Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft
File:                     zHLheXsiBNjsaeyYxBc5zIxmTJw.mft (raw, json)
Hash identifier:          5G6dRTT3IMuwzDAPUGoAHriaf9W9Fl5C6VJJfzwhFPY=
Subject key identifier:   C2:DE:E1:80:99:A8:3C:B8:BF:FB:D2:26:1A:32:E8:A0:BF:5E:49:0C
Authority key identifier: CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C
Certificate issuer:       /CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C
Certificate serial:       0A18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft
Manifest number:          0A10
Signing time:             Mon 14 Oct 2024 01:58:05 +0000
Manifest this update:     Mon 14 Oct 2024 01:58:04 +0000
Manifest next update:     Mon 21 Oct 2024 01:58:04 +0000
Files and hashes:         1: zHLheXsiBNjsaeyYxBc5zIxmTJw.crl (hash: +W5r3lYMHTrB4VCsGoM8F7CfUl72nwzJiojzxIR20+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584 (0xa18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C
        Validity
            Not Before: Oct 14 01:58:04 2024 GMT
            Not After : Oct 21 01:58:04 2024 GMT
        Subject: CN=670c7aad-fbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:8c:62:e6:c1:cc:c1:0e:8c:38:b7:95:51:
                    d0:42:ba:0e:13:3e:64:3c:9f:22:9b:b3:58:ec:8d:
                    ba:00:b0:0b:a7:15:7d:de:8e:d5:dd:99:5a:c7:22:
                    35:42:a4:2b:9f:11:c4:49:c2:ce:b4:9a:71:3c:3f:
                    9c:23:aa:14:f8:4f:1f:fc:9e:a1:fa:48:03:15:6e:
                    dd:2b:ec:b3:d9:22:12:54:5e:a4:5e:57:a9:c3:83:
                    7c:a1:f0:7e:84:df:d0:d0:57:43:29:e9:6c:ba:e7:
                    20:62:1a:e8:02:56:5f:d9:db:a1:f4:d2:a2:0e:c0:
                    55:7a:0d:78:b6:b8:fe:1c:c8:03:56:04:25:6b:4e:
                    f0:27:1b:e5:0a:b1:cd:3f:f7:d8:0b:38:a3:7b:a8:
                    14:6b:54:23:b2:d3:51:ce:33:c3:63:fa:85:32:84:
                    59:af:96:f9:6b:b6:4c:92:07:b0:17:76:cf:aa:4b:
                    09:59:8d:94:c1:19:e5:5c:20:5d:cb:6a:30:4b:80:
                    9a:f0:04:74:e8:d2:26:e3:71:17:f0:08:11:85:a9:
                    f0:86:5c:05:fc:0e:76:93:3d:a9:6a:8a:33:f4:61:
                    59:d7:36:b6:ee:19:e1:d2:e7:f6:b3:69:7c:30:6f:
                    63:ec:03:f1:c9:8b:22:5f:eb:5e:e8:06:16:2b:f4:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DE:E1:80:99:A8:3C:B8:BF:FB:D2:26:1A:32:E8:A0:BF:5E:49:0C
            X509v3 Authority Key Identifier:
                keyid:CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e9:e6:51:70:c5:b3:8a:a0:3b:21:32:b2:2b:50:77:ac:e4:
         96:c4:75:fa:31:c3:f0:0a:2e:da:0a:ca:24:9c:14:38:eb:c3:
         b1:d9:8a:f4:71:f7:aa:e6:4d:ec:8f:08:3a:8d:da:6f:9d:93:
         a1:5f:d1:c4:27:36:7f:e3:7b:97:8f:09:ef:66:76:77:32:ae:
         d1:91:8d:3a:3a:61:dc:88:69:c4:fe:d7:9e:20:e7:15:b9:a8:
         4a:ae:40:fc:a3:6c:e9:5f:73:bc:a4:7f:de:47:8e:55:d5:c2:
         3a:80:ae:27:58:df:b9:df:9f:a9:d5:40:9d:dd:0a:0e:95:6d:
         01:aa:41:5b:0e:e4:a2:c6:a9:dc:90:3b:eb:62:7d:7b:9a:e2:
         40:4b:e9:61:7d:48:9c:04:13:0c:09:84:e9:be:6b:fe:d5:2c:
         a9:3d:dc:ac:f6:ee:f7:8a:65:49:c3:29:d7:9e:0b:22:f9:7c:
         02:f7:9d:8f:01:4a:72:cf:24:57:cc:b6:1f:76:c0:78:fb:48:
         3e:2a:6a:4e:79:70:31:72:5a:5e:e7:41:c6:9c:92:64:d3:9b:
         7a:3b:80:1f:28:ad:03:6d:f5:ea:c0:01:6d:c4:a4:8d:9f:2b:
         c9:32:f5:e5:24:5a:e1:13:75:2d:8a:78:5c:be:4b:1b:63:01:
         7c:c1:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----