Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
File:                     v3p9VKnGtsG13SUCa_u6fXfkUns.mft (raw, json)
Hash identifier:          3TGQIRTmvtYCJk8ZlkrFByHjlGHreRuEtT2ARYQYH08=
Subject key identifier:   48:B1:6F:E1:CE:90:57:8A:93:8F:D0:DA:C3:43:87:FA:FC:FB:CC:62
Authority key identifier: BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B
Certificate issuer:       /CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
Manifest number:          41
Signing time:             Fri 31 Jan 2025 06:29:58 +0000
Manifest this update:     Fri 31 Jan 2025 06:29:58 +0000
Manifest next update:     Fri 07 Feb 2025 06:29:58 +0000
Files and hashes:         1: v3p9VKnGtsG13SUCa_u6fXfkUns.crl (hash: KZxZeGxY/XPGs0ZzRg4/rVgqGpHzgArmn1NysoXZDVE=)
                          2: 94922566814411EFA0DF4C09C4F9AE02.roa (hash: 9kYxJpxlD05Jr699vklpYVPr8eXG1mQPz/w/ByRsgR8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B
        Validity
            Not Before: Jan 31 06:29:58 2025 GMT
            Not After : Feb  7 06:29:58 2025 GMT
        Subject: CN=679c6de6-e553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7d:3c:db:0a:37:85:90:d3:b7:cf:80:43:ca:
                    14:48:00:f1:67:0e:c8:61:ed:3d:2b:ae:30:26:51:
                    b8:84:d3:c3:0c:c7:d4:38:48:f9:1c:24:c1:9a:d7:
                    1c:9e:93:1d:43:84:59:9c:9e:1f:83:f0:a7:12:49:
                    bf:88:90:9c:b1:4f:51:bf:5b:17:91:9f:f4:e3:e8:
                    0f:77:3a:82:ea:0b:f5:22:93:de:a9:67:ec:fd:04:
                    97:5b:01:0f:42:ff:e4:e1:2d:90:fc:d6:e5:53:98:
                    9c:2f:8b:17:e4:d3:81:37:06:a6:04:95:f3:aa:81:
                    d3:2e:5c:a5:2b:a9:0f:15:05:41:fa:6a:f1:3d:03:
                    09:56:3b:34:85:f6:a1:d8:b7:66:e0:c1:71:b6:e9:
                    52:9f:9c:89:3b:2a:b1:37:de:23:1a:42:5f:54:39:
                    33:33:fc:e7:5f:3d:51:da:64:ec:f0:7b:85:ab:c6:
                    0c:85:60:e6:a8:0c:cc:4b:d3:b6:d1:db:c9:1c:b1:
                    05:01:60:2d:76:f0:71:b7:6e:f5:1e:29:5a:ec:33:
                    a9:bc:b1:27:d8:45:b8:f4:13:e1:ff:49:3d:d1:cd:
                    2e:0f:f3:dc:0b:62:39:1b:80:30:28:c7:04:74:9c:
                    16:02:d8:69:c2:4a:e9:fa:67:6a:d2:de:35:23:ed:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B1:6F:E1:CE:90:57:8A:93:8F:D0:DA:C3:43:87:FA:FC:FB:CC:62
            X509v3 Authority Key Identifier:
                keyid:BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:36:c8:a8:72:45:b0:96:4d:e8:40:f6:4c:00:4b:4e:3e:
         b6:f6:72:0c:2e:59:94:36:cc:78:d7:74:84:cd:24:58:4b:fb:
         ef:18:6d:2f:1c:19:ba:d9:18:ac:13:90:e9:d1:74:f1:00:f7:
         bf:d6:a8:dd:52:24:1e:7e:e2:4c:c9:be:0d:09:b6:b1:3c:76:
         8d:e2:9a:db:0a:55:8c:db:27:1b:70:a7:e9:6e:e7:29:5c:ce:
         1c:a4:6d:a9:0d:2d:99:ce:9b:80:98:4f:5d:b7:54:9e:b6:84:
         49:9a:1f:ce:6c:f2:cd:43:c6:1b:4c:b8:09:5f:20:13:af:82:
         d8:3e:47:05:04:f7:74:77:fa:3f:05:2b:c5:1d:67:7b:c5:5a:
         06:93:6e:00:13:a2:01:b2:f2:61:ae:ed:2f:e9:4a:76:f6:7b:
         46:39:4d:5b:98:bb:ae:eb:68:94:28:f2:de:6c:86:06:7e:0f:
         3e:8f:b3:cb:be:ad:14:57:73:96:95:0f:65:f8:08:f0:cb:21:
         c8:2e:70:f3:65:de:c2:a7:87:5a:11:ae:42:f5:5c:43:d0:00:
         f6:80:78:a3:b9:50:c7:fc:8f:35:61:d8:29:98:06:82:bd:cb:
         3f:ca:3c:8f:14:bd:44:49:33:14:b0:7c:64:9d:a6:e1:7f:8e:
         5e:00:4e:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NjMwMjExMC8GA1UEBRMoQkY3QTdENTRBOUM2QjZDMUI1REQyNTAyNkJGQkJBN0Q3
N0U0NTI3QjAeFw0yNTAxMzEwNjI5NThaFw0yNTAyMDcwNjI5NThaMBgxFjAUBgNV
BAMTDTY3OWM2ZGU2LWU1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDyfTzbCjeFkNO3z4BDyhRIAPFnDshh7T0rrjAmUbiE08MMx9Q4SPkcJMGa1xye
kx1DhFmcnh+D8KcSSb+IkJyxT1G/WxeRn/Tj6A93OoLqC/Uik96pZ+z9BJdbAQ9C
/+ThLZD81uVTmJwvixfk04E3BqYElfOqgdMuXKUrqQ8VBUH6avE9AwlWOzSF9qHY
t2bgwXG26VKfnIk7KrE33iMaQl9UOTMz/OdfPVHaZOzwe4WrxgyFYOaoDMxL07bR
28kcsQUBYC128HG3bvUeKVrsM6m8sSfYRbj0E+H/ST3RzS4P89wLYjkbgDAoxwR0
nBYC2GnCSun6Z2rS3jUj7TY9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSLFv4c6Q
V4qTj9Daw0OH+vz7zGIwHwYDVR0jBBgwFoAUv3p9VKnGtsG13SUCa/u6fXfkUnsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzAyLzJGQzRBNzEyODE0
NDExRUY5NUFGQzE0OEM0RjlBRTAyL3YzcDlWS25HdHNHMTNTVUNhX3U2Zlhma1Vu
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdjNwOVZLbkd0c0cxM1NVQ2FfdTZmWGZrVW5zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2
MzAyLzJGQzRBNzEyODE0NDExRUY5NUFGQzE0OEM0RjlBRTAyL3YzcDlWS25HdHNH
MTNTVUNhX3U2Zlhma1Vucy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAG2ZNsiockWwlk3oQPZMAEtOPrb2cgwuWZQ2zHjXdITNJFhL++8YbS8c
GbrZGKwTkOnRdPEA97/WqN1SJB5+4kzJvg0JtrE8do3imtsKVYzbJxtwp+lu5ylc
zhykbakNLZnOm4CYT123VJ62hEmaH85s8s1DxhtMuAlfIBOvgtg+RwUE93R3+j8F
K8UdZ3vFWgaTbgATogGy8mGu7S/pSnb2e0Y5TVuYu67raJQo8t5shgZ+Dz6Ps8u+
rRRXc5aVD2X4CPDLIcgucPNl3sKnh1oRrkL1XEPQAPaAeKO5UMf8jzVh2CmYBoK9
yz/KPI8UvURJMxSwfGSdpuF/jl4ATm4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:39:08 2025 by rpki-client