Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft
File:                     EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json)
Hash identifier:          tZ9HPnNuJuU7HjPCUfywYelXrOyb0FginvhUA+mUNW4=
Subject key identifier:   74:23:3F:0F:26:86:34:76:C7:65:B8:97:5B:76:0E:BA:39:60:69:CD
Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08
Certificate issuer:       /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108
Certificate serial:       06FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft
Manifest number:          06F9
Signing time:             Thu 30 Jan 2025 21:52:32 +0000
Manifest this update:     Thu 30 Jan 2025 21:52:32 +0000
Manifest next update:     Thu 06 Feb 2025 21:52:32 +0000
Files and hashes:         1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: q7AYnwkd94BeOSn47ileFnFxLvac/fkRlO82Sy/MabU=)
                          2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: 7N0AglNEEqc9kfaZl/cHF7h51PfaQbNAvQaGl0/xNvc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108
        Validity
            Not Before: Jan 30 21:52:32 2025 GMT
            Not After : Feb  6 21:52:32 2025 GMT
        Subject: CN=679bf4a0-4865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:0d:d2:3b:fa:c1:45:8c:37:fc:41:f3:a5:
                    08:cf:ec:c4:3a:77:34:1d:5e:c7:e6:98:65:a3:83:
                    9b:e2:85:f6:eb:aa:2f:fd:b0:38:eb:2e:ae:24:ed:
                    0e:58:9d:0c:49:3e:d2:ce:89:24:01:53:46:74:05:
                    6e:60:6a:47:4f:ed:cf:ed:eb:cd:33:99:f1:6d:0b:
                    e7:26:ba:60:13:91:48:eb:29:43:28:9e:e8:be:99:
                    2a:67:6c:0d:29:08:a4:52:ae:2f:b8:53:82:ef:e4:
                    0b:d8:38:67:51:06:74:77:a2:83:7c:a2:59:53:4f:
                    5f:33:ef:4c:dd:d0:bf:e6:63:05:74:4d:14:6e:4a:
                    a7:20:f0:b7:05:10:25:5c:c3:79:a5:c7:c1:16:52:
                    5d:da:69:b6:45:88:cf:ff:41:6b:b7:e7:23:d4:76:
                    24:5b:9c:8c:7f:97:c4:fd:a2:13:18:7b:84:14:ac:
                    ee:9d:c2:7e:b8:e7:02:02:84:6f:39:62:8b:a1:a6:
                    2d:a8:0f:cc:d0:a8:c4:c5:df:df:d7:74:ba:3d:76:
                    35:e8:b9:35:97:07:bf:d6:9a:b9:11:96:53:d6:90:
                    8a:8c:52:68:62:42:08:23:f7:90:69:73:5e:08:96:
                    db:7b:aa:8a:f4:c3:1c:4a:58:9a:09:3d:ab:6f:08:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:23:3F:0F:26:86:34:76:C7:65:B8:97:5B:76:0E:BA:39:60:69:CD
            X509v3 Authority Key Identifier:
                keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:b6:bb:18:b3:79:b0:1c:40:92:d8:88:d1:b1:2e:d8:5d:
         b3:59:46:63:9c:a5:70:cc:5a:49:43:ce:3d:e6:76:f1:48:9d:
         dd:e5:0f:ea:ca:de:9f:61:11:cb:2d:7d:85:5b:a3:f5:31:1a:
         5d:57:40:31:96:0c:56:6d:aa:25:b8:16:1a:34:6b:4c:f9:04:
         f2:65:45:17:1f:6c:10:55:da:c6:a6:d6:3d:e7:a5:61:c8:8f:
         9e:dd:cd:0b:eb:bd:48:49:1e:37:44:9f:30:28:74:b9:18:3d:
         f8:c1:96:18:a9:4d:9b:1d:43:8b:ff:6e:00:0f:bf:55:da:85:
         a6:95:d9:e3:f8:1a:f8:6b:fd:38:4a:3a:fb:51:8a:a6:e4:dc:
         b5:12:8c:db:f7:5f:9c:2e:97:7f:39:e4:4b:ae:3d:ef:de:38:
         91:d6:1c:9b:87:3a:5a:a0:6e:39:30:61:40:2b:38:94:87:ff:
         71:38:bc:35:0d:4f:fb:42:ef:d8:97:a5:4e:c8:95:da:83:9e:
         8d:22:c8:49:76:ff:f8:cc:7a:4a:89:47:cd:7a:cb:e8:79:fb:
         15:aa:7b:60:35:a3:ec:a9:e8:ce:c5:e7:51:bf:71:06:e4:89:
         33:0d:f5:b9:12:64:36:28:62:92:3d:93:c5:da:f5:bf:df:33:
         9a:0b:31:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2
OUFEOTkxMDgwHhcNMjUwMTMwMjE1MjMyWhcNMjUwMjA2MjE1MjMyWjAYMRYwFAYD
VQQDEw02NzliZjRhMC00ODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/kN0jv6wUWMN/xB86UIz+zEOnc0HV7H5phlo4Ob4oX266ov/bA46y6uJO0O
WJ0MST7SzokkAVNGdAVuYGpHT+3P7evNM5nxbQvnJrpgE5FI6ylDKJ7ovpkqZ2wN
KQikUq4vuFOC7+QL2DhnUQZ0d6KDfKJZU09fM+9M3dC/5mMFdE0UbkqnIPC3BRAl
XMN5pcfBFlJd2mm2RYjP/0Frt+cj1HYkW5yMf5fE/aITGHuEFKzuncJ+uOcCAoRv
OWKLoaYtqA/M0KjExd/f13S6PXY16Lk1lwe/1pq5EZZT1pCKjFJoYkIII/eQaXNe
CJbbe6qK9MMcSliaCT2rbwhfewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQjPw8m
hjR2x2W4l1t2Dro5YGnNMB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF
ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr
UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzQyOS8yNkQ2QjdDNDJFODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6
V1NvdFBQZ1hLZkpwclprUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWP7a7GLN5sBxAktiI0bEu2F2zWUZjnKVwzFpJQ8495nbxSJ3d5Q/q
yt6fYRHLLX2FW6P1MRpdV0AxlgxWbaoluBYaNGtM+QTyZUUXH2wQVdrGptY956Vh
yI+e3c0L671ISR43RJ8wKHS5GD34wZYYqU2bHUOL/24AD79V2oWmldnj+Br4a/04
Sjr7UYqm5Ny1Eozb91+cLpd/OeRLrj3v3jiR1hybhzpaoG45MGFAKziUh/9xOLw1
DU/7Qu/Yl6VOyJXag56NIshJdv/4zHpKiUfNesvoefsVqntgNaPsqejOxedRv3EG
5IkzDfW5EmQ2KGKSPZPF2vW/3zOaCzHt
-----END CERTIFICATE-----