Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.mft
File:                     XZJXbUXSfz0VU1SZ1AzJfkKTqWg.mft (raw, json)
Hash identifier:          rkfcabdWD/IvtOkD34+vbaiDriITFuEqk/Zxw1xySww=
Subject key identifier:   5A:A9:3F:DB:3D:4F:84:08:D2:7C:A5:5F:4B:8C:0E:F9:39:60:54:68
Authority key identifier: 5D:92:57:6D:45:D2:7F:3D:15:53:54:99:D4:0C:C9:7E:42:93:A9:68
Certificate issuer:       /CN=A91B2456/serialNumber=5D92576D45D27F3D15535499D40CC97E4293A968
Certificate serial:       03F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.mft
Manifest number:          03F2
Signing time:             Mon 29 Apr 2024 02:10:59 +0000
Manifest this update:     Mon 29 Apr 2024 02:10:58 +0000
Manifest next update:     Mon 06 May 2024 02:10:58 +0000
Files and hashes:         1: XZJXbUXSfz0VU1SZ1AzJfkKTqWg.crl (hash: 9evFpTEMeIqiKT0oKJsvHTr+V/qQ4cZu3ccV3n88UJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2456/serialNumber=5D92576D45D27F3D15535499D40CC97E4293A968
        Validity
            Not Before: Apr 29 02:10:58 2024 GMT
            Not After : May  6 02:10:58 2024 GMT
        Subject: CN=662f01b3-1321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:1f:43:5c:07:1d:04:b6:68:05:cb:a2:46:
                    00:2f:71:d7:3d:f0:85:8a:b3:73:bf:80:5f:f9:0d:
                    e0:45:0e:81:4c:70:35:fe:e2:d5:a5:fd:85:58:b1:
                    86:2d:d9:d8:f1:2a:08:1b:d2:da:ae:a9:fc:fd:ec:
                    61:df:fb:ff:c3:73:93:fa:83:13:2e:32:65:ba:8c:
                    fe:ba:84:86:e2:63:6c:8d:09:3a:09:86:4b:66:27:
                    bf:bf:67:5d:2d:d9:df:bc:fe:88:60:56:a2:57:9d:
                    25:9d:6e:ad:e8:5c:cd:36:65:e8:35:e5:03:72:55:
                    8a:ee:30:ea:13:f8:bc:ef:e0:f0:68:18:48:d3:f9:
                    38:02:f7:49:f9:22:fe:d2:6a:22:d3:f1:b1:3f:cb:
                    08:16:c0:9b:a6:4a:39:94:ca:84:b5:b7:7d:53:fc:
                    9f:34:e4:be:4f:f9:86:59:82:e9:dd:f2:6e:06:40:
                    cc:bf:fe:cf:ed:e8:82:f1:19:56:30:24:e3:cb:f7:
                    9a:c7:2b:0f:54:70:00:0e:25:da:50:90:8a:07:94:
                    c7:15:8c:54:a8:e2:9e:89:09:3e:c4:a6:35:ac:cb:
                    2a:67:a9:c4:b1:bd:aa:a2:5f:27:ec:a4:eb:c9:f3:
                    f7:40:0b:29:f8:49:0e:65:f8:1a:1c:a2:9a:b2:56:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:3F:DB:3D:4F:84:08:D2:7C:A5:5F:4B:8C:0E:F9:39:60:54:68
            X509v3 Authority Key Identifier:
                keyid:5D:92:57:6D:45:D2:7F:3D:15:53:54:99:D4:0C:C9:7E:42:93:A9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7d:ce:94:23:da:22:a3:90:9b:39:ad:5e:2b:26:f7:b6:d8:
         a9:ab:ad:b0:39:c4:10:a4:a6:b0:0c:2a:6e:a9:cf:f4:1b:11:
         85:3a:e4:89:dc:1c:73:b4:07:68:41:de:32:65:1e:3f:cf:e9:
         38:d8:0a:89:b2:2e:10:0e:23:ca:4e:86:97:43:94:95:3e:45:
         28:96:f3:62:ec:9b:a5:08:68:89:99:08:e1:01:68:f1:b7:37:
         35:31:b5:1c:d9:95:0a:e4:2b:15:53:35:e0:a3:8d:8c:41:af:
         3e:3f:1f:42:75:32:cf:87:52:e2:a2:b8:04:fd:b7:60:a4:2b:
         d4:f5:cc:1d:7d:53:0c:65:00:e2:60:0d:64:ee:fb:e1:c3:25:
         cd:f0:b2:0a:71:6b:e2:8f:81:a2:c4:f1:f3:37:6b:30:38:cd:
         60:90:89:66:ac:14:29:ef:a1:f9:64:c8:d1:cb:49:08:f7:6b:
         e8:8a:7e:c2:82:aa:d6:a8:8c:d8:95:2e:d4:cb:d7:08:4e:82:
         6d:c4:bb:00:fc:87:37:40:0a:dd:b8:6f:17:7b:81:c9:4a:77:
         89:79:7b:4e:67:55:f9:fa:8f:0b:36:c8:f8:d3:fb:4c:dd:8e:
         3a:7a:00:45:b8:58:4b:76:91:45:ee:1f:72:1e:59:af:b1:8b:
         80:08:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----