Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/_UjB9wiqo66vdMV3Lu8jiT6wSas.mft
File:                     _UjB9wiqo66vdMV3Lu8jiT6wSas.mft (raw, json)
Hash identifier:          6yujD4WijlZAXNcbajH3SlhhPx7a3tRS1nPbMlyo2iY=
Subject key identifier:   D9:74:9F:B0:1C:71:DC:15:6F:33:99:B1:FC:C0:5B:CF:F7:60:10:00
Authority key identifier: FD:48:C1:F7:08:AA:A3:AE:AF:74:C5:77:2E:EF:23:89:3E:B0:49:AB
Certificate issuer:       /CN=A91D8AD4/serialNumber=FD48C1F708AAA3AEAF74C5772EEF23893EB049AB
Certificate serial:       0373
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UjB9wiqo66vdMV3Lu8jiT6wSas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/_UjB9wiqo66vdMV3Lu8jiT6wSas.mft
Manifest number:          0370
Signing time:             Thu 28 Mar 2024 09:36:01 +0000
Manifest this update:     Thu 28 Mar 2024 09:36:00 +0000
Manifest next update:     Thu 04 Apr 2024 09:36:00 +0000
Files and hashes:         1: _UjB9wiqo66vdMV3Lu8jiT6wSas.crl (hash: wNc8AVm1jqxS4MFPw042I3G9VSs1Q2h7ynnV3Z89vGo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8AD4/serialNumber=FD48C1F708AAA3AEAF74C5772EEF23893EB049AB
        Validity
            Not Before: Mar 28 09:36:00 2024 GMT
            Not After : Apr  4 09:36:00 2024 GMT
        Subject: CN=66053a01-4df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:d6:d3:bc:db:37:ad:f6:05:41:2e:8d:e5:
                    c7:89:c3:f3:9c:f1:38:e0:dd:6f:a9:bd:a4:6d:56:
                    56:86:10:b5:d6:d0:f5:79:bc:23:f5:55:51:10:c7:
                    69:ca:3a:17:14:b1:a0:7a:33:29:ba:2e:67:8f:53:
                    60:b7:50:51:cb:83:75:62:35:8e:2f:2f:f9:bc:12:
                    9a:6e:56:18:71:d8:de:f1:30:01:a6:53:12:8b:49:
                    08:8f:49:0f:36:9b:ce:5f:39:45:2f:8e:62:9c:6c:
                    28:3c:25:8d:c9:fc:6b:45:c6:b0:de:10:79:62:b9:
                    17:94:3a:b4:1e:f9:4b:ce:51:52:1f:17:cc:40:54:
                    4a:60:f9:6e:38:6c:0a:5e:0c:bc:08:d8:3f:04:5f:
                    43:46:2f:f4:df:80:d1:88:e6:5d:92:51:13:56:ea:
                    2d:a7:86:63:57:35:02:4f:7a:a1:6b:78:7b:e3:d1:
                    a8:00:75:4f:ac:a3:11:43:42:33:0e:a0:5e:ea:96:
                    e9:72:de:0f:74:6c:5c:f6:04:36:d8:5d:f5:d1:2e:
                    3a:f3:0d:86:19:0a:9c:a5:78:c3:5c:5a:8a:c6:1e:
                    fa:f4:e5:69:19:b1:0b:d3:40:b3:58:de:19:f4:68:
                    9e:ab:54:45:34:45:f9:29:dd:4e:9b:b2:0b:a5:6e:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:74:9F:B0:1C:71:DC:15:6F:33:99:B1:FC:C0:5B:CF:F7:60:10:00
            X509v3 Authority Key Identifier:
                keyid:FD:48:C1:F7:08:AA:A3:AE:AF:74:C5:77:2E:EF:23:89:3E:B0:49:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/_UjB9wiqo66vdMV3Lu8jiT6wSas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UjB9wiqo66vdMV3Lu8jiT6wSas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8AD4/B29910BA568611EC9C8EF651C4F9AE02/_UjB9wiqo66vdMV3Lu8jiT6wSas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:a6:b2:ca:2e:49:c2:a6:35:89:c7:cb:df:6d:93:6f:6a:
         91:0a:e2:04:ed:a4:1c:40:35:21:85:17:82:be:f3:bb:cf:f4:
         a7:bc:e5:08:8c:71:f2:5c:37:7c:4f:e6:24:d9:18:04:a6:13:
         ab:f7:88:85:11:33:45:94:eb:7b:93:da:2a:68:03:11:e3:80:
         aa:dc:5b:22:24:a1:0e:12:73:27:71:e1:5b:8f:b2:e8:0e:f6:
         d8:57:64:fd:89:42:b7:0a:af:f0:cf:64:65:80:67:20:81:4f:
         e0:db:d9:8e:dd:45:85:d2:62:ac:1c:43:8f:9a:92:7f:5a:36:
         3a:85:0f:f7:e1:8c:e5:83:0c:83:35:f1:8f:13:42:b4:38:64:
         ef:6b:9b:a8:ed:7f:6a:fa:dc:95:60:4e:60:e7:70:9f:4f:2d:
         35:77:6f:a5:7c:58:90:36:76:04:23:e7:f9:7b:04:f0:96:08:
         39:3b:ca:4b:0b:82:77:23:5a:a9:e7:c3:c7:77:f7:1d:a0:f8:
         14:b0:1f:ca:e1:03:91:fa:81:86:05:9c:6d:0e:1b:6a:45:3f:
         30:90:52:cc:0d:f0:c3:66:e0:d2:5c:c4:0b:42:97:9d:f0:3c:
         76:2e:2e:b4:7b:cf:23:75:31:90:e9:6e:e7:b3:f4:13:5d:26:
         73:02:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----