Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
File:                     jDgUcj_HVempuhvDNWZKUZu8HO4.mft (raw, json)
Hash identifier:          Q2vXDxS5dQ7+VMmZrLEcCuMf8rbWlNOgQ4aB+883r8I=
Subject key identifier:   ED:A0:42:BA:C8:AE:BA:51:E4:09:B8:A1:A0:1C:D3:17:1D:EE:F5:AE
Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE
Certificate issuer:       /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
Certificate serial:       046B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
Manifest number:          0457
Signing time:             Fri 31 Jan 2025 00:15:14 +0000
Manifest this update:     Fri 31 Jan 2025 00:15:14 +0000
Manifest next update:     Fri 07 Feb 2025 00:15:14 +0000
Files and hashes:         1: jDgUcj_HVempuhvDNWZKUZu8HO4.crl (hash: J0B1JJ5ChR46AbAv7wNjoWdZcIl92Gy4kMvoUAi5w1I=)
                          2: 4AB7A910321C11EF9E87D582C4F9AE02.roa (hash: IWsNQTcMNZCIYRCXuETJFZmlLwkTa3oCDru3o4pBSFg=)
                          3: 46493600A91511ED9E2AC948C4F9AE02.roa (hash: Cvm3jGgtG/IO+qWj8hVQiUBhVroPBRD0seW7V/cVRpo=)
                          4: 45835FFCA91511ED9E2AC948C4F9AE02.roa (hash: ec1O1GTZ4dz+0/pZQ1zL6I07kP1Ns22R8lDvYSkImuM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
        Validity
            Not Before: Jan 31 00:15:14 2025 GMT
            Not After : Feb  7 00:15:14 2025 GMT
        Subject: CN=679c1612-687e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:64:b3:4e:32:92:d9:ed:6f:d3:3b:8a:8c:
                    83:3d:e4:de:d4:35:ca:3b:50:2f:4c:c4:ec:ca:b2:
                    49:44:a6:44:89:3c:8c:81:51:0f:58:92:d1:9c:a3:
                    89:f4:39:7f:1c:49:bc:72:b5:ec:d9:c0:7e:a1:ee:
                    69:45:c2:0a:5b:1d:be:d6:6e:44:a5:e9:bd:9f:f3:
                    73:be:6e:cc:3b:3d:e0:e8:1a:68:2b:9b:ba:61:6b:
                    5e:8a:92:6a:6e:f6:ef:0e:af:07:b2:db:fa:34:6c:
                    5c:07:a8:09:df:ce:f3:12:1d:0b:7e:2e:cd:cc:0f:
                    23:61:fe:53:eb:81:e4:43:9e:c0:20:bc:d5:ba:98:
                    18:da:a1:bc:42:39:7b:da:b8:01:5f:a0:d6:59:1c:
                    ae:a0:45:33:e1:47:e5:a9:e0:d7:73:59:b9:26:ad:
                    51:d5:39:73:a0:0f:e9:56:05:2c:22:42:9c:8b:52:
                    82:83:21:8f:05:38:b7:39:2f:90:3f:8a:98:84:af:
                    12:a0:55:8c:60:22:9c:63:d9:36:b8:dd:f1:c9:f9:
                    4b:5d:61:18:9d:e8:18:5a:17:6d:87:8c:1f:63:06:
                    79:39:0b:2d:0f:df:15:d3:f4:a4:e4:a0:62:86:ca:
                    2d:62:9c:ba:30:e5:f8:a1:4f:82:c1:ed:8e:49:8d:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A0:42:BA:C8:AE:BA:51:E4:09:B8:A1:A0:1C:D3:17:1D:EE:F5:AE
            X509v3 Authority Key Identifier:
                keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:90:76:0d:68:73:f4:1f:64:c3:b0:11:77:b5:3e:0f:67:
         f2:08:74:9a:74:c6:d8:8e:6a:f3:20:20:1f:4f:20:10:0c:61:
         fd:02:fc:1c:1d:b8:49:45:c8:f7:2b:a9:30:f2:80:73:46:61:
         09:b4:76:ad:92:4c:f2:f3:19:18:32:97:ef:40:91:a5:d9:99:
         56:3c:96:02:36:76:59:7e:7d:eb:45:2d:59:e8:d8:d6:cc:a5:
         0c:d6:37:0b:ba:cc:b3:b8:14:57:b0:a5:04:7a:be:5b:03:b4:
         f5:f2:40:69:53:c5:08:c7:33:9d:7f:e2:8a:a7:0b:a9:65:58:
         3c:bc:eb:3d:a0:db:ba:d1:0f:a4:c6:76:b6:77:61:b8:cb:e0:
         ed:7a:f0:83:d7:51:ab:ae:c5:33:ee:a3:0c:57:5b:56:9f:de:
         ca:3a:f5:0b:17:ec:0d:a7:25:91:28:bc:1b:34:1e:67:70:58:
         4c:01:81:b5:d6:25:2a:06:81:c0:84:e1:a3:ae:cf:1b:c5:d4:
         da:30:39:bc:5a:58:89:e3:3d:b7:fe:06:f6:fc:9b:9b:c3:1b:
         e8:c1:ca:53:ad:50:6e:47:b2:af:cf:79:9b:63:f2:90:18:0d:
         82:60:7e:6a:4f:61:66:2f:84:01:c5:3d:a2:57:17:b8:aa:a5:
         ec:1c:09:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M0MEQxMTAvBgNVBAUTKDhDMzgxNDcyM0ZDNzU1RTlBOUJBMUJDMzM1NjY0QTUx
OUJCQzFDRUUwHhcNMjUwMTMxMDAxNTE0WhcNMjUwMjA3MDAxNTE0WjAYMRYwFAYD
VQQDEw02NzljMTYxMi02ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwFks04yktntb9M7ioyDPeTe1DXKO1AvTMTsyrJJRKZEiTyMgVEPWJLRnKOJ
9Dl/HEm8crXs2cB+oe5pRcIKWx2+1m5Epem9n/Nzvm7MOz3g6BpoK5u6YWteipJq
bvbvDq8Hstv6NGxcB6gJ387zEh0Lfi7NzA8jYf5T64HkQ57AILzVupgY2qG8Qjl7
2rgBX6DWWRyuoEUz4UflqeDXc1m5Jq1R1TlzoA/pVgUsIkKci1KCgyGPBTi3OS+Q
P4qYhK8SoFWMYCKcY9k2uN3xyflLXWEYnegYWhdth4wfYwZ5OQstD98V0/Sk5KBi
hsotYpy6MOX4oU+Cwe2OSY22jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2gQrrI
rrpR5Am4oaAc0xcd7vWuMB8GA1UdIwQYMBaAFIw4FHI/x1XpqbobwzVmSlGbvBzu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQwRC81MEY3NzVBNjNC
Q0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZlbXB1aHZETldaS1VadThI
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pEZ1Vjal9IVmVtcHVodkROV1pLVVp1OEhPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzQwRC81MEY3NzVBNjNCQ0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZl
bXB1aHZETldaS1VadThITzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAt2ZB2DWhz9B9kw7ARd7U+D2fyCHSadMbYjmrzICAfTyAQDGH9Avwc
HbhJRcj3K6kw8oBzRmEJtHatkkzy8xkYMpfvQJGl2ZlWPJYCNnZZfn3rRS1Z6NjW
zKUM1jcLusyzuBRXsKUEer5bA7T18kBpU8UIxzOdf+KKpwupZVg8vOs9oNu60Q+k
xna2d2G4y+DtevCD11GrrsUz7qMMV1tWn97KOvULF+wNpyWRKLwbNB5ncFhMAYG1
1iUqBoHAhOGjrs8bxdTaMDm8WliJ4z23/gb2/JubwxvowcpTrVBuR7Kvz3mbY/KQ
GA2CYH5qT2FmL4QBxT2iVxe4qqXsHAlZ
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:18 2025 by rpki-client