Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft
File:                     Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft (raw, json)
Hash identifier:          I2cd5xq72MeLBPOKMBuBvVmkzg59hiPiwY8IujIpWm8=
Subject key identifier:   85:9F:07:C4:A9:CE:E3:7E:6C:61:75:DC:8F:BE:C6:D1:6B:E2:AE:B4
Authority key identifier: 56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3
Certificate issuer:       /CN=A91776E4/serialNumber=5699A6F52F90057382CDE96F76526F7FCA0193A3
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft
Manifest number:          0286
Signing time:             Fri 15 Nov 2024 01:06:42 +0000
Manifest this update:     Fri 15 Nov 2024 01:06:42 +0000
Manifest next update:     Fri 22 Nov 2024 01:06:42 +0000
Files and hashes:         1: Vpmm9S-QBXOCzelvdlJvf8oBk6M.crl (hash: onRwKUxsel0C+2V4LxjcMQx0Wipipue60abH5EfzADE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91776E4/serialNumber=5699A6F52F90057382CDE96F76526F7FCA0193A3
        Validity
            Not Before: Nov 15 01:06:42 2024 GMT
            Not After : Nov 22 01:06:42 2024 GMT
        Subject: CN=67369ea2-b5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:f4:1e:ca:a9:82:7f:55:c7:29:17:45:ef:
                    4b:39:56:e3:dd:d9:a3:8d:fb:b2:ae:d1:a2:38:fd:
                    ef:50:ab:5b:57:d1:dd:44:e7:f8:be:48:f3:b7:53:
                    af:fa:2b:f1:ec:84:44:ae:57:67:b2:78:40:77:22:
                    4d:11:54:d3:f6:94:b9:4d:99:c8:51:62:87:67:a4:
                    2e:7a:0d:66:79:ba:d3:99:f0:c5:c9:67:0c:7c:ff:
                    21:f7:b1:0e:ae:09:a5:99:6f:0d:63:bc:79:08:08:
                    8a:ba:cc:7a:e9:4e:f9:e6:ee:25:1d:2d:6e:92:f6:
                    10:b9:c8:e6:77:b0:7b:f4:ec:46:a6:bc:c8:e0:2c:
                    da:6f:6d:22:59:36:1f:5a:48:79:a2:08:55:5c:cb:
                    cf:9f:fb:13:af:c0:c7:6e:1d:99:02:b3:1a:a0:fd:
                    4b:91:80:e5:6a:c4:91:9f:21:c2:d6:a3:1f:e3:fd:
                    d3:ba:a8:41:31:f3:f1:4b:b3:b5:a7:0e:e0:10:fb:
                    e8:1c:af:89:0d:b5:13:b5:10:8f:bc:ea:f6:93:78:
                    db:95:73:c3:95:a6:a1:b8:91:08:41:c0:77:5f:99:
                    22:87:a5:33:50:bd:1f:79:85:93:ab:f3:c1:e1:2d:
                    53:3c:50:2c:ac:75:9b:f2:13:14:04:eb:24:14:b4:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9F:07:C4:A9:CE:E3:7E:6C:61:75:DC:8F:BE:C6:D1:6B:E2:AE:B4
            X509v3 Authority Key Identifier:
                keyid:56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f6:b8:b0:ca:1e:37:fd:2d:eb:ed:47:c3:e6:e4:86:d6:47:
         d7:2c:ad:25:c0:e7:3c:24:b8:8f:51:d1:49:77:6b:f2:49:5c:
         bb:03:eb:2b:f6:fb:59:41:34:97:e9:25:7a:7a:bb:5e:5c:0f:
         47:89:0c:8b:15:bb:4a:75:a0:d0:a9:5a:d2:00:71:a6:2f:2a:
         77:44:c2:b2:74:94:13:86:db:db:d5:c8:95:2d:e1:15:5c:a1:
         d5:81:02:8c:f0:5b:b8:95:60:7a:5f:ce:b0:c3:e2:0b:23:bb:
         d9:66:6b:5a:32:78:9e:53:fd:26:48:98:59:38:82:1e:b0:7e:
         df:76:b6:a3:a7:7e:f5:45:8a:f3:1d:c2:f6:84:fd:a2:91:df:
         9c:fc:01:fd:54:79:b6:fa:b0:0e:33:fc:a9:e5:92:88:e0:b7:
         ee:57:36:4f:b1:bf:7b:ab:7d:1a:24:73:52:4f:3e:31:d4:48:
         31:13:65:1b:41:31:aa:88:cd:14:ea:7a:bc:65:32:d7:3f:cf:
         c4:05:b9:e9:38:4d:cb:6d:44:9b:ee:7f:77:3c:2d:0e:cb:d7:
         50:7a:1b:8b:a9:c0:6b:a7:c1:28:08:6b:7c:13:c8:87:ac:f1:
         3e:ee:11:cc:05:aa:0e:32:83:b3:7b:33:49:91:1a:cb:18:19:
         56:e2:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----