Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
File:                     HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json)
Hash identifier:          vpJrwgiLuavudhRd47UyQRJwYioclfyha1x009czBnY=
Subject key identifier:   DE:E0:0B:78:73:B7:58:86:0B:83:B8:6E:33:C3:3F:59:EF:96:E4:3D
Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
Certificate issuer:       /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
Manifest number:          EB
Signing time:             Fri 31 Jan 2025 04:50:39 +0000
Manifest this update:     Fri 31 Jan 2025 04:50:39 +0000
Manifest next update:     Fri 07 Feb 2025 04:50:39 +0000
Files and hashes:         1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: wcuivoRjabRVXcWhzLRpewh02RXFbEFRLdObs/jMTO4=)
                          2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: +DFbuZzGxszdyJtAe1BcKeDGzlcNhntBmdYrhogMeeI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
        Validity
            Not Before: Jan 31 04:50:39 2025 GMT
            Not After : Feb  7 04:50:39 2025 GMT
        Subject: CN=679c569f-558d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:d2:7c:7d:fa:3f:cc:59:a0:b6:15:68:cc:
                    47:27:31:02:3a:c9:94:a7:2b:8a:06:c2:6c:9b:1f:
                    44:56:7c:b3:0a:a7:66:14:f8:76:05:7c:ac:71:b7:
                    dd:44:12:b0:92:4f:1d:d7:68:47:7c:02:f9:e0:f8:
                    b6:38:fa:a5:86:8d:0d:e7:7f:e5:ee:f0:ad:ea:57:
                    20:23:3d:73:fc:6d:db:31:10:de:69:72:67:8c:fd:
                    d9:2e:6f:a0:e7:2d:17:0f:d5:76:8d:70:d9:f4:59:
                    3f:ba:ec:14:c1:e5:fe:63:81:de:1b:79:2c:df:6a:
                    d3:70:0a:c5:d4:6f:f5:ac:5b:88:20:97:57:1a:9e:
                    b7:ae:70:08:08:ef:b1:ea:42:1b:6d:b3:9b:bb:67:
                    7c:c8:b5:f3:f6:26:18:76:f2:ee:62:2b:1d:cd:b1:
                    34:4a:11:00:cb:50:fd:cc:dd:a8:b4:d1:7f:ef:84:
                    ba:52:4f:9a:c0:9a:5f:5c:fd:62:5d:25:91:74:13:
                    1a:25:55:95:83:e4:26:88:01:80:88:aa:a3:b2:eb:
                    6b:7c:af:91:8e:03:5a:53:3f:f2:a1:66:8b:8a:c4:
                    4d:92:d1:dc:cf:f4:db:f9:c5:2c:b1:6a:38:4c:73:
                    19:09:55:fb:85:39:11:04:de:e2:61:89:32:d9:20:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E0:0B:78:73:B7:58:86:0B:83:B8:6E:33:C3:3F:59:EF:96:E4:3D
            X509v3 Authority Key Identifier:
                keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:56:3c:4e:16:5a:82:99:ce:11:c9:19:6d:c3:e2:64:f4:76:
         e1:92:57:3b:43:9e:12:ff:d5:09:47:5f:8e:62:db:ee:8a:d6:
         51:03:43:f5:2e:60:8b:16:52:9d:07:45:16:8b:5a:3c:30:92:
         0d:e4:81:8c:c3:33:24:60:10:c4:e5:2c:54:06:36:ce:17:06:
         0b:f5:2f:26:34:fa:1f:19:1e:1b:a3:c4:aa:91:3a:06:ec:3a:
         4b:d4:e9:a8:59:4f:32:f2:8c:75:b6:85:14:01:09:6e:af:79:
         86:c8:ce:b8:2a:46:8c:93:53:73:1a:3b:e3:ac:e7:02:6d:19:
         1d:81:34:da:15:c6:72:03:b2:87:9b:2d:7f:bb:22:4e:13:2c:
         e0:7a:c9:fc:76:6a:f3:38:79:db:e3:db:e4:38:29:ed:57:3b:
         f8:6e:f3:53:76:23:05:70:5a:46:49:30:d8:b1:72:83:83:03:
         c4:d2:0a:30:e6:8a:5b:07:9d:b6:01:29:70:69:d9:0d:d3:36:
         39:4a:47:97:f7:55:10:b5:86:21:94:ee:6f:4a:97:93:69:1b:
         a3:b1:6d:03:af:65:f3:b3:cf:cc:e4:02:d5:b0:a5:f5:15:e7:
         5b:31:c9:b5:6d:48:2c:1a:5c:9d:6c:4f:7a:26:5b:06:bf:70:
         ef:4b:9b:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFEQzQxMTAvBgNVBAUTKDFERDFDQkJDNURGNUJERkFCQkIzQURBRjEyQjAwMjU2
QjdGMThEMTIwHhcNMjUwMTMxMDQ1MDM5WhcNMjUwMjA3MDQ1MDM5WjAYMRYwFAYD
VQQDEw02NzljNTY5Zi01NThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2TSfH36P8xZoLYVaMxHJzECOsmUpyuKBsJsmx9EVnyzCqdmFPh2BXyscbfd
RBKwkk8d12hHfAL54Pi2OPqlho0N53/l7vCt6lcgIz1z/G3bMRDeaXJnjP3ZLm+g
5y0XD9V2jXDZ9Fk/uuwUweX+Y4HeG3ks32rTcArF1G/1rFuIIJdXGp63rnAICO+x
6kIbbbObu2d8yLXz9iYYdvLuYisdzbE0ShEAy1D9zN2otNF/74S6Uk+awJpfXP1i
XSWRdBMaJVWVg+QmiAGAiKqjsutrfK+RjgNaUz/yoWaLisRNktHcz/Tb+cUssWo4
THMZCVX7hTkRBN7iYYky2SBRywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7gC3hz
t1iGC4O4bjPDP1nvluQ9MB8GA1UdIwQYMBaAFB3Ry7xd9b36u7OtrxKwAla38Y0S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC82MTQxNUY1OEE5
RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZmcTdzNjJ2RXJBQ1ZyZnhq
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hkSEx2RjMxdmZxN3M2MnZFckFDVnJmeGpSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QURDNC82MTQxNUY1OEE5RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZm
cTdzNjJ2RXJBQ1ZyZnhqUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIVjxOFlqCmc4RyRltw+Jk9Hbhklc7Q54S/9UJR1+OYtvuitZRA0P1
LmCLFlKdB0UWi1o8MJIN5IGMwzMkYBDE5SxUBjbOFwYL9S8mNPofGR4bo8SqkToG
7DpL1OmoWU8y8ox1toUUAQlur3mGyM64KkaMk1NzGjvjrOcCbRkdgTTaFcZyA7KH
my1/uyJOEyzgesn8dmrzOHnb49vkOCntVzv4bvNTdiMFcFpGSTDYsXKDgwPE0gow
5opbB522ASlwadkN0zY5SkeX91UQtYYhlO5vSpeTaRujsW0Dr2Xzs8/M5ALVsKX1
FedbMcm1bUgsGlydbE96JlsGv3DvS5uO
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:43 2025 by rpki-client