Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
File:                     8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json)
Hash identifier:          C/sNh6cpQRLz0AGANrtym6I3Liab2nqdMUghoc75olU=
Subject key identifier:   D7:EA:EF:4F:E4:91:76:82:9C:A5:58:76:86:39:28:F2:A7:C1:58:22
Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3
Certificate issuer:       /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
Certificate serial:       25E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
Manifest number:          25D0
Signing time:             Fri 31 Jan 2025 15:43:23 +0000
Manifest this update:     Fri 31 Jan 2025 15:43:23 +0000
Manifest next update:     Fri 07 Feb 2025 15:43:23 +0000
Files and hashes:         1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: sFgb6y4flElX2CRsdPrMKCXHYTX9U0mSRFT1s2xfslM=)
                          2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: Uki4zZBq+AXoZS1WsNdomdB56dr+Us9kfJZonwp4fTs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9703 (0x25e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3
        Validity
            Not Before: Jan 31 15:43:23 2025 GMT
            Not After : Feb  7 15:43:23 2025 GMT
        Subject: CN=679cef9b-4fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8c:ee:07:b6:ca:1d:f0:fe:01:dc:86:d7:ce:
                    eb:d3:af:d3:da:56:4d:de:da:7e:81:cd:63:01:7f:
                    a3:60:76:58:86:57:64:83:c7:27:15:aa:61:5a:53:
                    e1:2a:01:8d:85:e1:52:fd:96:2b:f6:7e:1c:67:af:
                    9b:44:36:a4:fb:20:5d:be:ed:a4:6c:48:21:25:63:
                    19:94:39:96:d2:3e:59:7c:aa:99:91:a8:ca:d3:5e:
                    67:c8:fb:df:4d:67:50:9f:12:2a:33:8c:03:fb:81:
                    d5:5f:9e:35:23:bd:b9:b1:77:76:f9:67:56:f2:56:
                    9d:d7:c7:c9:f8:2c:2f:7a:72:46:ce:87:df:7f:b2:
                    6a:68:cf:7a:4a:88:45:f6:b6:52:25:c7:05:84:8b:
                    62:97:08:78:fe:f4:7e:fb:74:c6:26:7c:0d:b0:78:
                    a7:6e:0a:85:29:78:f2:94:6b:66:fd:cc:a9:0b:30:
                    bc:82:47:42:11:bc:64:f6:57:14:4c:9e:c8:c0:7c:
                    a8:bc:e3:be:79:7a:2a:38:66:85:dc:8d:c9:13:6b:
                    81:29:46:da:64:95:4d:54:13:ae:be:93:e9:40:8f:
                    cd:a4:0b:c3:5e:de:e0:ec:30:7b:10:9b:34:8c:c2:
                    20:28:00:cf:ba:20:f2:ff:18:d5:77:52:67:b8:38:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EA:EF:4F:E4:91:76:82:9C:A5:58:76:86:39:28:F2:A7:C1:58:22
            X509v3 Authority Key Identifier:
                keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:a4:83:f5:65:9b:30:a9:90:bb:a0:3d:69:ec:33:63:af:
         f2:e2:84:40:f6:ea:63:c6:c8:ab:1a:68:f7:93:b0:89:c9:8c:
         94:e7:60:a2:52:4f:8a:58:38:a7:df:5a:c4:27:a5:b4:0c:26:
         24:ed:4d:a2:ee:e9:cf:0a:b4:f6:61:7f:48:18:3e:21:13:fe:
         89:42:41:0b:32:6d:4b:e8:ee:c6:4e:f7:95:c6:e4:48:ac:63:
         84:66:59:68:02:f5:d8:29:1d:d2:36:08:95:13:04:16:26:ea:
         d0:68:09:14:44:78:d4:b3:cb:00:58:1b:9e:fc:26:56:56:2e:
         63:49:6a:e6:de:2c:d7:2b:01:bf:91:05:3a:a9:e7:63:59:68:
         34:e8:33:d8:77:c4:6c:a9:2b:58:23:bb:bb:35:c0:02:db:b8:
         aa:1d:89:53:dc:eb:b0:8f:28:cd:d5:ea:fe:8e:f8:78:44:4b:
         78:d9:3d:ab:ba:66:7b:df:0b:e2:00:d4:46:b9:67:59:92:ee:
         7d:34:53:ca:82:48:41:b6:ef:4d:2d:b9:63:89:3e:c8:23:c0:
         5b:1c:ce:f2:b3:53:2d:46:06:06:63:d2:65:0e:7b:6f:da:52:
         86:50:90:2c:fc:7b:cf:b7:c0:6c:6a:10:00:3f:82:51:0a:ea:
         f6:de:54:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5
NjgzQTNBRTMwHhcNMjUwMTMxMTU0MzIzWhcNMjUwMjA3MTU0MzIzWjAYMRYwFAYD
VQQDEw02NzljZWY5Yi00ZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6YzuB7bKHfD+AdyG187r06/T2lZN3tp+gc1jAX+jYHZYhldkg8cnFaphWlPh
KgGNheFS/ZYr9n4cZ6+bRDak+yBdvu2kbEghJWMZlDmW0j5ZfKqZkajK015nyPvf
TWdQnxIqM4wD+4HVX541I725sXd2+WdW8lad18fJ+CwvenJGzofff7JqaM96SohF
9rZSJccFhItilwh4/vR++3TGJnwNsHinbgqFKXjylGtm/cypCzC8gkdCEbxk9lcU
TJ7IwHyovOO+eXoqOGaF3I3JE2uBKUbaZJVNVBOuvpPpQI/NpAvDXt7g7DB7EJs0
jMIgKADPuiDy/xjVd1JnuDjU8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfq70/k
kXaCnKVYdoY5KPKnwVgiMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB
QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG
ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaR6SD9WWbMKmQu6A9aewzY6/y4oRA9upjxsirGmj3k7CJyYyU52Ci
Uk+KWDin31rEJ6W0DCYk7U2i7unPCrT2YX9IGD4hE/6JQkELMm1L6O7GTveVxuRI
rGOEZlloAvXYKR3SNgiVEwQWJurQaAkURHjUs8sAWBue/CZWVi5jSWrm3izXKwG/
kQU6qedjWWg06DPYd8RsqStYI7u7NcAC27iqHYlT3OuwjyjN1er+jvh4REt42T2r
umZ73wviANRGuWdZku59NFPKgkhBtu9NLbljiT7II8BbHM7ys1MtRgYGY9JlDntv
2lKGUJAs/HvPt8BsahAAP4JRCur23lQU
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:03 2025 by rpki-client