Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          R14Q2l3Zz93wt6QbVRe5SVGZahoyRTrLpnOy8fbA0mo=
Subject key identifier:   41:70:1D:F3:DC:6F:70:C9:43:DC:7C:11:14:15:6E:60:DE:AD:9F:35
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       587565DF547310AB717DB90CAD70A41525C0FE68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          02F4
Signing time:             Tue 21 Jan 2025 00:10:16 +0000
Manifest this update:     Tue 21 Jan 2025 00:05:16 +0000
Manifest next update:     Wed 22 Jan 2025 03:38:16 +0000
Files and hashes:         1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: IuJmEVUfqCPytnG8AEOkj/ZoGEMJgsuh1bHlpcX48s4=)
                          2: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c=)
                          3: 4B1987D5160068092602529871C93EA320045A75.crl (hash: ZDWt7vKuMt5CqmagRsTnqinB0SJpmpWAsbDcXQh1R/8=)
                          4: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: SbkxL+7COZ6Tytm7k2uPgmc/+iWRhYRcOoIgx0LtkYU=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:75:65:df:54:73:10:ab:71:7d:b9:0c:ad:70:a4:15:25:c0:fe:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000
        Validity
            Not Before: Jan 21 00:05:16 2025 GMT
            Not After : Jan 22 03:38:16 2025 GMT
        Subject: CN=41701DF3DC6F70C943DC7C1114156E60DEAD9F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:94:4c:37:2b:fe:7a:08:f6:eb:87:8d:bf:
                    8c:d8:07:33:1c:08:5f:54:7c:bb:24:b5:ef:08:c4:
                    95:6b:cd:1a:86:56:85:6d:7c:22:a5:73:5a:d5:cf:
                    c3:e2:34:ca:70:99:e1:fb:bf:4f:46:72:0c:a4:7c:
                    e2:68:88:e2:b6:e8:f3:58:27:dd:f1:a2:d3:5f:b9:
                    f8:96:42:f5:52:e2:b9:24:88:3f:f0:36:71:c3:3f:
                    d3:27:de:20:06:9a:f9:43:ad:b7:8f:e6:e1:9e:d0:
                    9e:d2:02:a2:ec:60:9d:f9:52:21:c1:60:bf:68:1f:
                    d3:9c:e9:91:8f:5e:57:ba:1a:a4:fc:2d:2b:fa:a8:
                    fb:c3:51:e0:cd:79:01:94:12:d1:9c:fa:e6:2f:b4:
                    bb:03:ac:85:91:3a:16:dc:70:29:8f:1b:b3:7d:ba:
                    0c:7f:6f:ef:b5:01:e3:fa:c0:eb:e8:1a:65:d2:a8:
                    8f:a1:5b:08:75:20:b5:5b:6e:0d:80:6d:fc:64:b3:
                    b9:e3:9a:b1:ae:e1:42:ca:5a:ed:a0:5f:c6:fa:1d:
                    69:57:0f:f0:f1:c6:23:2f:81:d0:f2:14:66:16:ca:
                    90:a9:c7:8b:27:af:67:a6:09:6e:56:4c:69:6b:3e:
                    9e:2b:e1:91:a2:d9:c9:2c:77:db:74:21:1c:3f:29:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:70:1D:F3:DC:6F:70:C9:43:DC:7C:11:14:15:6E:60:DE:AD:9F:35
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:86:3f:50:0d:fe:4f:9e:2d:4a:99:47:fd:2c:3b:23:be:
         3e:fc:e3:fc:95:a1:ce:6d:7f:64:3e:3b:30:a0:6b:c0:c4:a5:
         8c:2b:50:d7:0c:3a:7f:bb:38:5f:47:0b:1b:a8:52:6c:54:80:
         61:09:a1:6f:f2:dd:e3:73:9d:f8:3f:2f:5d:95:c6:fa:b7:00:
         f6:e0:59:c4:0f:71:f8:1f:0e:37:e0:92:90:66:83:8c:75:a9:
         1d:31:48:07:81:b0:32:07:d2:44:a7:1f:e6:5f:b7:be:84:29:
         38:d8:26:4e:dd:c1:7c:92:84:b5:21:2c:37:06:07:42:8a:e2:
         49:b8:0c:60:4a:cc:3c:1f:12:f1:f7:6f:c5:5f:14:19:bb:43:
         ef:64:0e:ec:7d:87:71:48:49:2e:71:9d:df:8b:95:f1:3a:fe:
         25:8b:ca:5b:91:a4:25:48:6d:c6:e4:c3:26:d8:1d:fc:72:b2:
         f1:db:fc:89:71:47:32:32:e2:c9:75:5a:98:bf:64:5b:62:2e:
         b6:e8:bf:23:84:44:34:cc:a9:d6:52:b7:fc:99:98:87:39:b3:
         5a:2b:9a:3a:97:5e:dd:0a:94:28:f5:31:df:0e:9c:6b:0e:9a:
         7c:86:6f:72:e9:a3:dc:3b:1f:5b:9a:11:b2:a9:07:ab:88:a6:
         61:71:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----