Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914604B/F3E614B2812711EB95ACF959C4F9AE02/Bz10lJQaUy1-eJ86TsjH_j66CbM.mft
File:                     Bz10lJQaUy1-eJ86TsjH_j66CbM.mft (raw, json)
Hash identifier:          zv8WeTqcr4x6W0o1h1D1PSJYw9JSUYvfRUlMkyro7so=
Subject key identifier:   4F:F3:7F:A0:EE:0C:29:EA:A3:B0:0B:03:1B:1B:2F:84:45:E1:70:11
Authority key identifier: 07:3D:74:94:94:1A:53:2D:7E:78:9F:3A:4E:C8:C7:FE:3E:BA:09:B3
Certificate issuer:       /CN=A914604B/serialNumber=073D7494941A532D7E789F3A4EC8C7FE3EBA09B3
Certificate serial:       04DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bz10lJQaUy1-eJ86TsjH_j66CbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914604B/F3E614B2812711EB95ACF959C4F9AE02/Bz10lJQaUy1-eJ86TsjH_j66CbM.mft
Manifest number:          04D8
Signing time:             Thu 13 Apr 2023 01:30:24 +0000
Manifest this update:     Thu 13 Apr 2023 01:30:23 +0000
Manifest next update:     Thu 20 Apr 2023 01:30:23 +0000
Files and hashes:         1: Bz10lJQaUy1-eJ86TsjH_j66CbM.crl (hash: tbX3e7z+x6EYxOb6LTTE7jlgE/WCfzx393RIlkrhcFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914604B/serialNumber=073D7494941A532D7E789F3A4EC8C7FE3EBA09B3
        Validity
            Not Before: Apr 13 01:30:23 2023 GMT
            Not After : Apr 20 01:30:23 2023 GMT
        Subject: CN=64375b2f-e2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:07:83:24:bb:fe:d4:c4:2e:60:cf:1c:84:
                    ce:ed:f4:f1:54:d6:98:b2:fb:e8:6b:5e:0a:94:80:
                    04:e1:9c:99:ce:20:d5:08:75:e8:8a:ec:fc:62:8a:
                    f1:af:fb:a7:15:66:b1:13:71:2c:6f:29:c0:e0:1a:
                    2d:0e:43:2f:e7:0b:6c:8b:06:a9:29:31:3e:a6:63:
                    2a:0c:b6:41:d2:12:68:60:f3:7f:bf:b3:ff:7c:ae:
                    95:2c:f1:ae:dd:8b:44:8e:d6:ba:7c:1e:7f:19:6b:
                    e0:c0:b7:73:5f:4f:a0:ab:10:61:3e:e8:15:a2:df:
                    04:83:5f:bd:bd:c4:5a:47:4f:61:64:0e:35:42:93:
                    da:f4:6d:d2:f3:6c:c2:74:7a:12:15:64:5f:57:09:
                    b8:ea:3a:2f:9d:94:bc:3e:18:55:e8:ad:32:cb:f3:
                    a0:91:8e:17:fc:0e:ca:63:24:9c:23:a6:c6:dc:e5:
                    74:58:8e:27:82:71:87:4e:8d:17:0f:f6:6b:42:09:
                    25:20:76:76:d0:e8:1c:4f:41:11:d0:a3:43:bb:0a:
                    57:b1:97:3b:ac:88:72:88:c8:e2:49:38:f7:32:20:
                    ca:92:52:9b:f1:3e:83:97:63:20:ab:ff:af:c5:a2:
                    c7:4d:90:81:ec:5c:65:ad:9d:35:34:cd:95:2b:08:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F3:7F:A0:EE:0C:29:EA:A3:B0:0B:03:1B:1B:2F:84:45:E1:70:11
            X509v3 Authority Key Identifier:
                keyid:07:3D:74:94:94:1A:53:2D:7E:78:9F:3A:4E:C8:C7:FE:3E:BA:09:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914604B/F3E614B2812711EB95ACF959C4F9AE02/Bz10lJQaUy1-eJ86TsjH_j66CbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bz10lJQaUy1-eJ86TsjH_j66CbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914604B/F3E614B2812711EB95ACF959C4F9AE02/Bz10lJQaUy1-eJ86TsjH_j66CbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:bf:07:2b:e9:a8:0d:b2:9d:30:b2:18:36:4a:d6:b0:96:
         88:9d:cd:cb:da:ea:3a:d5:4b:52:05:9e:d4:fa:24:32:1e:99:
         cb:a9:0c:e9:59:d9:a9:1e:84:e3:ad:ea:7e:a4:d3:63:a9:39:
         27:13:e4:ec:53:db:f2:60:8c:99:8d:ab:10:0f:52:ad:20:13:
         2b:11:af:4e:4d:d8:8e:93:38:61:7a:33:82:87:f2:79:47:7b:
         fb:21:57:74:6b:bf:39:c0:a0:cd:22:2c:21:19:5d:a6:a8:7c:
         84:2c:49:a9:6b:fb:38:92:ec:37:c4:08:ce:1b:91:e4:07:7c:
         6d:82:31:45:9e:12:64:54:f7:21:3d:65:e9:62:60:65:6e:52:
         20:17:59:37:a0:b0:1b:3f:36:79:3a:16:a9:d7:35:41:6d:80:
         b4:86:09:a3:50:1f:88:34:6e:17:e8:90:10:81:20:a7:05:b5:
         15:13:b8:ab:ea:0c:2c:1d:8e:8d:8d:3c:57:c8:87:e0:df:68:
         6e:19:52:74:0a:78:5c:41:9e:91:92:00:4d:5c:6f:10:65:88:
         a4:51:56:43:9e:a6:21:d3:52:6f:97:c5:a9:53:c5:b9:c2:28:
         ad:79:b1:d3:c8:5f:64:81:36:a8:31:96:da:a8:a9:79:4f:ae:
         e6:96:c2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----