Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917473D/594D95DC9EDA11E99674B877C4F9AE02/v8AQ5HxxTyYSoBXyggzeSDB_vNg.mft
File:                     v8AQ5HxxTyYSoBXyggzeSDB_vNg.mft (raw, json)
Hash identifier:          d/FiWuvYAN07Xemez5jDaw0nTmuN//N3qmyezUaED60=
Subject key identifier:   56:28:1A:7E:73:36:1A:D1:BA:C6:B8:E4:49:4F:5A:43:F8:92:54:CC
Authority key identifier: BF:C0:10:E4:7C:71:4F:26:12:A0:15:F2:82:0C:DE:48:30:7F:BC:D8
Certificate issuer:       /CN=A917473D/serialNumber=BFC010E47C714F2612A015F2820CDE48307FBCD8
Certificate serial:       0D08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v8AQ5HxxTyYSoBXyggzeSDB_vNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917473D/594D95DC9EDA11E99674B877C4F9AE02/v8AQ5HxxTyYSoBXyggzeSDB_vNg.mft
Manifest number:          0D01
Signing time:             Fri 01 Sep 2023 01:03:45 +0000
Manifest this update:     Fri 01 Sep 2023 01:03:45 +0000
Manifest next update:     Fri 08 Sep 2023 01:03:45 +0000
Files and hashes:         1: v8AQ5HxxTyYSoBXyggzeSDB_vNg.crl (hash: 1tFMlMFj5bfeRC8BT8KnfjcWGHJ5B6aQNz0+nZgbtRk=)
                          2: 5743707C7AF711EB8BE37B3EC4F9AE02.roa (hash: M0ulkzqYKboD3zhFfOXcNR5bKRe+ao6Xj6dANuPxu2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3336 (0xd08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917473D/serialNumber=BFC010E47C714F2612A015F2820CDE48307FBCD8
        Validity
            Not Before: Sep  1 01:03:45 2023 GMT
            Not After : Sep  8 01:03:45 2023 GMT
        Subject: CN=64f13871-3cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:57:6b:2a:16:01:5f:56:48:78:f5:93:18:
                    71:e6:10:41:80:07:d3:3b:11:10:f1:3f:bb:4c:70:
                    a4:3f:a2:2c:b4:38:7b:d8:04:2a:73:35:8f:59:3b:
                    71:ab:06:1e:9b:3a:d7:ef:2d:12:b0:05:72:73:4b:
                    f7:1e:98:74:9f:a2:04:90:d6:5e:ef:b9:b8:a5:e6:
                    6e:bc:6a:61:ec:b2:ac:78:89:d2:32:cc:50:72:84:
                    1e:b7:44:a6:af:da:dd:64:09:00:9e:91:bf:29:dc:
                    d7:35:f1:52:68:57:5a:1c:61:26:95:4b:67:8e:87:
                    bd:e1:c2:be:cc:aa:e7:94:4b:d1:70:5c:05:7d:ea:
                    73:7a:09:7b:f6:66:2f:4a:83:8b:10:6b:8e:30:4a:
                    fc:11:b7:c5:68:be:e4:2f:94:e8:71:5e:80:3f:85:
                    72:27:46:a2:d4:12:6d:b9:7b:ce:c6:56:66:49:ec:
                    02:17:60:4a:41:b7:d8:62:8e:9e:7f:24:7c:c2:87:
                    fc:55:af:a7:b9:bd:04:51:8b:6a:a4:ab:35:85:a0:
                    b3:d6:83:0d:98:c0:06:47:9a:a4:53:80:d3:80:31:
                    31:fe:12:f1:f1:0d:0d:e7:f3:f2:69:95:c6:73:8a:
                    90:3b:47:c6:a0:6c:d4:1d:b8:64:a4:88:e6:82:6c:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:1A:7E:73:36:1A:D1:BA:C6:B8:E4:49:4F:5A:43:F8:92:54:CC
            X509v3 Authority Key Identifier:
                keyid:BF:C0:10:E4:7C:71:4F:26:12:A0:15:F2:82:0C:DE:48:30:7F:BC:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917473D/594D95DC9EDA11E99674B877C4F9AE02/v8AQ5HxxTyYSoBXyggzeSDB_vNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v8AQ5HxxTyYSoBXyggzeSDB_vNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917473D/594D95DC9EDA11E99674B877C4F9AE02/v8AQ5HxxTyYSoBXyggzeSDB_vNg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:29:f1:62:fa:3c:1e:8c:a2:48:bd:7b:10:56:f3:7d:4f:8c:
         11:51:0b:aa:6f:28:1d:7b:3a:39:a4:f1:dd:29:6d:22:f3:9e:
         30:d4:85:14:45:99:ce:d3:ba:b4:82:74:35:e8:0b:1e:65:be:
         e6:c6:65:fc:88:28:de:aa:07:09:16:ae:c7:43:92:33:d0:8f:
         3c:df:fc:b2:ba:8a:a0:54:65:f0:cb:83:84:26:41:d1:85:94:
         de:fe:90:de:9c:08:d6:f7:fb:a1:41:9a:05:54:5f:56:6d:38:
         e7:f5:be:c1:99:3a:a1:96:12:29:6d:31:a9:82:89:a5:09:c9:
         de:ae:83:a8:1f:f9:09:46:9f:eb:e8:10:2d:a7:8c:87:64:51:
         f9:b3:8b:05:14:b4:c5:fb:9e:d2:c7:51:19:74:7d:f1:7d:d8:
         69:b9:df:2d:89:84:6b:99:60:b7:19:a9:b7:3a:69:18:1f:c4:
         3f:34:b2:33:b5:9a:84:a1:20:20:dc:7d:d8:f0:6e:16:45:3e:
         9a:63:0d:e9:cc:70:06:88:50:7c:c3:67:4a:c9:03:16:a1:ba:
         7a:64:54:d9:06:53:3d:5b:2c:1a:73:f5:0f:b2:06:83:e1:0e:
         ea:f4:65:85:a8:cc:db:40:a5:40:08:fd:ea:41:e6:f8:87:97:
         a3:6e:ed:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 17:28:21 2023 by rpki-client on console-fra.rpki-client.org