Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919333B/32831FDCAD1011E987AD8327C4F9AE02/LB8bJcF_UL4WDHMHV8KiIAK1V-U.mft
File:                     LB8bJcF_UL4WDHMHV8KiIAK1V-U.mft (raw, json)
Hash identifier:          C0pHWazG56m+Yvjb0FI6nCq0FlfhmGZIfR0NNMtmr40=
Subject key identifier:   87:F9:C4:5B:E5:FB:15:F7:4F:D1:32:23:42:0D:F2:EE:39:E5:C0:58
Authority key identifier: 2C:1F:1B:25:C1:7F:50:BE:16:0C:73:07:57:C2:A2:20:02:B5:57:E5
Certificate issuer:       /CN=A919333B/serialNumber=2C1F1B25C17F50BE160C730757C2A22002B557E5
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LB8bJcF_UL4WDHMHV8KiIAK1V-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919333B/32831FDCAD1011E987AD8327C4F9AE02/LB8bJcF_UL4WDHMHV8KiIAK1V-U.mft
Manifest number:          0C85
Signing time:             Fri 13 Jan 2023 02:24:23 +0000
Manifest this update:     Fri 13 Jan 2023 02:24:23 +0000
Manifest next update:     Fri 20 Jan 2023 02:24:23 +0000
Files and hashes:         1: LB8bJcF_UL4WDHMHV8KiIAK1V-U.crl (hash: RaMb2w5D9E5RIKzMS25/wGF2HFXOdAdIJ1MYJ/tX/6U=)
                          2: 74AC54645C7611ED973A1062C4F9AE02.roa (hash: MJqDk8h7pE/B1rr89QUDb7eRzvLqb/jIXChqiAqJk68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919333B/serialNumber=2C1F1B25C17F50BE160C730757C2A22002B557E5
        Validity
            Not Before: Jan 13 02:24:23 2023 GMT
            Not After : Jan 20 02:24:23 2023 GMT
        Subject: CN=63c0c0d7-5aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:e6:ed:65:f6:ad:c4:1d:84:a0:7d:d0:a2:
                    43:7a:5d:5e:35:49:3f:90:16:62:fd:80:15:ee:81:
                    84:2b:64:50:5b:1f:56:62:94:a9:1e:ac:8c:6d:79:
                    a0:70:7d:6d:ff:7a:29:5f:5b:97:fb:82:01:ad:5d:
                    b9:d4:0e:8a:08:5c:06:3e:dd:1f:8b:45:1d:3e:de:
                    40:bf:fb:36:87:c1:c7:89:16:ed:88:a0:06:a6:17:
                    d4:8e:69:2e:6d:a7:9c:99:57:5e:d3:d6:dc:c8:75:
                    fd:c8:5a:ac:7c:fa:24:c6:a5:33:49:f6:2e:d7:95:
                    45:f1:1f:80:95:b7:f0:7e:52:ef:b2:49:ee:fa:0f:
                    50:95:ba:87:b6:b6:bf:d9:df:61:d7:6f:57:22:6c:
                    c7:19:7a:67:08:12:87:9a:78:18:56:2f:60:f4:f5:
                    70:d3:6b:a5:0a:f8:6a:55:0e:26:c0:1e:4c:c2:2c:
                    d7:13:0f:33:50:75:d8:63:c6:1a:53:4a:da:e6:40:
                    93:15:0c:31:04:1c:2e:98:52:90:56:38:df:a4:7e:
                    5f:c1:4e:af:26:64:f8:ff:66:1c:e0:ec:03:e3:d3:
                    6d:63:9a:f7:d6:15:1b:f7:48:78:54:ef:b5:31:fa:
                    e9:2d:2d:f4:35:b4:48:1e:5c:ed:f8:38:e8:b4:ca:
                    48:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:C4:5B:E5:FB:15:F7:4F:D1:32:23:42:0D:F2:EE:39:E5:C0:58
            X509v3 Authority Key Identifier:
                keyid:2C:1F:1B:25:C1:7F:50:BE:16:0C:73:07:57:C2:A2:20:02:B5:57:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919333B/32831FDCAD1011E987AD8327C4F9AE02/LB8bJcF_UL4WDHMHV8KiIAK1V-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LB8bJcF_UL4WDHMHV8KiIAK1V-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919333B/32831FDCAD1011E987AD8327C4F9AE02/LB8bJcF_UL4WDHMHV8KiIAK1V-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:eb:8c:09:12:42:1a:45:89:98:0a:fe:0c:d1:23:f6:4c:
         c9:d8:8b:51:4f:bb:1d:61:da:93:24:50:13:e3:ab:ac:40:57:
         73:bd:b0:5d:c4:35:b9:6d:f4:53:d1:66:c6:7e:f4:73:08:86:
         01:12:e9:09:00:b7:10:0f:3a:65:28:e8:ee:14:b5:7b:a7:24:
         ea:b9:09:b7:a8:a0:e5:98:11:5b:36:18:94:56:4c:e6:47:0a:
         44:50:87:ca:ab:29:2f:80:6c:95:62:fd:f9:3b:a6:fe:5b:23:
         ab:2a:4e:47:cb:43:9a:9b:a5:51:c4:96:09:7c:72:69:7c:7f:
         ef:73:69:ba:82:39:8e:d1:74:cc:24:c8:d5:08:bd:c5:20:fb:
         15:f4:94:57:51:28:fa:40:2e:d0:e5:6c:68:ff:bd:e0:b6:37:
         0d:92:99:79:e7:73:bf:aa:76:14:a9:89:93:b6:04:a1:9e:48:
         6b:e0:31:5b:18:d2:5d:8a:3b:4e:e1:8d:a2:1f:8e:f3:b2:2e:
         16:bc:81:3e:fe:1f:5f:eb:45:1a:ec:a6:31:1a:10:e2:fa:d6:
         e5:56:4b:86:60:66:ed:ba:bc:67:91:c4:7d:f4:13:19:b0:e4:
         4a:53:a8:f9:85:99:7e:cd:13:48:c2:57:96:3e:79:93:60:ed:
         80:2f:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----