Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
File:                     5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json)
Hash identifier:          gcswcjbxxu7gcy8/ofor/853HPCChUj868E49rGUdQU=
Subject key identifier:   0C:DD:BD:86:D8:67:C6:C0:75:7B:41:A2:0E:E9:3E:71:F9:A7:CE:70
Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9
Certificate issuer:       /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9
Certificate serial:       064A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
Manifest number:          0645
Signing time:             Fri 28 Mar 2025 22:47:08 +0000
Manifest this update:     Fri 28 Mar 2025 22:47:08 +0000
Manifest next update:     Fri 04 Apr 2025 22:47:08 +0000
Files and hashes:         1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: 0CbQBsl8Pl1r1FmAUbOVvsaEFGbqHFiKF53iBoyrqsk=)
                          2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: 4dUVKwERkH/QTGoIXRLz0nS6ysGT9dt9/C/hSIpCKRg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CA0E
        Validity
            Not Before: Mar 28 22:47:08 2025 GMT
            Not After : Apr  4 22:47:08 2025 GMT
        Subject: CN=67e726ec-350a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:34:b1:ce:d7:78:f1:05:9e:85:16:d1:2e:
                    3e:fa:b2:ab:12:ba:6b:26:89:d9:a7:d3:d6:85:22:
                    73:59:9d:d5:77:92:89:45:a3:28:ba:ce:46:08:39:
                    b2:2c:dd:d5:a2:9f:7f:c7:1d:ea:bb:a8:5c:b0:45:
                    80:48:94:1d:3c:76:3f:f1:d6:11:b9:37:20:df:37:
                    c5:cd:c1:20:35:d8:fa:4e:b6:ca:bb:d7:f1:b9:26:
                    1a:96:96:2a:5b:45:35:39:13:b6:ec:60:d7:ba:c2:
                    36:e5:a0:bd:b3:73:07:c1:7e:c3:b0:f0:f9:c5:43:
                    21:77:c5:8e:75:ee:e1:74:64:28:9b:e3:5f:da:0c:
                    ff:30:ec:30:f5:60:f0:77:1c:00:e8:7a:e2:9d:11:
                    8d:2c:85:83:13:e6:cd:c6:4d:f2:a9:02:bb:b2:a9:
                    ec:15:e8:a9:ed:d6:d3:e6:2f:33:64:ae:f7:00:3c:
                    60:39:a7:90:79:fd:fb:26:57:95:27:4c:40:43:d0:
                    bd:5c:2a:4d:5b:3c:29:ba:db:9b:2d:4b:fa:ea:8a:
                    2a:84:75:cc:8b:cb:67:a5:50:06:71:e6:e5:1b:73:
                    94:5f:28:61:18:b3:cb:c4:b3:59:07:ff:aa:77:13:
                    80:39:22:f5:07:f2:a6:2f:28:94:8e:35:3d:0b:a8:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DD:BD:86:D8:67:C6:C0:75:7B:41:A2:0E:E9:3E:71:F9:A7:CE:70
            X509v3 Authority Key Identifier:
                keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:34:98:0c:a5:cf:bf:65:54:e7:b3:59:7b:8e:9f:60:79:ec:
         bd:48:e1:cf:0b:da:49:4a:74:6a:c5:7d:21:ad:92:23:ed:d4:
         4a:86:81:f7:7f:7a:e5:df:9c:b2:e7:e3:e3:44:fb:05:54:f5:
         aa:11:a2:ef:3c:b3:50:24:0b:6b:c4:46:ef:55:ef:fd:c8:23:
         19:a1:9f:d9:df:cf:b4:84:06:86:fc:28:09:31:49:ee:28:0e:
         44:c2:e5:ef:9c:9a:c6:e2:c4:90:b5:4b:9c:39:23:08:8f:c1:
         cd:af:19:1b:02:3e:c7:4f:0b:35:d1:61:c6:03:70:e5:3a:43:
         a5:50:02:38:a9:c0:7a:28:d6:2d:76:89:ff:69:9b:82:af:b7:
         00:81:8b:e9:5f:38:7b:37:32:b3:b9:51:3f:d9:a5:0b:e1:ee:
         51:e9:0f:dc:3a:1f:98:1a:29:df:6f:43:52:d4:26:28:79:54:
         6d:f7:90:2c:cf:a2:cf:6c:a3:db:24:7d:19:8c:30:b8:5e:72:
         62:db:05:03:7b:f8:0b:f4:5e:69:92:04:02:c6:bc:33:9e:c8:
         c5:fe:56:42:0c:eb:98:a2:0f:ba:dd:91:77:08:72:8e:57:8d:
         21:5d:d1:38:35:bf:fe:9c:2e:ee:7a:34:d8:d2:ed:af:a9:cc:
         d3:67:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----