Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
File:                     s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json)
Hash identifier:          53psoh/lqinKx+qkc5zIv08crCWUwyyMNPFLyu2LaRU=
Subject key identifier:   2B:F3:B4:38:17:38:6C:55:35:AA:0E:36:A3:9F:A1:EF:C8:D5:47:B0
Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1
Certificate issuer:       /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
Manifest number:          91
Signing time:             Fri 31 Jan 2025 05:32:17 +0000
Manifest this update:     Fri 31 Jan 2025 05:32:17 +0000
Manifest next update:     Fri 07 Feb 2025 05:32:17 +0000
Files and hashes:         1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: MqtU2wHQ14u3L65EKkNIi8uLxkgAOSEO1RYvxOrDNsk=)
                          2: 7E15FE0C27B711EF8867AA49C4F9AE02.roa (hash: bkjGd2fWeRuAi3rbmd0l8StmCAy/JWREckf9XTM50O8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1
        Validity
            Not Before: Jan 31 05:32:17 2025 GMT
            Not After : Feb  7 05:32:17 2025 GMT
        Subject: CN=679c6061-f36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:45:35:98:24:ac:a2:b0:3f:c1:6c:f7:61:
                    7d:ce:aa:0f:9e:b7:60:93:56:67:2b:9c:59:4f:de:
                    fc:75:45:69:d3:79:34:21:47:17:96:0c:c7:9a:da:
                    6b:65:38:be:56:27:49:e1:50:3c:bf:c6:b4:c0:36:
                    b6:72:20:d8:d6:83:c8:92:c8:db:61:79:43:dc:43:
                    c6:5c:3d:c7:7f:0a:2a:2d:5d:4a:e8:f5:fe:35:b5:
                    7a:1f:dd:b0:45:f5:32:27:a3:f3:2b:ba:37:20:2c:
                    ad:34:03:61:1b:7a:07:64:62:39:97:9e:b8:bf:9d:
                    a7:ce:8a:f3:af:12:1b:ed:7b:ce:a7:77:d3:be:5a:
                    5f:d3:ff:d7:8d:db:9f:5c:66:57:ea:d8:d7:fb:fd:
                    b9:94:fc:0b:52:f3:95:03:ff:54:96:2f:80:76:a5:
                    0e:54:05:f2:48:d9:f9:5b:88:46:8d:9a:c4:05:f5:
                    bc:7e:1d:ac:31:03:05:fc:7e:25:79:f5:b1:b1:a2:
                    88:97:9e:7c:27:09:c4:94:5d:be:25:6c:05:7f:ac:
                    25:a5:fe:18:ee:1b:4d:11:e9:5d:26:e6:0f:b1:0c:
                    57:cf:ea:f5:9f:20:a0:01:c3:70:ee:d2:45:cb:c7:
                    57:11:85:d2:a2:74:a2:c9:46:7e:91:d9:60:89:53:
                    0d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:B4:38:17:38:6C:55:35:AA:0E:36:A3:9F:A1:EF:C8:D5:47:B0
            X509v3 Authority Key Identifier:
                keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:20:ed:31:92:04:09:46:63:79:0d:1c:98:16:3a:26:4a:d2:
         53:c9:05:cf:e4:61:47:28:11:6b:f0:6f:84:63:2d:06:7f:b4:
         c6:12:58:66:73:bf:93:c9:19:a2:71:96:51:69:eb:9c:6c:f8:
         88:26:0b:00:d0:1d:7f:db:2e:71:b3:5c:9a:3e:57:21:d4:3d:
         87:95:25:c6:51:40:f8:74:10:d7:90:fa:68:f1:fa:3d:46:fc:
         98:ce:67:a9:e8:cf:5c:8a:3d:de:3e:51:b0:d7:59:5e:b7:1b:
         66:6e:17:6b:05:96:40:f8:45:68:ee:12:ec:4d:aa:5c:be:12:
         a5:db:d7:55:9a:1f:b2:af:55:b9:7b:26:76:4c:e6:b6:ed:8f:
         08:e7:48:16:69:61:df:e4:5a:5f:bc:96:ee:24:23:b5:f7:87:
         9d:60:c0:31:70:30:66:a6:40:2a:49:3a:75:12:82:7f:48:6d:
         1c:5b:09:7c:82:09:84:d8:a8:2f:0e:30:c4:8e:d6:85:e7:5b:
         94:90:43:89:65:66:9b:c7:07:94:28:f9:8a:21:18:15:16:db:
         b0:25:67:59:56:59:9f:e1:94:0b:a7:b3:ac:f8:99:c6:67:2a:
         43:64:f6:cd:5e:3b:f2:d3:03:46:b7:19:7a:ce:5d:48:c2:9c:
         f7:41:68:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE
NUJFNzc2RjEwHhcNMjUwMTMxMDUzMjE3WhcNMjUwMjA3MDUzMjE3WjAYMRYwFAYD
VQQDEw02NzljNjA2MS1mMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWpFNZgkrKKwP8Fs92F9zqoPnrdgk1ZnK5xZT978dUVp03k0IUcXlgzHmtpr
ZTi+VidJ4VA8v8a0wDa2ciDY1oPIksjbYXlD3EPGXD3HfwoqLV1K6PX+NbV6H92w
RfUyJ6PzK7o3ICytNANhG3oHZGI5l564v52nzorzrxIb7XvOp3fTvlpf0//Xjduf
XGZX6tjX+/25lPwLUvOVA/9Uli+AdqUOVAXySNn5W4hGjZrEBfW8fh2sMQMF/H4l
efWxsaKIl558JwnElF2+JWwFf6wlpf4Y7htNEeldJuYPsQxXz+r1nyCgAcNw7tJF
y8dXEYXSonSiyUZ+kdlgiVMNAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvztDgX
OGxVNaoONqOfoe/I1UewMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy
NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2
a3IwWDBNU3paUmpWdm5kdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALIO0xkgQJRmN5DRyYFjomStJTyQXP5GFHKBFr8G+EYy0Gf7TGElhm
c7+TyRmicZZRaeucbPiIJgsA0B1/2y5xs1yaPlch1D2HlSXGUUD4dBDXkPpo8fo9
RvyYzmep6M9cij3ePlGw11letxtmbhdrBZZA+EVo7hLsTapcvhKl29dVmh+yr1W5
eyZ2TOa27Y8I50gWaWHf5FpfvJbuJCO194edYMAxcDBmpkAqSTp1EoJ/SG0cWwl8
ggmE2KgvDjDEjtaF51uUkEOJZWabxweUKPmKIRgVFtuwJWdZVlmf4ZQLp7Os+JnG
ZypDZPbNXjvy0wNGtxl6zl1Iwpz3QWgM
-----END CERTIFICATE-----