Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
File:                     ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft (raw, json)
Hash identifier:          /+Cfa1Nr6zVWkjODsY/HgvWwQbjP54Q6p1kHAJmbELY=
Subject key identifier:   75:BB:CC:20:B1:83:44:62:52:63:39:77:09:D7:A7:25:94:AB:C5:7C
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       057A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
Manifest number:          0576
Signing time:             Thu 30 Jan 2025 23:19:16 +0000
Manifest this update:     Thu 30 Jan 2025 23:19:16 +0000
Manifest next update:     Thu 06 Feb 2025 23:19:16 +0000
Files and hashes:         1: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl (hash: jY1asRdviv/GptgLSeKE/z8uBRV4/U/Minb5EylRaEU=)
                          2: 10581DEAC75D11EBB00EBD1AC4F9AE02.roa (hash: CQryStIKzl8Fb6AQfW/9ZNw5rOCplIX4niEUR1rZPu8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
        Validity
            Not Before: Jan 30 23:19:16 2025 GMT
            Not After : Feb  6 23:19:16 2025 GMT
        Subject: CN=679c08f4-14fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:e4:54:5e:7e:7f:38:f1:24:e0:93:32:fe:
                    4e:86:3a:eb:3a:10:ad:e3:23:dd:a9:d6:1d:5a:39:
                    82:16:ad:c3:92:97:36:9e:73:ea:d7:32:6c:e8:db:
                    9a:f3:c2:a6:a9:a2:a7:37:7f:54:9a:33:0c:12:13:
                    a4:19:51:5e:65:4b:c3:2d:d3:95:08:f9:07:6d:46:
                    dc:8b:00:18:30:61:e5:3d:78:55:cc:2e:7e:6a:18:
                    67:94:e7:b9:a1:97:80:6a:8a:29:d3:40:46:d4:56:
                    2d:e1:b9:c0:6e:9a:65:c6:52:61:14:17:e7:fd:ec:
                    af:5e:0e:7a:86:8e:02:20:c6:66:34:9c:69:b5:a6:
                    a3:33:b5:99:c4:5d:8c:84:81:a2:f1:70:b2:0d:75:
                    e3:40:51:fe:11:b3:ba:05:2c:2b:56:87:b6:f3:2a:
                    bf:e3:1b:d5:24:52:43:d2:d8:84:57:19:dd:22:89:
                    ee:b9:b5:78:20:2e:70:ce:52:ee:4a:c3:a0:cc:ab:
                    e3:b5:dd:0e:1e:ff:07:0a:38:d9:1a:3d:f3:fd:e9:
                    0c:bf:c7:53:33:c0:b1:8e:c0:d9:6e:48:33:6c:c8:
                    01:17:ad:97:24:79:69:41:0c:a5:b0:42:7c:9f:df:
                    44:7e:b0:8f:bb:41:fb:7b:a6:eb:3d:67:b9:dc:ab:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:CC:20:B1:83:44:62:52:63:39:77:09:D7:A7:25:94:AB:C5:7C
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:31:10:40:7a:b3:53:ef:44:b0:56:64:08:d2:1e:1e:be:00:
         50:c9:da:83:2b:bc:e3:24:76:fa:93:ab:5c:76:38:bf:4e:0f:
         e0:87:9f:e1:b4:93:3e:a0:5d:93:d7:e6:43:1e:c4:18:b8:48:
         e7:9f:78:a0:e5:66:f2:c6:8b:c3:d1:dd:13:1b:58:a1:9b:da:
         1a:29:49:88:9d:48:19:b7:12:cd:90:aa:59:03:6b:7b:4d:38:
         61:32:3a:ed:d6:e8:fc:13:3b:16:64:b4:1f:b5:5d:bf:2c:c1:
         d8:0d:8d:4e:b2:de:6a:cb:39:32:e0:96:16:c9:63:dd:e1:3f:
         c9:b0:dd:a7:fa:fb:90:7d:84:fe:c5:ab:d9:45:bc:b5:57:86:
         1c:fc:8f:d1:36:70:73:cf:81:be:c4:65:11:f6:65:c6:26:d3:
         95:cd:4b:c1:86:70:7a:d9:c7:5e:6a:73:63:54:b8:b1:d9:e7:
         1f:57:fb:d7:27:15:5d:7f:cc:77:31:6b:1e:a2:71:86:68:eb:
         16:bb:e5:4e:57:d0:e7:ea:e4:b3:19:da:bf:24:75:43:78:69:
         72:9b:45:fd:6d:4c:c6:c9:f3:fa:55:b5:31:26:03:6b:97:84:
         33:38:d1:48:1c:3d:85:26:b9:47:92:2f:bf:19:8e:d3:c2:04:
         cb:b6:3d:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxOUQxMTAvBgNVBAUTKDY2QjlEODRGNDMzNkE4OUQ4NEQxRTAyRTgyMEE3OTY4
NkUxRTUyQzQwHhcNMjUwMTMwMjMxOTE2WhcNMjUwMjA2MjMxOTE2WjAYMRYwFAYD
VQQDEw02NzljMDhmNC0xNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1FDkVF5+fzjxJOCTMv5OhjrrOhCt4yPdqdYdWjmCFq3Dkpc2nnPq1zJs6Nua
88KmqaKnN39UmjMMEhOkGVFeZUvDLdOVCPkHbUbciwAYMGHlPXhVzC5+ahhnlOe5
oZeAaoop00BG1FYt4bnAbpplxlJhFBfn/eyvXg56ho4CIMZmNJxptaajM7WZxF2M
hIGi8XCyDXXjQFH+EbO6BSwrVoe28yq/4xvVJFJD0tiEVxndIonuubV4IC5wzlLu
SsOgzKvjtd0OHv8HCjjZGj3z/ekMv8dTM8CxjsDZbkgzbMgBF62XJHlpQQylsEJ8
n99EfrCPu0H7e6brPWe53KsmBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW7zCCx
g0RiUmM5dwnXpyWUq8V8MB8GA1UdIwQYMBaAFGa52E9DNqidhNHgLoIKeWhuHlLE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTE5RC9CODI4MDY2NEM3
NUExMUVCODFFOTlFMTlDNEY5QUUwMi9acm5ZVDBNMnFKMkUwZUF1Z2dwNWFHNGVV
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pybllUME0ycUoyRTBlQXVnZ3A1YUc0ZVVzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTE5RC9CODI4MDY2NEM3NUExMUVCODFFOTlFMTlDNEY5QUUwMi9acm5ZVDBNMnFK
MkUwZUF1Z2dwNWFHNGVVc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIMRBAerNT70SwVmQI0h4evgBQydqDK7zjJHb6k6tcdji/Tg/gh5/h
tJM+oF2T1+ZDHsQYuEjnn3ig5WbyxovD0d0TG1ihm9oaKUmInUgZtxLNkKpZA2t7
TThhMjrt1uj8EzsWZLQftV2/LMHYDY1Ost5qyzky4JYWyWPd4T/JsN2n+vuQfYT+
xavZRby1V4Yc/I/RNnBzz4G+xGUR9mXGJtOVzUvBhnB62cdeanNjVLix2ecfV/vX
JxVdf8x3MWseonGGaOsWu+VOV9Dn6uSzGdq/JHVDeGlym0X9bUzGyfP6VbUxJgNr
l4QzONFIHD2FJrlHki+/GY7TwgTLtj0B
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:58 2025 by rpki-client