Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
File:                     1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json)
Hash identifier:          Md6euXq3FvBRUVQoBDiywCWFWuIV3KCQkf85Vkhf3+w=
Subject key identifier:   46:DB:99:00:22:8D:65:AF:4D:F9:24:21:18:1F:2C:B7:B5:11:5C:45
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Certificate issuer:       /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
Manifest number:          010C
Signing time:             Fri 31 Jan 2025 04:03:58 +0000
Manifest this update:     Fri 31 Jan 2025 04:03:57 +0000
Manifest next update:     Fri 07 Feb 2025 04:03:57 +0000
Files and hashes:         1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: 2rmqRVvAPqjbZSiD3uRf14Ee9nmFVPwV9ooBzjPqu0Q=)
                          2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
        Validity
            Not Before: Jan 31 04:03:57 2025 GMT
            Not After : Feb  7 04:03:57 2025 GMT
        Subject: CN=679c4bae-95d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:6f:9f:ec:3c:40:bc:6b:74:21:4e:32:cc:
                    da:a1:6d:b4:22:72:1b:dd:af:90:8f:cd:63:ec:59:
                    79:97:6b:23:6e:a4:f8:7e:f4:8a:5d:3c:50:42:d0:
                    45:52:06:ec:0f:70:34:8e:65:e6:f3:8d:a9:c9:5a:
                    19:e0:36:8b:24:c1:b9:51:5e:c4:f6:31:90:7a:bc:
                    76:a9:6b:dc:45:3a:73:27:66:42:c5:93:8b:74:a8:
                    11:7f:6b:7c:44:1d:fc:c4:25:a0:3f:b9:b0:b6:7c:
                    2c:19:0c:5d:d3:dd:eb:28:92:ec:7d:50:ff:8c:97:
                    d0:b9:45:a6:08:5a:e5:74:bb:cf:d3:85:35:15:c8:
                    e6:42:ad:18:d2:a8:fb:2f:bf:cd:e3:cf:eb:b3:57:
                    e6:56:c3:41:c5:d5:5e:83:07:92:b8:a8:ef:24:00:
                    fe:3a:d5:bb:d7:35:cb:f1:b4:a6:89:ac:68:13:11:
                    c1:89:bc:da:f8:6c:d6:17:3d:52:a4:b9:62:39:87:
                    53:f4:d7:24:4a:1e:dd:49:0e:04:88:cb:75:5c:59:
                    20:fd:01:2a:4c:e5:9f:cc:07:3b:41:38:01:cb:f6:
                    58:04:dd:f1:52:e6:5b:83:f8:8e:fa:ed:90:68:a1:
                    d0:f4:72:cd:83:62:18:62:70:08:3e:3c:e7:f5:3e:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DB:99:00:22:8D:65:AF:4D:F9:24:21:18:1F:2C:B7:B5:11:5C:45
            X509v3 Authority Key Identifier:
                keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:dc:cb:c0:1a:31:a0:85:46:ed:3c:f3:2e:d1:4f:90:82:93:
         97:e0:52:17:3b:18:e8:96:72:7a:44:59:39:0f:16:fb:45:ad:
         3a:6b:7c:8f:6b:03:1a:62:35:d4:27:1d:51:c1:10:9e:0d:d3:
         0a:a8:c2:b4:fb:85:1c:2d:81:f6:01:5c:90:6c:e0:51:eb:af:
         8e:a8:9c:0e:2f:6c:a9:90:9b:72:e3:86:5b:7d:08:e5:ad:63:
         53:e1:6a:b8:c4:34:04:4d:a4:af:df:4d:c6:7e:4a:73:70:20:
         9d:cc:b7:8f:3b:61:95:d8:de:80:89:08:65:12:97:e1:41:b1:
         54:93:b7:4d:d7:fd:f8:4c:11:83:89:6b:69:b5:75:be:38:5c:
         12:22:35:29:b3:1c:18:a9:b1:d2:62:2d:68:28:f5:12:26:ce:
         87:80:66:5e:f6:5e:a2:13:e7:74:c6:70:64:73:23:bb:94:c9:
         29:d2:66:c7:27:ad:e9:e5:2c:35:7b:c1:f5:a0:a4:03:15:cd:
         ca:f8:54:c1:c2:d9:47:55:24:8b:ac:5a:a8:ec:10:7d:1c:13:
         a9:6b:9c:d9:67:11:1d:fc:ee:17:de:9d:97:29:11:df:2c:b8:
         2f:9f:f2:ee:a1:a8:7e:22:c3:68:80:58:21:7d:95:f6:c7:ba:
         f0:76:0a:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz
NDUzQThGNTIwHhcNMjUwMTMxMDQwMzU3WhcNMjUwMjA3MDQwMzU3WjAYMRYwFAYD
VQQDEw02NzljNGJhZS05NWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA32Jvn+w8QLxrdCFOMszaoW20InIb3a+Qj81j7Fl5l2sjbqT4fvSKXTxQQtBF
UgbsD3A0jmXm842pyVoZ4DaLJMG5UV7E9jGQerx2qWvcRTpzJ2ZCxZOLdKgRf2t8
RB38xCWgP7mwtnwsGQxd093rKJLsfVD/jJfQuUWmCFrldLvP04U1FcjmQq0Y0qj7
L7/N48/rs1fmVsNBxdVegweSuKjvJAD+OtW71zXL8bSmiaxoExHBibza+GzWFz1S
pLliOYdT9NckSh7dSQ4EiMt1XFkg/QEqTOWfzAc7QTgBy/ZYBN3xUuZbg/iO+u2Q
aKHQ9HLNg2IYYnAIPjzn9T6ngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbbmQAi
jWWvTfkkIRgfLLe1EVxFMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2
OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt
c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQ3MvAGjGghUbtPPMu0U+QgpOX4FIXOxjolnJ6RFk5Dxb7Ra06a3yP
awMaYjXUJx1RwRCeDdMKqMK0+4UcLYH2AVyQbOBR66+OqJwOL2ypkJty44ZbfQjl
rWNT4Wq4xDQETaSv303GfkpzcCCdzLePO2GV2N6AiQhlEpfhQbFUk7dN1/34TBGD
iWtptXW+OFwSIjUpsxwYqbHSYi1oKPUSJs6HgGZe9l6iE+d0xnBkcyO7lMkp0mbH
J63p5Sw1e8H1oKQDFc3K+FTBwtlHVSSLrFqo7BB9HBOpa5zZZxEd/O4X3p2XKRHf
LLgvn/Luoah+IsNogFghfZX2x7rwdgqz
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:32 2025 by rpki-client