:ec:0d:ca:85:
                    ba:db:c3:8d:39:50:2e:b6:1b:6f:16:7a:6a:71:63:
                    3a:1a:d8:bb:07:7c:f6:14:74:62:f5:8a:b1:aa:6a:
                    d8:ae:02:9e:a7:81:3c:b2:23:c5:32:ab:5f:de:2f:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:53:62:6B:4E:C2:47:E0:82:52:90:5D:BA:E8:30:56:5D:EB:D5
            X509v3 Authority Key Identifier:
                keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9d:d0:90:46:67:d9:f4:ec:30:0d:96:0c:5d:4e:f1:22:37:
         36:c5:0f:fe:62:31:e1:8b:34:d7:1e:e5:3b:b8:a6:2d:10:66:
         34:8e:09:28:1a:f6:1c:b1:8a:98:4b:45:74:0f:b5:1c:ab:86:
         53:ca:40:52:e9:8f:70:cf:94:ad:1d:74:a7:d6:3f:13:db:a4:
         5d:f3:97:24:00:24:22:d3:ad:94:6f:36:9f:fb:0b:07:e4:d2:
         97:7d:27:42:d3:d5:b4:92:b3:8d:59:29:3d:0e:27:9f:94:08:
         92:29:53:58:bd:0d:96:2d:5c:f7:27:3f:f3:35:7a:09:57:9a:
         c2:f5:0f:7c:be:45:2c:44:e2:8d:82:2b:20:4b:64:80:a5:a0:
         59:70:5c:22:4f:3e:f7:cd:26:f5:18:09:80:2c:bf:f6:94:a7:
         3f:7d:ea:84:6b:a4:d5:b5:32:96:5c:99:65:af:af:40:9e:af:
         6e:c9:04:7a:a4:57:6e:6a:02:2e:8d:be:10:ff:45:47:45:83:
         fc:26:b0:d5:0b:09:e8:4b:a1:42:93:85:b6:6f:f7:33:49:0e:
         1c:96:e4:39:0e:db:cb:ca:31:b4:9b:d3:c9:94:59:e5:11:16:
         0d:9e:c4:36:06:ac:f4:c6:1e:e6:ad:27:3e:25:c9:8b:d7:19:
         9b:7e:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----