Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
File:                     LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft (raw, json)
Hash identifier:          ReDDrXJAmkVWuDxQP4cWarbDjkziGkVyycP4cWIsiw4=
Subject key identifier:   91:80:6B:92:F3:33:5B:C2:99:83:4E:FC:95:75:99:B7:67:D0:A4:09
Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9
Certificate issuer:       /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9
Certificate serial:       0B7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
Manifest number:          0B77
Signing time:             Thu 30 Jan 2025 19:05:09 +0000
Manifest this update:     Thu 30 Jan 2025 19:05:09 +0000
Manifest next update:     Thu 06 Feb 2025 19:05:09 +0000
Files and hashes:         1: LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl (hash: vHoiXio0cWYoNcP4CRvQneq99DHtrATbZ+Q08963Aew=)
                          2: 4ABAD810208D11EAA05C7C3DC4F9AE02.roa (hash: IjPsFFHCvUaMlnUaOFvCNKSeXcsnIqpFaL3Dn7jwLDU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2941 (0xb7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9
        Validity
            Not Before: Jan 30 19:05:09 2025 GMT
            Not After : Feb  6 19:05:09 2025 GMT
        Subject: CN=679bcd65-c1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:08:80:6b:7c:8f:85:01:6e:3f:5a:17:ed:
                    cc:e5:07:e5:ba:c0:aa:a1:b6:9b:cc:a3:3f:6e:90:
                    c0:6c:c5:61:39:c8:1f:cd:21:84:92:89:05:ae:8a:
                    e2:2e:6b:cc:fa:88:9a:87:50:dd:19:d6:2a:79:da:
                    c2:ef:30:96:ee:b8:c7:16:35:58:d8:5a:45:ab:80:
                    20:dd:f1:bf:5b:b7:02:7d:27:c1:80:e9:73:11:96:
                    bf:70:0a:65:ef:5b:d2:e5:73:66:eb:4a:0c:54:16:
                    42:8c:99:eb:b1:4e:71:71:3d:c8:97:b7:f7:d1:e4:
                    5f:1f:03:d5:57:f3:88:9d:19:80:9a:97:a9:88:8c:
                    5b:cb:60:74:d7:b4:6f:52:e5:c7:31:0f:13:e3:d3:
                    19:50:c6:ad:82:27:68:2d:f1:65:92:53:5b:6c:10:
                    8b:c1:73:b1:cc:d5:62:64:44:34:5f:1f:02:18:b3:
                    bb:d5:0b:51:b9:05:dd:09:35:f9:3c:ab:4f:1b:86:
                    0d:3f:dc:a2:28:8c:80:98:bf:25:4f:20:c2:8b:c8:
                    29:9e:c0:da:a2:49:0d:b0:b4:4a:7e:f5:6e:2e:02:
                    cc:52:9c:60:8a:28:95:82:7a:bf:b4:74:43:2d:a3:
                    97:81:ae:da:92:88:81:26:cf:74:94:a8:20:2c:db:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:80:6B:92:F3:33:5B:C2:99:83:4E:FC:95:75:99:B7:67:D0:A4:09
            X509v3 Authority Key Identifier:
                keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fd:1d:eb:7c:ff:02:d5:ac:69:fe:0e:c4:77:19:7a:b1:6b:
         b1:31:04:55:f3:10:34:0d:b1:3b:7d:fa:4b:e7:37:c2:3f:fb:
         2b:fd:be:d7:d5:4a:23:58:72:27:31:ab:ab:99:fb:3f:ff:a8:
         34:57:62:32:cf:d4:40:78:a5:90:08:52:60:f9:24:bb:33:a5:
         ff:66:6b:d8:d5:0a:f3:be:45:ae:58:69:60:57:e9:16:16:51:
         1d:e4:01:5b:29:0c:b5:29:cc:4c:57:fa:d5:17:7a:25:de:9a:
         8c:87:25:59:72:77:10:89:fd:09:29:57:ff:5e:ed:c7:42:6b:
         44:14:bb:56:af:aa:56:d4:2a:de:df:96:9a:36:24:0a:8c:34:
         7f:4f:13:52:f2:3c:b7:ef:6b:49:c4:3a:a9:59:42:65:82:52:
         a2:c0:82:2d:26:a0:c0:2e:e1:3e:69:86:ec:69:0d:5b:79:d0:
         bc:f1:c3:01:39:ee:67:59:c2:61:0f:83:73:6d:4b:72:2f:b0:
         4b:04:f8:ee:04:96:cb:c3:8d:98:55:c7:80:35:c0:39:6a:b0:
         af:b1:86:fc:b9:43:94:b9:9e:57:ef:f6:45:f3:85:1a:02:b8:
         3f:4f:64:73:e4:a0:78:eb:6e:41:fb:5b:d8:2f:e6:5f:8e:61:
         87:42:5a:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JDMDUxMTAvBgNVBAUTKDJENUE5NUYyREE0QjFGMUM3MEM2NDYyNTE5RkM2RjU4
OTQ1RkNBQjkwHhcNMjUwMTMwMTkwNTA5WhcNMjUwMjA2MTkwNTA5WjAYMRYwFAYD
VQQDEw02NzliY2Q2NS1jMWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwO8IgGt8j4UBbj9aF+3M5QflusCqobabzKM/bpDAbMVhOcgfzSGEkokFrori
LmvM+oiah1DdGdYqedrC7zCW7rjHFjVY2FpFq4Ag3fG/W7cCfSfBgOlzEZa/cApl
71vS5XNm60oMVBZCjJnrsU5xcT3Il7f30eRfHwPVV/OInRmAmpepiIxby2B017Rv
UuXHMQ8T49MZUMatgidoLfFlklNbbBCLwXOxzNViZEQ0Xx8CGLO71QtRuQXdCTX5
PKtPG4YNP9yiKIyAmL8lTyDCi8gpnsDaokkNsLRKfvVuLgLMUpxgiiiVgnq/tHRD
LaOXga7akoiBJs90lKggLNsf9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGAa5Lz
M1vCmYNO/JV1mbdn0KQJMB8GA1UdIwQYMBaAFC1alfLaSx8ccMZGJRn8b1iUX8q5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS80NzMzOTU2NjIw
OEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4eHd4a1lsR2Z4dldKUmZ5
cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xWcVY4dHBMSHh4d3hrWWxHZnh2V0pSZnlyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkMwNS80NzMzOTU2NjIwOEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4
eHd4a1lsR2Z4dldKUmZ5cmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCt/R3rfP8C1axp/g7Edxl6sWuxMQRV8xA0DbE7ffpL5zfCP/sr/b7X
1UojWHInMaurmfs//6g0V2Iyz9RAeKWQCFJg+SS7M6X/ZmvY1QrzvkWuWGlgV+kW
FlEd5AFbKQy1KcxMV/rVF3ol3pqMhyVZcncQif0JKVf/Xu3HQmtEFLtWr6pW1Cre
35aaNiQKjDR/TxNS8jy372tJxDqpWUJlglKiwIItJqDALuE+aYbsaQ1bedC88cMB
Oe5nWcJhD4NzbUtyL7BLBPjuBJbLw42YVceANcA5arCvsYb8uUOUuZ5X7/ZF84Ua
Arg/T2Rz5KB4625B+1vYL+ZfjmGHQlro
-----END CERTIFICATE-----
Generated at Wed Apr 30 16:18:59 2025 by rpki-client