Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
File:                     IRoCHoq99NvyBwgibMgyj9JBMd8.mft (raw, json)
Hash identifier:          RencLHRpmydUa+d5J9Lmo5FLC9ZOp7LTxJvlFQZcZ/Q=
Subject key identifier:   16:FF:FE:CE:7F:6E:DE:17:30:4D:44:15:D4:C7:BC:4C:BE:FA:BE:5A
Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF
Certificate issuer:       /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
Manifest number:          30
Signing time:             Fri 31 Jan 2025 06:43:32 +0000
Manifest this update:     Fri 31 Jan 2025 06:43:31 +0000
Manifest next update:     Fri 07 Feb 2025 06:43:31 +0000
Files and hashes:         1: IRoCHoq99NvyBwgibMgyj9JBMd8.crl (hash: OUoC2szF+PTUPpDVNUeGtuNNLCgn/Jurh4HRE4c90+I=)
                          2: E01390DA9B4B11EFB0C10385C4F9AE02.roa (hash: 0x5TkGiSHnyFFskMts4EHmJ6yY3ZwtNmM36DRNUAT7Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
        Validity
            Not Before: Jan 31 06:43:31 2025 GMT
            Not After : Feb  7 06:43:31 2025 GMT
        Subject: CN=679c7114-ce90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:c4:43:9c:49:f8:05:69:6d:3e:a3:8c:c1:
                    f7:a3:59:06:7a:1c:0c:0f:7e:cb:a3:01:e4:6e:74:
                    3b:ef:65:90:d7:e0:4c:c4:c8:bb:39:d6:45:cb:85:
                    4c:3f:6b:a7:90:25:ae:22:c5:ee:32:30:ed:5e:6c:
                    0d:62:f9:b2:4e:e7:d1:f5:eb:84:a1:c0:ad:1e:db:
                    5a:1c:c7:4d:65:15:3f:f0:de:24:12:91:65:53:ce:
                    13:f5:95:38:99:75:ae:a4:9c:76:04:2f:78:e9:d5:
                    e2:58:b0:c4:2b:e4:70:e9:3f:b5:e6:72:f7:d7:bc:
                    89:5c:f2:dc:63:c4:0e:0d:62:0f:a4:28:21:1e:1e:
                    9f:78:fa:44:b6:f6:a8:0e:2f:5b:bf:ce:18:87:9f:
                    d7:9f:e5:32:e8:f1:8d:9d:9d:be:39:9b:71:4a:2e:
                    45:99:be:01:e2:7a:1f:3c:f5:ad:0e:25:74:7b:bd:
                    1d:70:53:13:bd:b9:58:b8:a9:0f:b9:c8:ea:77:9e:
                    0e:eb:04:a9:21:85:fb:2e:03:17:38:9e:8d:0f:28:
                    1c:cf:de:17:b1:7b:52:52:a0:43:18:49:e2:51:bd:
                    df:37:8e:05:9f:14:b8:e7:23:f5:b9:21:a9:70:97:
                    e1:20:d9:0d:67:6f:ec:22:3e:1b:12:f3:cb:31:57:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FF:FE:CE:7F:6E:DE:17:30:4D:44:15:D4:C7:BC:4C:BE:FA:BE:5A
            X509v3 Authority Key Identifier:
                keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:24:40:bb:73:fa:a6:59:f6:b0:b9:17:c8:85:d1:0a:96:95:
         59:57:81:07:81:80:5c:6c:2f:94:cb:07:d4:01:71:f5:fc:07:
         51:09:7b:49:3f:4d:e4:d1:ce:bf:71:3c:07:e5:fd:51:5f:cf:
         ca:a0:23:7c:2b:a7:26:f8:b7:7a:c9:41:6f:50:93:60:5f:d4:
         be:63:f3:38:20:4f:1a:66:21:aa:ca:35:6f:92:42:e7:a0:35:
         41:13:64:95:cd:c6:ce:41:8f:4e:35:cf:6d:19:d7:4b:49:9f:
         fc:ad:c3:f6:c6:33:f7:18:46:0c:3a:1e:1a:ad:09:61:2b:3a:
         eb:f7:b9:91:5e:c0:c7:17:54:76:8e:73:4e:4a:6d:3d:b5:50:
         e8:e0:d9:c1:33:07:dc:4b:46:af:2c:01:06:7c:71:d0:79:5c:
         54:82:3d:27:8f:b1:96:cc:34:71:ed:91:35:d2:3b:4f:1c:73:
         76:ca:37:d8:84:60:38:79:0c:90:c8:c1:79:0f:5c:8a:0c:33:
         5c:f8:75:13:8e:d4:7e:6b:48:be:0b:e8:cb:4e:4e:ed:c5:2b:
         5a:e0:14:42:f6:44:51:cb:06:35:9c:0f:65:2b:0c:87:bb:ed:
         7c:0b:98:8f:9b:79:77:dc:c7:93:c1:69:06:5e:ef:38:bd:e1:
         66:f8:c8:cd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MEYxMTExMC8GA1UEBRMoMjExQTAyMUU4QUJERjREQkYyMDcwODIyNkNDODMyOEZE
MjQxMzFERjAeFw0yNTAxMzEwNjQzMzFaFw0yNTAyMDcwNjQzMzFaMBgxFjAUBgNV
BAMTDTY3OWM3MTE0LWNlOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDssRDnEn4BWltPqOMwfejWQZ6HAwPfsujAeRudDvvZZDX4EzEyLs51kXLhUw/
a6eQJa4ixe4yMO1ebA1i+bJO59H164ShwK0e21ocx01lFT/w3iQSkWVTzhP1lTiZ
da6knHYEL3jp1eJYsMQr5HDpP7XmcvfXvIlc8txjxA4NYg+kKCEeHp94+kS29qgO
L1u/zhiHn9ef5TLo8Y2dnb45m3FKLkWZvgHieh889a0OJXR7vR1wUxO9uVi4qQ+5
yOp3ng7rBKkhhfsuAxc4no0PKBzP3hexe1JSoEMYSeJRvd83jgWfFLjnI/W5Ialw
l+Eg2Q1nb+wiPhsS88sxVxp5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFv/+zn9u
3hcwTUQV1Me8TL76vlowHwYDVR0jBBgwFoAUIRoCHoq99NvyBwgibMgyj9JBMd8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRjExL0UxNjM4OTEwOUE3
QzExRUY4NDk1MEQzM0M0RjlBRTAyL0lSb0NIb3E5OU52eUJ3Z2liTWd5ajlKQk1k
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSVJvQ0hvcTk5TnZ5QndnaWJNZ3lqOUpCTWQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw
RjExL0UxNjM4OTEwOUE3QzExRUY4NDk1MEQzM0M0RjlBRTAyL0lSb0NIb3E5OU52
eUJ3Z2liTWd5ajlKQk1kOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFckQLtz+qZZ9rC5F8iF0QqWlVlXgQeBgFxsL5TLB9QBcfX8B1EJe0k/
TeTRzr9xPAfl/VFfz8qgI3wrpyb4t3rJQW9Qk2Bf1L5j8zggTxpmIarKNW+SQueg
NUETZJXNxs5Bj041z20Z10tJn/ytw/bGM/cYRgw6HhqtCWErOuv3uZFewMcXVHaO
c05KbT21UOjg2cEzB9xLRq8sAQZ8cdB5XFSCPSePsZbMNHHtkTXSO08cc3bKN9iE
YDh5DJDIwXkPXIoMM1z4dROO1H5rSL4L6MtOTu3FK1rgFEL2RFHLBjWcD2UrDIe7
7XwLmI+beXfcx5PBaQZe7zi94Wb4yM0=
-----END CERTIFICATE-----