Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft
File:                     mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json)
Hash identifier:          HMy5iokPkwopyms7Atem634CNz6D+YleD+mZiIflW+M=
Subject key identifier:   D8:26:E6:64:D3:76:47:0B:20:4F:DA:65:BA:92:73:67:32:2A:C0:B2
Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9
Certificate issuer:       /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft
Manifest number:          67
Signing time:             Fri 31 Jan 2025 05:59:33 +0000
Manifest this update:     Fri 31 Jan 2025 05:59:32 +0000
Manifest next update:     Fri 07 Feb 2025 05:59:32 +0000
Files and hashes:         1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: JrMtbgAn7uhh642y8+71Zishw5zfMIkzUTPT0zLssa0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9
        Validity
            Not Before: Jan 31 05:59:32 2025 GMT
            Not After : Feb  7 05:59:32 2025 GMT
        Subject: CN=679c66c4-53fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:40:d0:97:7f:f9:88:0d:78:cd:e1:c3:b4:17:
                    fb:22:97:7e:9a:a1:87:0b:75:d9:52:f7:d9:c7:40:
                    6b:70:d7:67:be:05:6e:86:4a:59:5d:09:30:34:66:
                    82:45:8d:c3:0d:05:48:f4:db:5b:5e:ad:aa:19:59:
                    b2:bb:05:ac:54:ab:b3:bf:70:35:c2:d9:55:2d:69:
                    aa:7b:8e:c0:01:4f:cc:33:58:8f:07:e1:23:db:00:
                    7e:c4:71:6d:72:dd:3d:5b:88:22:1b:6d:1c:5a:a0:
                    f7:22:0c:b4:a6:3a:1c:a6:6f:35:c0:1f:92:73:bd:
                    a8:82:ba:19:5c:65:1e:47:1a:35:b1:84:f3:10:e1:
                    69:cd:03:0b:62:3b:46:fa:bb:13:34:20:0b:dd:61:
                    71:c4:66:c2:43:fa:7a:44:2f:f7:fd:79:cf:42:10:
                    34:1e:8f:d9:9d:10:ca:95:5e:2a:58:55:e4:cb:4e:
                    cd:e7:31:0b:43:ff:09:7c:2d:f8:ee:5a:b7:6c:7f:
                    88:79:7d:f2:80:a6:4f:18:1c:d1:c0:b9:ed:85:2b:
                    3c:25:f5:a8:c9:39:ff:50:5a:06:8c:c7:b1:bc:e4:
                    ff:2d:4c:11:13:d8:a7:a0:36:7d:c7:cf:b6:6f:3d:
                    10:fd:a7:96:b9:7c:fc:56:b9:f1:b9:e5:64:2e:29:
                    eb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:26:E6:64:D3:76:47:0B:20:4F:DA:65:BA:92:73:67:32:2A:C0:B2
            X509v3 Authority Key Identifier:
                keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:dd:13:ae:78:0e:df:c0:1c:26:30:4a:55:35:3a:7e:3a:
         e3:51:44:c9:02:9e:57:e1:1c:6f:4e:0e:38:a6:ae:21:a1:df:
         bd:bb:bd:13:09:0c:00:29:02:4b:e8:9f:97:cc:83:98:3c:e6:
         a1:ef:12:5d:64:af:49:10:bd:67:92:a7:ad:d3:f5:f1:ad:71:
         b1:e0:6e:26:bf:ad:c2:22:5f:7b:79:de:2a:4a:8f:36:69:66:
         ae:f6:a6:ef:72:b4:b1:62:59:35:5f:37:88:82:f2:1f:1d:5c:
         12:83:80:ef:4d:b6:af:dd:90:22:11:68:fd:0d:1a:54:be:c6:
         50:8a:7b:fa:00:75:7e:e4:7b:64:1f:9f:2b:ec:65:d3:02:2b:
         5b:a9:84:75:03:dd:06:5a:64:48:f8:95:38:ba:37:02:0d:fa:
         d7:be:24:3c:0e:ab:79:14:33:c9:a1:64:a6:01:80:3e:89:11:
         c2:cd:e4:a8:17:f9:60:ef:9a:dd:b0:30:19:6d:52:3e:58:1b:
         f4:1e:b5:11:7e:34:4e:2f:05:8c:22:c7:8c:a4:59:3f:fb:93:
         e9:53:b6:de:51:c1:d1:1e:91:84:02:76:0b:33:34:3e:e3:78:
         7b:bf:58:eb:01:aa:61:f3:49:05:2a:be:ca:78:38:51:9c:7d:
         67:19:6f:fc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QjFEQjExMC8GA1UEBRMoOTlDMTA2RTg3RkUxRDY0MTFBRUM3MUY4MDM5NDYyMkM4
ODFBQUFEOTAeFw0yNTAxMzEwNTU5MzJaFw0yNTAyMDcwNTU5MzJaMBgxFjAUBgNV
BAMTDTY3OWM2NmM0LTUzZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDlQNCXf/mIDXjN4cO0F/sil36aoYcLddlS99nHQGtw12e+BW6GSlldCTA0ZoJF
jcMNBUj021teraoZWbK7BaxUq7O/cDXC2VUtaap7jsABT8wzWI8H4SPbAH7EcW1y
3T1biCIbbRxaoPciDLSmOhymbzXAH5JzvaiCuhlcZR5HGjWxhPMQ4WnNAwtiO0b6
uxM0IAvdYXHEZsJD+npEL/f9ec9CEDQej9mdEMqVXipYVeTLTs3nMQtD/wl8Lfju
Wrdsf4h5ffKApk8YHNHAue2FKzwl9ajJOf9QWgaMx7G85P8tTBET2KegNn3Hz7Zv
PRD9p5a5fPxWufG55WQuKesRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2CbmZNN2
RwsgT9plupJzZzIqwLIwHwYDVR0jBBgwFoAUmcEG6H/h1kEa7HH4A5RiLIgaqtkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMURCLzM2NTE0MEVFNDMx
MDExRUY4NjhCMkI4MUM0RjlBRTAyL21jRUc2SF9oMWtFYTdISDRBNVJpTElnYXF0
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbWNFRzZIX2gxa0VhN0hINEE1UmlMSWdhcXRrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC
MURCLzM2NTE0MEVFNDMxMDExRUY4NjhCMkI4MUM0RjlBRTAyL21jRUc2SF9oMWtF
YTdISDRBNVJpTElnYXF0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABoV3ROueA7fwBwmMEpVNTp+OuNRRMkCnlfhHG9ODjimriGh3727vRMJ
DAApAkvon5fMg5g85qHvEl1kr0kQvWeSp63T9fGtcbHgbia/rcIiX3t53ipKjzZp
Zq72pu9ytLFiWTVfN4iC8h8dXBKDgO9Ntq/dkCIRaP0NGlS+xlCKe/oAdX7ke2Qf
nyvsZdMCK1uphHUD3QZaZEj4lTi6NwIN+te+JDwOq3kUM8mhZKYBgD6JEcLN5KgX
+WDvmt2wMBltUj5YG/QetRF+NE4vBYwix4ykWT/7k+lTtt5RwdEekYQCdgszND7j
eHu/WOsBqmHzSQUqvsp4OFGcfWcZb/w=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:05 2025 by rpki-client