Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File:                     PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier:          EJarjmaxdIJql2ziP1odeoefKp0lj5tVw0N463ziuMY=
Subject key identifier:   DB:99:44:C0:7A:7D:87:A8:B0:A9:17:A7:74:B8:84:DA:40:E7:32:CA
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer:       /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number:          0266
Signing time:             Fri 31 Jan 2025 01:53:54 +0000
Manifest this update:     Fri 31 Jan 2025 01:53:53 +0000
Manifest next update:     Fri 07 Feb 2025 01:53:53 +0000
Files and hashes:         1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: j5bYkD2MNzEQH3hpxpguiEacniGfBC7SNlzXDKU7fgY=)
                          2: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: gbqTZqsJRhsghBBqQMo7mTiCeJA+l20Ke4Ubm2eHRvw=)
                          3: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: HHwm+CVHuXSSZBZ1KZm1M1AyC+d36xjwyY9C4UFPj64=)
                          4: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: W+m8i8/ecOoVYbCV+dJZsJPjSawS8GKTTRSrX5q6NWE=)
                          5: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: zRlw9jj+bfYIzSCYy5O/gBIxjqGEQu2ZfwozYl/ebWw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
        Validity
            Not Before: Jan 31 01:53:53 2025 GMT
            Not After : Feb  7 01:53:53 2025 GMT
        Subject: CN=679c2d32-5a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:b4:72:af:2d:57:47:0b:a5:94:9e:c3:d6:
                    03:03:f1:0f:33:1d:fc:30:02:2c:9b:41:91:bc:a5:
                    88:2c:1c:71:cf:52:10:46:63:e2:f0:7c:08:9d:b3:
                    65:88:7c:36:c0:29:c8:77:91:72:7e:fd:68:d0:a0:
                    0d:20:c0:cb:b6:2f:99:de:11:4a:89:da:1c:a0:ae:
                    46:91:b5:5c:89:46:ed:d5:02:14:2b:1a:00:88:04:
                    05:61:e6:87:ea:0a:22:97:33:3a:59:a4:6c:47:7f:
                    7d:ed:1b:3c:8f:bc:b2:fd:82:dd:f7:7b:dd:ba:2a:
                    b7:ab:89:d4:1d:3d:d0:5f:f5:dd:72:2e:c0:09:05:
                    4c:e9:e5:85:36:54:66:09:07:4d:88:58:cc:54:a9:
                    69:11:4e:8c:27:9c:77:b1:aa:65:68:fb:15:ca:ff:
                    4c:5b:11:44:54:44:49:31:0f:b5:fb:e6:e7:d4:31:
                    32:ae:b8:2a:10:a7:62:35:fe:bd:0b:02:2f:c4:30:
                    c0:7b:16:70:96:f0:6f:1b:0d:be:75:c7:38:c6:1b:
                    4e:36:2c:3b:54:70:14:2c:9a:83:1f:e8:71:37:a8:
                    a8:ca:7f:8e:71:f6:ed:b0:16:78:d2:3f:da:3f:f1:
                    2e:84:98:c4:b3:76:b7:00:b7:d8:f2:20:35:83:cb:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:99:44:C0:7A:7D:87:A8:B0:A9:17:A7:74:B8:84:DA:40:E7:32:CA
            X509v3 Authority Key Identifier:
                keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:de:6d:e4:3d:c9:00:ab:1a:7c:47:6a:b9:ad:38:42:35:4c:
         9b:7d:05:fb:35:f1:17:0d:9d:22:9f:1a:65:51:0d:68:e0:7a:
         ef:00:70:11:eb:9a:c5:1a:2c:ae:ed:dc:42:e3:fd:86:fd:1b:
         43:34:cc:7d:4f:24:8e:04:6e:99:fd:bd:1e:87:90:d7:ae:dc:
         79:50:a6:42:51:61:c1:3f:23:d6:59:17:f3:9d:8f:05:a5:63:
         53:cd:16:9a:bd:16:3f:f3:bb:fd:4a:9f:f8:f0:c6:1a:49:82:
         43:8b:9a:28:9e:32:86:d6:19:8b:be:96:d9:73:25:43:f1:09:
         3c:d1:59:1e:db:f5:6d:b6:ad:56:30:98:15:a9:46:52:5c:1b:
         b6:16:6f:86:95:7f:86:c4:a1:a0:bb:3b:17:12:71:5e:77:55:
         23:9c:ea:f1:f3:87:f3:eb:c2:74:92:c0:ba:ad:f2:7d:0a:f2:
         87:52:f5:47:79:f6:1a:73:92:63:45:a0:05:69:a2:86:57:e7:
         3f:4b:de:96:36:4a:16:8e:66:27:e9:5e:00:fa:41:a8:75:42:
         37:8a:64:ae:bc:54:1c:0d:43:cf:08:e0:92:51:9b:0e:5d:1f:
         5c:62:a6:7c:e9:02:55:8a:64:0c:2e:fd:b4:50:bb:d9:c1:c3:
         b4:90:66:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2
RjkyNDlGQkQwHhcNMjUwMTMxMDE1MzUzWhcNMjUwMjA3MDE1MzUzWjAYMRYwFAYD
VQQDEw02NzljMmQzMi01YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfq0cq8tV0cLpZSew9YDA/EPMx38MAIsm0GRvKWILBxxz1IQRmPi8HwInbNl
iHw2wCnId5Fyfv1o0KANIMDLti+Z3hFKidocoK5GkbVciUbt1QIUKxoAiAQFYeaH
6goilzM6WaRsR3997Rs8j7yy/YLd93vduiq3q4nUHT3QX/Xdci7ACQVM6eWFNlRm
CQdNiFjMVKlpEU6MJ5x3saplaPsVyv9MWxFEVERJMQ+1++bn1DEyrrgqEKdiNf69
CwIvxDDAexZwlvBvGw2+dcc4xhtONiw7VHAULJqDH+hxN6ioyn+OcfbtsBZ40j/a
P/EuhJjEs3a3ALfY8iA1g8uvhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuZRMB6
fYeosKkXp3S4hNpA5zLKMB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2
NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0dj
UHAyb1RSR1Z0VEp2a2tuNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAW3m3kPckAqxp8R2q5rThCNUybfQX7NfEXDZ0inxplUQ1o4HrvAHAR
65rFGiyu7dxC4/2G/RtDNMx9TySOBG6Z/b0eh5DXrtx5UKZCUWHBPyPWWRfznY8F
pWNTzRaavRY/87v9Sp/48MYaSYJDi5oonjKG1hmLvpbZcyVD8Qk80Vke2/Vttq1W
MJgVqUZSXBu2Fm+GlX+GxKGguzsXEnFed1UjnOrx84fz68J0ksC6rfJ9CvKHUvVH
efYac5JjRaAFaaKGV+c/S96WNkoWjmYn6V4A+kGodUI3imSuvFQcDUPPCOCSUZsO
XR9cYqZ86QJVimQMLv20ULvZwcO0kGbd
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:39 2025 by rpki-client