Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC0D1/F22BAB1CA75A11E9A2A3B64EC4F9AE02/ZFakxEMdbqTsPNaM9_qMpzejUu8.mft
File:                     ZFakxEMdbqTsPNaM9_qMpzejUu8.mft (raw, json)
Hash identifier:          wGVuyyGgKqrSEt9s4pMzyRmtKWfovyoFHzH2BrY0Crs=
Subject key identifier:   20:AB:0E:5B:0F:0C:4E:0E:7D:1E:37:0D:B7:1A:DA:0E:E6:DF:5F:B9
Authority key identifier: 64:56:A4:C4:43:1D:6E:A4:EC:3C:D6:8C:F7:FA:8C:A7:37:A3:52:EF
Certificate issuer:       /CN=A91AC0D1/serialNumber=6456A4C4431D6EA4EC3CD68CF7FA8CA737A352EF
Certificate serial:       0CFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZFakxEMdbqTsPNaM9_qMpzejUu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC0D1/F22BAB1CA75A11E9A2A3B64EC4F9AE02/ZFakxEMdbqTsPNaM9_qMpzejUu8.mft
Manifest number:          0CFD
Signing time:             Fri 24 Nov 2023 18:29:29 +0000
Manifest this update:     Fri 24 Nov 2023 18:29:28 +0000
Manifest next update:     Fri 01 Dec 2023 18:29:28 +0000
Files and hashes:         1: ZFakxEMdbqTsPNaM9_qMpzejUu8.crl (hash: 1kMFRoLMuVnD0pI74P6tUywqFVFCZjGfJRbeCjZHNbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3325 (0xcfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC0D1/serialNumber=6456A4C4431D6EA4EC3CD68CF7FA8CA737A352EF
        Validity
            Not Before: Nov 24 18:29:28 2023 GMT
            Not After : Dec  1 18:29:28 2023 GMT
        Subject: CN=6560eb88-6bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:4b:f9:07:70:b0:4b:89:6d:5d:2f:fe:18:
                    ad:5c:59:ba:96:f7:53:68:79:72:54:11:5e:a0:90:
                    85:20:b5:13:47:f5:d1:1a:f3:2f:6b:b3:d6:56:b7:
                    7c:ad:a7:ea:96:95:7c:96:b7:a8:3b:1e:5c:e4:70:
                    f3:52:64:ac:a5:1a:ec:32:fe:9c:c2:82:03:ce:fb:
                    e1:07:bf:1f:f6:19:a7:fb:cd:74:2c:6b:6f:33:7f:
                    00:57:06:2f:51:2a:b7:19:71:e5:7c:03:db:e5:15:
                    ef:51:ff:80:7e:65:0b:4a:8f:24:79:d2:db:4c:2a:
                    c4:59:ca:c8:8f:66:cf:0d:04:eb:70:77:12:2a:0d:
                    06:08:23:34:0a:d4:d1:6b:ff:7e:24:e2:6b:bb:78:
                    54:b2:b4:6f:48:d1:2d:b6:ef:73:a3:ea:41:0b:3a:
                    62:89:c8:66:a1:da:e9:c2:19:53:d7:56:57:6e:25:
                    85:b3:83:43:7e:f8:29:45:a3:6b:0b:66:52:49:84:
                    aa:13:b8:91:e3:da:e3:a4:e0:b6:a6:5f:ff:b2:16:
                    f9:da:3e:90:32:91:04:c6:66:27:16:e3:7d:d6:97:
                    f1:6e:2f:35:e0:c9:75:a9:5c:a2:eb:0e:a8:99:a0:
                    1f:c3:50:83:e9:38:3e:14:dd:09:87:fc:57:0a:d6:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AB:0E:5B:0F:0C:4E:0E:7D:1E:37:0D:B7:1A:DA:0E:E6:DF:5F:B9
            X509v3 Authority Key Identifier:
                keyid:64:56:A4:C4:43:1D:6E:A4:EC:3C:D6:8C:F7:FA:8C:A7:37:A3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/F22BAB1CA75A11E9A2A3B64EC4F9AE02/ZFakxEMdbqTsPNaM9_qMpzejUu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZFakxEMdbqTsPNaM9_qMpzejUu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/F22BAB1CA75A11E9A2A3B64EC4F9AE02/ZFakxEMdbqTsPNaM9_qMpzejUu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:b2:1c:96:b4:95:b6:f4:99:8c:a7:a3:0e:b1:47:4a:32:
         41:f8:a2:45:33:6c:a2:35:03:38:c0:01:74:fd:53:83:ac:89:
         9d:d9:85:3e:27:bc:68:ff:7a:5a:95:0f:f8:0d:c8:6e:a0:e2:
         43:be:da:82:28:dd:09:d5:2a:e6:87:51:f7:32:a7:fd:91:05:
         a2:b4:45:c3:6a:36:e9:8e:14:75:c9:19:4e:6b:41:98:a7:ae:
         ba:ba:4f:3e:cd:b2:d9:24:f0:27:54:41:bc:27:12:80:67:49:
         ab:bc:f2:f4:ac:e8:63:b9:46:69:95:1e:53:35:aa:17:a9:e6:
         06:0e:5f:20:3c:6d:94:bc:fd:36:42:07:99:c9:dc:01:1f:ad:
         dc:7b:80:92:98:e3:e1:04:73:28:10:ee:1d:b8:79:c5:5e:c1:
         0e:27:9b:d1:87:71:07:80:11:63:7d:9c:d5:3d:6a:23:bc:ca:
         35:af:47:26:de:07:e6:c8:bb:82:df:18:f0:e5:b5:ae:4d:10:
         e7:48:20:0b:41:08:7f:39:43:f2:29:83:33:0c:a6:5b:24:5e:
         1b:35:51:49:36:40:a1:6f:59:ab:7c:5a:c4:27:08:3e:c7:b2:
         83:a2:ce:7d:78:05:3a:9b:7e:59:96:27:85:4c:45:af:52:ab:
         27:36:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----