Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File:                     Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier:          IL9O29liiu2i9pUx+/83DXe/9Hvzkvmc58g+SZce2pg=
Subject key identifier:   7D:58:AE:85:4B:E0:1D:01:EA:D7:B2:C8:48:94:23:00:E5:31:EC:FE
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer:       /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number:          29
Signing time:             Fri 31 Jan 2025 06:49:25 +0000
Manifest this update:     Fri 31 Jan 2025 06:49:25 +0000
Manifest next update:     Fri 07 Feb 2025 06:49:25 +0000
Files and hashes:         1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: 7ItDcJApaZDrx4LdXaTFxN0eLvaYB43X+Gjv00t8UOI=)
                          2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
        Validity
            Not Before: Jan 31 06:49:25 2025 GMT
            Not After : Feb  7 06:49:25 2025 GMT
        Subject: CN=679c7275-7643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:3f:a7:4e:28:3e:f1:2a:1e:ed:d4:d7:9b:
                    17:be:3e:c6:ee:9c:6e:70:e0:14:63:2f:a4:c0:9e:
                    5b:b3:bf:c3:64:c3:4c:5f:d4:bf:03:91:11:c1:10:
                    1f:11:b2:e8:ee:a2:d0:36:96:a7:2a:2e:46:41:71:
                    70:6c:9e:c7:20:1b:4e:4d:73:80:9a:80:d3:0e:7f:
                    f2:ba:83:48:c1:08:c6:ca:51:12:84:ea:d2:58:f7:
                    ef:57:c0:a7:58:cc:32:fb:fc:55:b0:5e:00:19:fc:
                    62:0e:1d:07:5f:d0:f8:33:ca:91:b8:6f:fc:08:ce:
                    f9:7c:b0:cb:22:a9:fc:25:20:98:03:28:1b:96:5c:
                    d5:d2:46:7f:bf:60:19:77:03:68:6f:e3:68:d9:d6:
                    3b:b7:ca:90:01:44:48:97:f3:82:0b:a5:c8:bf:86:
                    59:00:53:ab:d6:90:ad:cf:b6:6b:79:8c:5c:1e:91:
                    bb:85:fc:27:88:d7:f3:12:55:08:ce:1c:05:01:6b:
                    7a:52:7a:e0:c5:f4:58:e1:be:81:f5:93:dd:68:03:
                    74:50:f4:15:32:b9:5f:74:5b:2e:ae:80:1c:ea:f8:
                    19:26:40:1d:7b:d1:a4:e5:43:d7:0c:6c:11:1c:fd:
                    7b:80:bd:24:56:8c:61:28:a6:f5:84:fa:92:06:c2:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:AE:85:4B:E0:1D:01:EA:D7:B2:C8:48:94:23:00:E5:31:EC:FE
            X509v3 Authority Key Identifier:
                keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:60:80:9f:fa:ca:13:54:56:f0:12:88:cc:cd:29:e1:da:a0:
         6a:95:46:35:ca:47:41:79:1b:20:96:f0:37:9e:ce:ad:c1:83:
         bc:2c:08:ba:d3:28:7c:02:20:53:1b:d7:14:c6:7d:57:d2:fd:
         83:fe:24:84:ab:29:56:e6:7e:3e:3d:4c:89:cf:e1:cd:fc:d7:
         5f:40:89:85:f4:78:4d:87:58:99:8d:02:c8:72:5d:7b:e8:59:
         28:27:bb:81:97:b6:93:24:37:dc:c4:97:0a:3a:a1:4f:7c:a4:
         0a:2d:43:08:b2:13:34:e2:81:6e:d7:ce:df:09:b5:e1:4c:48:
         26:f3:e8:a8:38:79:02:73:54:4d:5b:b3:03:f2:bc:bf:ca:b5:
         7d:53:0a:1f:62:0b:d6:bc:61:8e:51:e3:e8:23:8c:58:a0:88:
         fc:54:58:4d:c3:29:fe:00:4d:a9:99:fd:fa:d1:5c:0d:70:0f:
         57:2c:75:f1:ca:00:4d:77:10:3a:15:31:47:e2:9e:51:e9:b3:
         c4:54:42:bf:11:1e:24:a0:69:40:32:a9:ad:cc:05:9e:3e:ad:
         ad:e7:3c:c4:21:00:74:15:c1:4c:e3:91:f1:87:53:36:25:2f:
         8d:6a:b5:61:c6:34:4d:d1:bc:63:81:95:3c:05:2f:70:97:da:
         b4:b3:6e:02
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MUJGMDExMC8GA1UEBRMoMjFDRkNFODFEODc1RDVDRjhGNTk2QURCRkNDMzYwMTk2
MUM0NDFFNzAeFw0yNTAxMzEwNjQ5MjVaFw0yNTAyMDcwNjQ5MjVaMBgxFjAUBgNV
BAMTDTY3OWM3Mjc1LTc2NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzeT+nTig+8Soe7dTXmxe+PsbunG5w4BRjL6TAnluzv8Nkw0xf1L8DkRHBEB8R
sujuotA2lqcqLkZBcXBsnscgG05Nc4CagNMOf/K6g0jBCMbKURKE6tJY9+9XwKdY
zDL7/FWwXgAZ/GIOHQdf0PgzypG4b/wIzvl8sMsiqfwlIJgDKBuWXNXSRn+/YBl3
A2hv42jZ1ju3ypABREiX84ILpci/hlkAU6vWkK3Ptmt5jFwekbuF/CeI1/MSVQjO
HAUBa3pSeuDF9FjhvoH1k91oA3RQ9BUyuV90Wy6ugBzq+BkmQB170aTlQ9cMbBEc
/XuAvSRWjGEopvWE+pIGwi2RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfViuhUvg
HQHq17LISJQjAOUx7P4wHwYDVR0jBBgwFoAUIc/Ogdh11c+PWWrb/MNgGWHEQecw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwLzlGNTkxRThFQTQx
NTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFl
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSWNfT2dkaDExYy1QV1dyYl9NTmdHV0hFUWVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx
QkYwLzlGNTkxRThFQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMt
UFdXcmJfTU5nR1dIRVFlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADxggJ/6yhNUVvASiMzNKeHaoGqVRjXKR0F5GyCW8Deezq3Bg7wsCLrT
KHwCIFMb1xTGfVfS/YP+JISrKVbmfj49TInP4c38119AiYX0eE2HWJmNAshyXXvo
WSgnu4GXtpMkN9zElwo6oU98pAotQwiyEzTigW7Xzt8JteFMSCbz6Kg4eQJzVE1b
swPyvL/KtX1TCh9iC9a8YY5R4+gjjFigiPxUWE3DKf4ATamZ/frRXA1wD1csdfHK
AE13EDoVMUfinlHps8RUQr8RHiSgaUAyqa3MBZ4+ra3nPMQhAHQVwUzjkfGHUzYl
L41qtWHGNE3RvGOBlTwFL3CX2rSzbgI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:00:53 2025 by rpki-client