Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
File:                     NNz0cp9FgmKIjvB6K9RnX24xE4A.mft (raw, json)
Hash identifier:          hzSGPQL6X/oEQS4cZrho1jd4PPDIqfSL93pl+325T0I=
Subject key identifier:   F7:4E:5B:91:91:09:1D:45:3D:96:FA:F8:6E:8C:B7:37:4D:44:3E:6D
Authority key identifier: 34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
Certificate issuer:       /CN=A9157B7F/serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
Certificate serial:       0657
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
Manifest number:          0650
Signing time:             Thu 30 Jan 2025 22:27:48 +0000
Manifest this update:     Thu 30 Jan 2025 22:27:47 +0000
Manifest next update:     Thu 06 Feb 2025 22:27:47 +0000
Files and hashes:         1: NNz0cp9FgmKIjvB6K9RnX24xE4A.crl (hash: ijS4D6lO6CxhSkIx/kInnbyipWmDKLwx/5mqlX8BTb4=)
                          2: AE27A8A671B311EBB90BB364C4F9AE02.roa (hash: zKqUOk2enQVo+KwTKKBvY1Ib1LdBjKOEZObmTpDLQzs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623 (0x657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B7F/serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
        Validity
            Not Before: Jan 30 22:27:47 2025 GMT
            Not After : Feb  6 22:27:47 2025 GMT
        Subject: CN=679bfce3-bf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b0:d9:40:8b:12:59:f4:6d:d6:08:7d:00:09:
                    16:07:ea:ed:06:52:a4:a0:a0:72:c2:01:4e:35:42:
                    f9:63:94:b8:36:14:06:2b:0f:dc:b5:a9:e6:39:e3:
                    1d:56:1c:e8:68:e9:7a:2a:54:61:a4:90:b6:45:12:
                    c9:15:93:68:80:46:f2:d0:43:7e:3c:a9:0f:84:ba:
                    dd:6c:11:24:32:71:fe:69:3a:96:3e:b1:34:ee:ff:
                    2d:fc:47:ec:92:ff:fc:79:fb:e2:51:9e:46:db:ae:
                    06:72:aa:56:70:98:00:c2:3e:19:da:a7:ec:8d:39:
                    37:06:62:a3:5f:3c:a1:80:84:f0:8e:ab:b5:27:ef:
                    4c:78:3d:78:52:4c:3b:0f:63:4b:10:21:94:64:2c:
                    3c:f0:f8:2c:fc:87:59:57:70:d7:ca:06:01:92:22:
                    9c:3d:fb:5a:10:ad:17:fe:87:19:18:35:71:a3:68:
                    ce:f1:a7:0e:25:2d:68:71:39:a4:e5:c0:36:73:9a:
                    9a:fc:c6:0b:1a:b7:53:43:bc:51:27:08:a2:ba:91:
                    18:b7:fa:54:f2:3f:d7:a9:4a:5e:6d:a7:ab:8a:f6:
                    8f:83:92:fa:a5:ce:96:6f:3d:94:3e:59:49:61:40:
                    5a:e3:b4:ba:4d:bb:20:de:2e:53:54:e1:3b:94:b8:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:5B:91:91:09:1D:45:3D:96:FA:F8:6E:8C:B7:37:4D:44:3E:6D
            X509v3 Authority Key Identifier:
                keyid:34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:fc:ad:15:d9:13:e4:76:a6:0c:a1:01:d9:68:c0:84:0c:
         b5:4f:25:07:29:9b:f8:bb:26:44:6d:31:c5:a4:e3:c0:e1:74:
         cc:7e:05:b5:36:17:c8:e8:d5:db:aa:7d:16:b1:5c:41:2b:be:
         f5:c4:c7:cd:eb:6a:9a:71:59:ad:c2:2d:ef:ba:fb:3b:94:97:
         6f:9e:dd:7a:38:69:fc:a2:9c:a3:8f:13:4f:ca:99:62:94:34:
         ae:8a:31:b8:b1:95:af:46:2a:a1:3a:cb:6a:97:d4:df:56:b9:
         ae:2f:59:1e:65:2b:92:ac:71:df:a0:e0:a8:c3:b7:0e:32:e1:
         7e:44:ff:80:8e:03:01:01:b1:8b:cf:37:23:0e:3b:29:74:04:
         ac:55:d9:18:61:d8:a8:ab:f9:46:21:ed:2b:43:da:00:72:bf:
         ea:0a:13:f8:3c:60:8a:26:0a:9d:b7:1f:22:3a:3f:d4:53:d7:
         0d:f8:ec:f9:2a:d8:80:2f:89:46:dc:30:ae:41:26:64:08:56:
         5b:60:8c:ee:1e:3d:93:1b:2b:97:94:06:13:9f:cb:47:f9:eb:
         ca:b2:0c:f3:fb:7a:af:ae:df:39:f8:ab:e7:e3:63:00:ce:cb:
         45:99:15:c4:cd:ab:00:e2:3e:94:ec:c1:83:8f:80:d6:5f:18:
         82:39:d3:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdCN0YxMTAvBgNVBAUTKDM0RENGNDcyOUY0NTgyNjI4ODhFRjA3QTJCRDQ2NzVG
NkUzMTEzODAwHhcNMjUwMTMwMjIyNzQ3WhcNMjUwMjA2MjIyNzQ3WjAYMRYwFAYD
VQQDEw02NzliZmNlMy1iZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA37DZQIsSWfRt1gh9AAkWB+rtBlKkoKBywgFONUL5Y5S4NhQGKw/ctanmOeMd
VhzoaOl6KlRhpJC2RRLJFZNogEby0EN+PKkPhLrdbBEkMnH+aTqWPrE07v8t/Efs
kv/8efviUZ5G264GcqpWcJgAwj4Z2qfsjTk3BmKjXzyhgITwjqu1J+9MeD14Ukw7
D2NLECGUZCw88Pgs/IdZV3DXygYBkiKcPftaEK0X/ocZGDVxo2jO8acOJS1ocTmk
5cA2c5qa/MYLGrdTQ7xRJwiiupEYt/pU8j/XqUpebaerivaPg5L6pc6Wbz2UPllJ
YUBa47S6Tbsg3i5TVOE7lLhIrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdOW5GR
CR1FPZb6+G6MtzdNRD5tMB8GA1UdIwQYMBaAFDTc9HKfRYJiiI7weivUZ19uMROA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I3Ri8zN0I4MkM1MDcx
QjIxMUVCQjQ0QTg0NjNDNEY5QUUwMi9OTnowY3A5RmdtS0lqdkI2SzlSblgyNHhF
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05OejBjcDlGZ21LSWp2QjZLOVJuWDI0eEU0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0I3Ri8zN0I4MkM1MDcxQjIxMUVCQjQ0QTg0NjNDNEY5QUUwMi9OTnowY3A5Rmdt
S0lqdkI2SzlSblgyNHhFNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4uPytFdkT5HamDKEB2WjAhAy1TyUHKZv4uyZEbTHFpOPA4XTMfgW1
NhfI6NXbqn0WsVxBK771xMfN62qacVmtwi3vuvs7lJdvnt16OGn8opyjjxNPypli
lDSuijG4sZWvRiqhOstql9TfVrmuL1keZSuSrHHfoOCow7cOMuF+RP+AjgMBAbGL
zzcjDjspdASsVdkYYdioq/lGIe0rQ9oAcr/qChP4PGCKJgqdtx8iOj/UU9cN+Oz5
KtiAL4lG3DCuQSZkCFZbYIzuHj2TGyuXlAYTn8tH+evKsgzz+3qvrt85+Kvn42MA
zstFmRXEzasA4j6U7MGDj4DWXxiCOdMm
-----END CERTIFICATE-----