Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.mft
File:                     BefEArz0ghV3F3vIMwVVds4ZPrY.mft (raw, json)
Hash identifier:          mC1JNJUysefxwYFXFWcJRP98N38mxSISwNFZDmHR23Q=
Subject key identifier:   04:AC:E5:4A:3C:2F:08:30:B5:83:67:39:C8:1A:7A:C0:00:FE:84:1C
Authority key identifier: 05:E7:C4:02:BC:F4:82:15:77:17:7B:C8:33:05:55:76:CE:19:3E:B6
Certificate issuer:       /CN=A91B8D4F/serialNumber=05E7C402BCF4821577177BC833055576CE193EB6
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BefEArz0ghV3F3vIMwVVds4ZPrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.mft
Manifest number:          04D4
Signing time:             Mon 23 Sep 2024 04:39:23 +0000
Manifest this update:     Mon 23 Sep 2024 04:39:22 +0000
Manifest next update:     Mon 30 Sep 2024 04:39:22 +0000
Files and hashes:         1: BefEArz0ghV3F3vIMwVVds4ZPrY.crl (hash: 5nd2RArOsL0vEuxyY8540+VawR6WP888BirFJkNMygY=)
                          2: 444AF4A2EEEE11EB90326C4FC4F9AE02.roa (hash: eF0G+6ifb25UAZusAYwdTemdFxzFPekwz2YWDDec9y8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8D4F/serialNumber=05E7C402BCF4821577177BC833055576CE193EB6
        Validity
            Not Before: Sep 23 04:39:22 2024 GMT
            Not After : Sep 30 04:39:22 2024 GMT
        Subject: CN=66f0f0fa-14f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:c1:5e:0b:87:b0:2a:5a:79:1b:77:df:fe:
                    4c:38:06:0e:49:fa:86:88:4c:2b:6a:a8:55:3c:29:
                    35:d8:7f:c0:0d:24:0c:1e:e9:b3:c0:da:73:49:d4:
                    3d:0a:e7:b1:43:4a:bd:89:b3:f0:7a:63:b2:9d:f4:
                    27:f8:70:b0:31:5b:fd:6f:67:57:e9:83:a4:7e:04:
                    4f:ef:b0:20:23:70:4a:16:16:d3:76:cb:83:04:6a:
                    2c:16:a5:7c:87:3f:4d:13:98:5b:f1:a9:38:66:d5:
                    06:cc:9c:5a:dd:e8:2f:dd:68:10:3c:6e:d9:49:60:
                    ce:c4:21:92:05:51:aa:b7:14:90:21:16:22:e8:80:
                    b1:1f:6b:d4:9d:27:66:21:ac:76:0c:da:79:0a:f2:
                    ba:fe:4a:26:f5:8c:de:45:94:32:97:87:d3:d6:17:
                    44:60:01:bb:20:c4:99:d9:48:5b:ec:65:64:4a:6d:
                    2a:3f:32:c2:a1:af:51:58:e1:24:43:c2:32:04:ed:
                    85:92:8a:08:3b:78:fc:c1:4f:1f:ce:60:97:e6:30:
                    11:cb:ed:cb:9c:54:09:ef:8f:e0:9e:e4:ee:7b:ab:
                    e3:f4:e6:93:07:ca:19:6a:d1:ea:da:af:7d:f8:41:
                    5c:b6:19:5e:3d:b4:87:51:6a:3d:18:3f:05:c9:1f:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AC:E5:4A:3C:2F:08:30:B5:83:67:39:C8:1A:7A:C0:00:FE:84:1C
            X509v3 Authority Key Identifier:
                keyid:05:E7:C4:02:BC:F4:82:15:77:17:7B:C8:33:05:55:76:CE:19:3E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BefEArz0ghV3F3vIMwVVds4ZPrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b0:6e:42:d6:ed:4e:68:55:8c:74:ad:17:50:de:79:87:0f:
         a8:3c:50:dc:73:13:f1:f3:79:f5:e1:38:2a:92:f7:af:5e:36:
         98:1b:c4:0d:50:6b:7b:c0:5a:26:c7:40:2e:6f:c2:a5:7e:a1:
         c7:a0:e0:c1:95:aa:66:c0:e4:03:2f:61:d4:03:7d:68:27:3e:
         bc:7d:6a:a7:d5:d7:e0:81:17:9c:9a:37:45:7a:5b:55:8f:ca:
         0f:df:f9:2f:8f:89:74:3a:04:6c:ac:46:6c:63:16:9e:69:6a:
         e1:1a:f5:b1:5e:8b:f9:73:81:5a:44:37:92:66:31:f7:d3:b0:
         39:4f:60:1a:75:e9:33:5a:60:26:a6:e5:ce:97:a8:c0:31:d2:
         b0:3c:c6:a0:14:02:c3:cc:a1:42:95:d3:08:45:df:76:32:ed:
         70:0d:0e:b0:fd:b3:d0:3d:25:6e:27:7f:05:5b:f9:b1:0c:55:
         c0:95:c7:30:d7:e2:16:2a:9c:3d:e0:cc:0c:e0:d2:e0:63:18:
         26:89:93:97:08:8a:d5:84:3c:36:d7:d3:14:87:b6:2f:43:db:
         3b:e0:05:8c:d2:78:89:4a:5a:1e:bc:64:19:e8:98:69:5e:ba:
         db:a2:36:b7:b3:c6:38:46:dc:24:5b:b5:17:7a:4c:fd:5c:06:
         7e:3d:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----