Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/vHqQXqdjznAvwm3A_C-4JUK8EwA.mft
File:                     vHqQXqdjznAvwm3A_C-4JUK8EwA.mft (raw, json)
Hash identifier:          bhnNOyIWnVezAWeh63ebv9Ypm41QZbgmf65ZNq9NTx4=
Subject key identifier:   35:EC:8A:01:1A:E5:B8:7B:C8:5B:89:BF:0B:14:FF:51:41:10:A0:B8
Authority key identifier: BC:7A:90:5E:A7:63:CE:70:2F:C2:6D:C0:FC:2F:B8:25:42:BC:13:00
Certificate issuer:       /CN=A91A129B/serialNumber=BC7A905EA763CE702FC26DC0FC2FB82542BC1300
Certificate serial:       1E41
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vHqQXqdjznAvwm3A_C-4JUK8EwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/vHqQXqdjznAvwm3A_C-4JUK8EwA.mft
Manifest number:          1E18
Signing time:             Wed 28 Dec 2022 16:41:08 +0000
Manifest this update:     Wed 28 Dec 2022 16:41:08 +0000
Manifest next update:     Wed 04 Jan 2023 16:41:08 +0000
Files and hashes:         1: vHqQXqdjznAvwm3A_C-4JUK8EwA.crl (hash: hmgNITgcwAK0547ueMq6hGSiBe9TzLxmIEWh8IWMrCM=)
                          2: DF74E188561B11E79A807120C4F9AE02.roa (hash: fjXz2CEIv3z1yRAa2GZeCG5vc5+Ipvw2khxPtj/2h/g=)
                          3: 5D643D22561D11E7B003DF26C4F9AE02.roa (hash: WK6JgszWlQZS7djPJEepY1zjU+haZQHQqPiLwF6Fxp0=)
                          4: 6F9CFBE4C15B11EAB76C323DC4F9AE02.roa (hash: zwIVl+uIp2s6nmPMFENlbTZco2u/RgdY1qvaqZyLa2s=)
                          5: C0FA097C886111ECA34BF81EC4F9AE02.roa (hash: V/X2X07D9r7iSNpWWjAB9RYsMNTY9a0KccbVNkG578U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7745 (0x1e41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A129B/serialNumber=BC7A905EA763CE702FC26DC0FC2FB82542BC1300
        Validity
            Not Before: Dec 28 16:41:08 2022 GMT
            Not After : Jan  4 16:41:08 2023 GMT
        Subject: CN=63ac71a4-8b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:a4:52:94:63:e1:d2:97:1f:9e:0d:ca:43:
                    e8:9f:76:88:32:af:17:f0:96:30:be:dd:10:a8:e5:
                    a7:3a:ab:84:f5:6b:ae:76:fc:68:60:5b:c3:ab:8f:
                    cd:48:f4:a4:a3:fc:43:2a:8e:f8:0a:29:14:01:12:
                    b9:ec:ca:3a:28:d6:e9:dd:a6:bd:c7:20:87:c8:f9:
                    0f:31:54:32:80:27:41:5d:06:9e:18:10:7e:5d:81:
                    fc:15:41:73:38:f3:71:8e:e1:eb:62:7b:df:26:da:
                    ca:eb:d9:f9:76:d8:eb:e3:2e:39:97:52:45:7a:0e:
                    c3:fa:25:75:ac:7b:38:2c:b8:46:e4:90:17:21:cf:
                    58:ea:94:4d:fe:3b:34:27:30:fd:4d:6c:ee:3c:9f:
                    91:e4:ec:d2:c7:b2:16:1e:b0:ae:ff:dd:94:72:43:
                    51:cd:f9:e3:67:fb:80:c6:a4:f8:1d:c0:da:ca:86:
                    f7:e1:8d:4b:17:5d:07:48:98:52:27:62:63:29:61:
                    13:66:61:e9:ef:81:42:33:29:56:14:ef:4f:8f:eb:
                    64:5c:2e:42:cd:39:0a:a4:3f:12:a7:e5:32:3b:3d:
                    17:82:2a:ee:f1:ce:ae:1c:6d:ce:ca:d4:72:7d:07:
                    ee:8e:19:15:59:58:86:4f:d3:5f:78:b9:e9:13:fa:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EC:8A:01:1A:E5:B8:7B:C8:5B:89:BF:0B:14:FF:51:41:10:A0:B8
            X509v3 Authority Key Identifier:
                keyid:BC:7A:90:5E:A7:63:CE:70:2F:C2:6D:C0:FC:2F:B8:25:42:BC:13:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/vHqQXqdjznAvwm3A_C-4JUK8EwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vHqQXqdjznAvwm3A_C-4JUK8EwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/vHqQXqdjznAvwm3A_C-4JUK8EwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ac:46:2b:61:f3:5a:ac:05:d4:bc:75:41:dd:ba:de:fc:8e:
         fc:7b:6c:41:16:e4:27:7f:a4:f6:5f:4a:03:9d:97:34:26:42:
         a0:f8:76:b4:40:6c:02:94:24:e0:a3:3a:27:6e:48:c8:92:76:
         c6:ea:dc:80:f0:8d:f3:31:fd:49:16:dd:b3:f6:a5:45:31:05:
         ce:82:4f:a0:44:a5:d9:6d:73:c7:07:71:48:4c:be:bf:5a:da:
         51:37:f5:92:47:27:17:25:f2:8e:3c:73:22:ce:31:71:60:ae:
         4a:da:6f:15:b2:e3:75:96:b4:04:61:04:9e:ac:4a:2f:75:d7:
         03:bd:27:a5:21:03:03:68:68:d8:14:27:f2:05:26:08:35:07:
         d0:06:4d:11:89:f4:97:39:4f:fd:25:7a:a6:3e:ef:89:9f:d7:
         2d:a6:ff:79:5f:ba:7d:e2:bf:c4:47:0a:93:a6:2b:a0:1d:56:
         5e:4a:04:9b:cf:48:f5:04:87:5c:94:a8:8f:11:ad:e0:1f:84:
         33:8d:18:d3:74:28:d6:e1:d0:a0:4f:8b:61:3f:12:07:da:f0:
         86:65:36:cf:e6:22:22:2b:a1:0f:4f:20:92:4e:ce:8d:02:e6:
         9c:70:05:fa:42:3b:3d:08:45:b8:14:4a:67:d9:cb:ac:69:8b:
         a3:28:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----