Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
File:                     p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft (raw, json)
Hash identifier:          93kolhTq7hcEZ1X3Lzrq4kq9tJfJ2A8JquxXBgnEW7E=
Subject key identifier:   81:D1:24:63:35:9A:18:43:4D:A0:45:F9:48:F5:84:C4:07:93:22:A4
Authority key identifier: A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99
Certificate issuer:       /CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299
Certificate serial:       077D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
Manifest number:          15D2
Signing time:             Fri 31 Jan 2025 17:41:11 +0000
Manifest this update:     Fri 31 Jan 2025 17:41:10 +0000
Manifest next update:     Fri 07 Feb 2025 17:41:10 +0000
Files and hashes:         1: p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl (hash: sj6BvOGdVWvAKAa4K2mw2i5IbNZ/4ZjSL6QeO1VFwd0=)
                          2: 12D5B220296411EDB08A7E54C4F9AE02.roa (hash: IfNUHhPvu7UsBRDPbxmJEbxn+CUXhUXh86S7/wAn8KI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917 (0x77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299
        Validity
            Not Before: Jan 31 17:41:10 2025 GMT
            Not After : Feb  7 17:41:10 2025 GMT
        Subject: CN=679d0b36-d495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:f1:7e:cb:d1:f6:21:5b:15:af:d8:88:fe:
                    17:13:6f:60:ed:fa:55:8c:42:05:20:95:ed:5f:38:
                    b1:62:67:1b:a4:5f:ab:00:ed:d9:08:8d:a9:07:d6:
                    61:e0:fc:4b:14:76:5c:95:27:d8:96:b4:7b:e8:4a:
                    97:44:0d:4b:b9:e6:77:f9:a1:f3:a3:10:b3:9a:60:
                    10:5e:09:78:7f:aa:2e:29:d4:7c:36:bf:b9:80:10:
                    46:1b:4a:13:84:e3:6e:3a:da:27:4c:18:db:3d:4c:
                    e6:c4:0e:48:0e:af:a5:8d:aa:3f:0c:8d:ee:29:da:
                    84:35:bf:41:46:2f:41:24:e2:34:98:d0:62:a8:de:
                    47:6c:89:14:d7:33:56:5e:8d:8c:83:2f:d0:b4:49:
                    13:4a:57:7d:8e:b8:60:79:93:fe:7e:91:1e:2a:54:
                    8c:c6:6e:35:a3:8f:17:79:9a:f9:eb:8b:ef:99:22:
                    74:d9:88:f4:e7:a0:3e:cc:28:b6:75:17:d2:eb:6d:
                    29:d1:b9:98:6a:fb:ef:b9:d6:87:78:79:5c:c5:19:
                    0f:e4:0f:91:b1:2e:f1:79:97:ed:11:df:fb:b5:a1:
                    17:c7:14:0f:ab:d7:8e:ce:cf:9a:32:6f:c2:dd:83:
                    62:db:c3:00:62:7c:eb:a4:f7:2b:13:88:43:f4:f2:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D1:24:63:35:9A:18:43:4D:A0:45:F9:48:F5:84:C4:07:93:22:A4
            X509v3 Authority Key Identifier:
                keyid:A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:08:9d:a9:6b:e8:16:64:92:af:ea:90:cb:3d:47:fe:b9:55:
         71:3c:b0:79:c5:2c:c8:b5:32:c4:85:47:78:f4:eb:60:0d:02:
         8c:04:59:b8:20:5b:a2:40:a6:80:2c:88:dd:5f:e7:8c:47:9e:
         fb:67:0c:16:c6:15:e5:9c:d8:0d:73:e2:eb:67:6a:45:81:9d:
         a2:6a:80:0b:e1:38:1b:d0:06:4a:81:2b:71:11:81:8c:fc:37:
         76:18:53:39:74:57:ed:11:a9:39:0c:c6:d2:d8:a9:be:b9:50:
         61:b2:33:f5:6c:bc:e3:7d:0f:d1:40:35:90:df:0f:6e:6f:51:
         3b:70:d1:46:45:44:5b:82:84:d7:c8:27:41:5e:12:f5:20:00:
         40:6f:04:f7:27:53:a2:d5:6d:c9:81:67:90:2b:98:e5:96:69:
         38:05:bb:15:34:24:e6:18:dc:a5:a4:18:90:9f:2b:6d:22:b2:
         73:ec:69:3f:25:be:66:99:c1:d8:3d:15:56:c4:dd:28:a6:bc:
         d5:53:a0:2d:69:d5:64:1c:3c:9b:c5:a3:49:ed:30:dc:32:1e:
         fa:09:6f:6b:ab:a9:74:0b:9d:99:63:83:b4:6f:29:de:22:49:
         9a:f1:56:5a:53:6a:3b:a9:ca:9b:0d:be:de:90:d6:b6:24:da:
         8e:fc:00:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEQ0YxMTAvBgNVBAUTKEE3ODkwMkY0RjBEODI0QjQwRjQ5NkQ1REZDM0U5RjA2
MzNCNzEyOTkwHhcNMjUwMTMxMTc0MTEwWhcNMjUwMjA3MTc0MTEwWjAYMRYwFAYD
VQQDEw02NzlkMGIzNi1kNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm4vxfsvR9iFbFa/YiP4XE29g7fpVjEIFIJXtXzixYmcbpF+rAO3ZCI2pB9Zh
4PxLFHZclSfYlrR76EqXRA1LueZ3+aHzoxCzmmAQXgl4f6ouKdR8Nr+5gBBGG0oT
hONuOtonTBjbPUzmxA5IDq+ljao/DI3uKdqENb9BRi9BJOI0mNBiqN5HbIkU1zNW
Xo2Mgy/QtEkTSld9jrhgeZP+fpEeKlSMxm41o48XeZr564vvmSJ02Yj056A+zCi2
dRfS620p0bmYavvvudaHeHlcxRkP5A+RsS7xeZftEd/7taEXxxQPq9eOzs+aMm/C
3YNi28MAYnzrpPcrE4hD9PLToQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHRJGM1
mhhDTaBF+Uj1hMQHkyKkMB8GA1UdIwQYMBaAFKeJAvTw2CS0D0ltXfw+nwYztxKZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRDRi9GNEZERjVFRThE
NDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBEWUpMUVBTVzFkX0Q2ZkJqTzNF
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A0a0M5UERZSkxRUFNXMWRfRDZmQmpPM0Vway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkRDRi9GNEZERjVFRThENDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBEWUpM
UVBTVzFkX0Q2ZkJqTzNFcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASCJ2pa+gWZJKv6pDLPUf+uVVxPLB5xSzItTLEhUd49OtgDQKMBFm4
IFuiQKaALIjdX+eMR577ZwwWxhXlnNgNc+LrZ2pFgZ2iaoAL4Tgb0AZKgStxEYGM
/Dd2GFM5dFftEak5DMbS2Km+uVBhsjP1bLzjfQ/RQDWQ3w9ub1E7cNFGRURbgoTX
yCdBXhL1IABAbwT3J1Oi1W3JgWeQK5jllmk4BbsVNCTmGNylpBiQnyttIrJz7Gk/
Jb5mmcHYPRVWxN0oprzVU6AtadVkHDybxaNJ7TDcMh76CW9rq6l0C52ZY4O0byne
Ikma8VZaU2o7qcqbDb7ekNa2JNqO/AAZ
-----END CERTIFICATE-----