Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
File:                     D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json)
Hash identifier:          L3cvrrpB5YIVBBH5a9hZG1YRh8E0zJWV4X5IhKCGFvI=
Subject key identifier:   5C:73:2F:6B:EF:9A:2B:91:A9:E1:46:D0:06:5E:75:5D:77:E4:E6:07
Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40
Certificate issuer:       /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840
Certificate serial:       346C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
Manifest number:          345C
Signing time:             Fri 31 Jan 2025 15:09:45 +0000
Manifest this update:     Fri 31 Jan 2025 15:09:45 +0000
Manifest next update:     Fri 07 Feb 2025 15:09:45 +0000
Files and hashes:         1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: dSKvrKpfC7gpjacrkwrY2qyV2K6o4I5QCLpDu/ZfoAI=)
                          2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: i+oLVOiTvF13PBUoOa9UfIxFEQhcYfTJRD1Exsj8GIk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13420 (0x346c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840
        Validity
            Not Before: Jan 31 15:09:45 2025 GMT
            Not After : Feb  7 15:09:45 2025 GMT
        Subject: CN=679ce7b9-f512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:3b:4e:b5:8d:ed:b1:3e:4d:20:25:1d:7d:
                    c4:24:55:73:fb:33:9c:3e:71:28:29:12:1e:2b:4f:
                    3a:39:dd:04:cb:24:b8:8d:52:52:9a:b0:7b:d5:e4:
                    7f:26:7f:a6:26:07:dc:ff:66:75:74:bb:e1:59:b5:
                    b6:1e:60:54:ba:fe:19:a2:bf:c9:64:6c:f0:82:cf:
                    d5:51:0c:d3:da:95:0b:49:7e:65:91:12:6d:28:96:
                    5b:c2:da:34:0c:c8:c5:bc:11:15:07:a1:4a:8b:79:
                    0a:a4:9d:a5:f0:f3:fc:f5:39:16:60:90:41:c5:46:
                    af:97:39:31:5d:11:09:f0:ab:e1:8a:e4:89:86:6b:
                    71:f9:46:de:32:c3:a8:ef:ad:2d:f0:aa:4b:57:cc:
                    3f:fd:20:c8:07:3f:5a:ee:ca:61:01:a6:3b:da:d1:
                    36:39:79:22:cd:b6:14:c3:ab:aa:7f:db:a2:2b:e0:
                    23:b7:95:5c:16:f3:66:ad:30:33:4f:5b:93:26:8b:
                    88:00:e1:7f:90:48:07:19:75:b0:9e:45:af:17:bb:
                    a7:02:b4:4e:d7:db:0b:63:6d:f6:9d:cd:4b:01:b1:
                    0b:df:b0:68:ed:94:2d:9b:51:5a:c7:40:9c:68:5d:
                    74:f9:3c:28:ea:e1:66:8b:81:97:8e:bf:fa:43:d5:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:73:2F:6B:EF:9A:2B:91:A9:E1:46:D0:06:5E:75:5D:77:E4:E6:07
            X509v3 Authority Key Identifier:
                keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:db:2c:1d:58:d8:53:2f:28:ec:fb:27:ba:86:9c:b1:ee:b8:
         c9:ac:d8:9c:49:7f:12:a0:35:ec:fa:c8:54:b4:35:29:9a:e2:
         64:4e:5f:d2:d6:35:54:d4:7e:a0:9d:ca:f9:6a:71:73:dd:b6:
         ff:6c:8e:41:b2:e4:ce:ff:00:ad:45:83:97:ec:4d:dd:c4:22:
         3d:c5:74:79:a4:3e:ff:d8:12:63:40:73:93:b3:b3:b3:6b:a0:
         c6:4b:05:06:b0:d3:82:e4:d4:f8:3b:1c:95:ec:07:1f:de:46:
         cf:f2:ed:1e:e6:1b:9b:a3:e1:b0:30:60:d2:ca:17:41:eb:35:
         ad:9a:cb:b5:68:1c:8c:b5:41:9a:fc:4f:c3:92:7f:65:af:9b:
         25:2c:ec:02:1f:ba:06:ac:5c:40:c2:a9:ef:c9:ac:1a:9b:74:
         c6:6f:5f:63:2b:d0:c0:59:79:2d:47:22:00:5b:0c:86:bc:5f:
         07:0c:68:ff:51:e6:5f:59:bc:fe:63:96:ec:8c:76:bf:3f:07:
         54:c4:90:3a:a0:e3:3b:4e:e9:09:08:ea:a5:a0:f9:75:85:b2:
         60:1e:e0:b2:ba:c0:ff:d0:a2:23:83:fa:c7:66:f5:8f:03:cb:
         a9:dd:e9:17:12:cd:c4:7e:81:d7:b5:53:03:d6:17:3c:ff:c0:
         56:7a:4d:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2
OUVDQjU4NDAwHhcNMjUwMTMxMTUwOTQ1WhcNMjUwMjA3MTUwOTQ1WjAYMRYwFAYD
VQQDEw02NzljZTdiOS1mNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw587TrWN7bE+TSAlHX3EJFVz+zOcPnEoKRIeK086Od0EyyS4jVJSmrB71eR/
Jn+mJgfc/2Z1dLvhWbW2HmBUuv4Zor/JZGzwgs/VUQzT2pULSX5lkRJtKJZbwto0
DMjFvBEVB6FKi3kKpJ2l8PP89TkWYJBBxUavlzkxXREJ8KvhiuSJhmtx+UbeMsOo
760t8KpLV8w//SDIBz9a7sphAaY72tE2OXkizbYUw6uqf9uiK+Ajt5VcFvNmrTAz
T1uTJouIAOF/kEgHGXWwnkWvF7unArRO19sLY232nc1LAbEL37Bo7ZQtm1Fax0Cc
aF10+Two6uFmi4GXjr/6Q9V5NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxzL2vv
miuRqeFG0AZedV135OYHMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE
QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu
enFDTVY5SUNvNEJwN0xXRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAz2ywdWNhTLyjs+ye6hpyx7rjJrNicSX8SoDXs+shUtDUpmuJkTl/S
1jVU1H6gncr5anFz3bb/bI5BsuTO/wCtRYOX7E3dxCI9xXR5pD7/2BJjQHOTs7Oz
a6DGSwUGsNOC5NT4OxyV7Acf3kbP8u0e5hubo+GwMGDSyhdB6zWtmsu1aByMtUGa
/E/Dkn9lr5slLOwCH7oGrFxAwqnvyawam3TGb19jK9DAWXktRyIAWwyGvF8HDGj/
UeZfWbz+Y5bsjHa/PwdUxJA6oOM7TukJCOqloPl1hbJgHuCyusD/0KIjg/rHZvWP
A8up3ekXEs3EfoHXtVMD1hc8/8BWek09
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:49 2025 by rpki-client