Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
File:                     PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json)
Hash identifier:          e1VLWfsukfK/NxEw7GvipL9yJidofb55Tf06PX38Z7o=
Subject key identifier:   57:14:21:69:10:73:2A:6E:EB:F0:BB:01:D0:6E:03:93:9E:26:EF:7D
Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
Certificate issuer:       /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
Manifest number:          CB
Signing time:             Fri 31 Jan 2025 04:55:29 +0000
Manifest this update:     Fri 31 Jan 2025 04:55:29 +0000
Manifest next update:     Fri 07 Feb 2025 04:55:29 +0000
Files and hashes:         1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: t6hTxq+H7fHZ+C/O8jnuByd9tdjhHTFVDm8/xVN/cdc=)
                          2: 78321A66068D11EF92608943C4F9AE02.roa (hash: blVnz565/hVxOKVO1xLhYGke1dIuGSft6BcnljQwFaw=)
                          3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: mLl/OI3EV7/JM4Fr1G9RnDxTwZqnfUJgsg+LaOLb7Wc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
        Validity
            Not Before: Jan 31 04:55:29 2025 GMT
            Not After : Feb  7 04:55:29 2025 GMT
        Subject: CN=679c57c1-b16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:48:09:25:b4:93:c4:8a:9c:e5:69:e1:69:
                    f1:03:22:34:f5:66:71:a7:d6:37:45:f6:e9:ee:1e:
                    87:b3:72:3c:d1:19:66:9b:3b:a7:cb:5a:fe:1b:20:
                    2e:df:07:1d:14:44:c7:c7:83:a1:26:47:c7:c0:7a:
                    99:4c:c3:da:03:52:22:b1:6f:8f:32:28:37:8c:fa:
                    6c:b2:a0:33:12:19:a5:83:e6:bb:e8:1b:e7:eb:81:
                    2a:e1:b8:7d:9b:76:2d:8a:18:91:07:51:3c:10:8d:
                    42:9c:22:ac:60:24:9e:14:e5:cb:22:ba:a8:de:b3:
                    52:a3:d8:82:26:84:03:44:93:aa:55:21:05:c4:c9:
                    7d:a7:6a:a5:cc:d8:73:c8:67:06:8d:9d:e5:69:a2:
                    dd:0f:8e:fc:cf:67:a3:53:4e:f5:59:e0:5a:1d:4e:
                    90:c7:86:04:fd:c1:42:9e:ed:96:aa:ea:cd:86:dc:
                    0e:63:12:b5:c6:f1:97:6c:ef:55:82:fe:15:52:d3:
                    96:db:a9:c6:ee:00:fb:ef:60:48:1f:63:39:e3:4e:
                    aa:be:13:72:d2:ff:a4:ce:5a:98:3f:c5:07:c6:eb:
                    26:2c:97:31:5f:ac:b0:0d:01:46:4a:19:29:0e:0a:
                    bf:0c:2a:9b:e1:3a:78:a3:6f:6d:43:1e:0a:72:e9:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:14:21:69:10:73:2A:6E:EB:F0:BB:01:D0:6E:03:93:9E:26:EF:7D
            X509v3 Authority Key Identifier:
                keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:5d:43:13:86:66:53:23:a5:b2:24:ce:2a:c2:5a:e2:f4:7f:
         39:36:1d:bd:8e:2c:ea:da:24:50:fe:a2:38:96:1d:c5:05:ba:
         11:01:c8:e2:39:98:cc:2a:ea:0d:69:7e:a0:6c:2f:e3:d6:86:
         e1:8a:6d:04:8e:82:2c:57:89:2e:da:68:7b:a6:8c:40:e8:2a:
         de:ad:22:3d:31:08:1b:16:8d:b5:87:de:57:a7:0c:f5:98:e3:
         cb:5d:4d:d8:3c:ba:7a:07:a9:12:b1:9c:27:a2:39:1b:68:c2:
         cf:5e:78:cd:b0:b0:6b:c8:e8:c6:e1:e7:18:1e:68:9b:9a:99:
         45:65:41:d5:45:9b:a9:89:1f:61:d9:2f:aa:55:75:2a:af:f3:
         c9:0d:87:ed:d6:3c:ce:27:47:e4:fc:61:62:2a:1b:b0:30:1e:
         e2:fd:7e:33:ec:31:f3:79:07:71:b2:dc:ed:1e:20:47:4d:b5:
         14:73:d7:18:59:db:2b:d4:35:ad:ab:c8:58:e5:60:30:0d:7f:
         dc:29:2d:5e:b9:e9:ab:6f:d1:fc:d2:1c:dc:0a:d1:02:b9:a1:
         24:da:28:b5:35:36:38:69:3c:57:b2:98:17:ae:47:99:b6:f1:
         25:2b:4b:b6:d0:92:60:ff:38:0f:cf:2e:45:7c:26:ea:19:83:
         28:4f:d3:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5
OEREREEzNzIwHhcNMjUwMTMxMDQ1NTI5WhcNMjUwMjA3MDQ1NTI5WjAYMRYwFAYD
VQQDEw02NzljNTdjMS1iMTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcRICSW0k8SKnOVp4WnxAyI09WZxp9Y3Rfbp7h6Hs3I80Rlmmzuny1r+GyAu
3wcdFETHx4OhJkfHwHqZTMPaA1IisW+PMig3jPpssqAzEhmlg+a76Bvn64Eq4bh9
m3YtihiRB1E8EI1CnCKsYCSeFOXLIrqo3rNSo9iCJoQDRJOqVSEFxMl9p2qlzNhz
yGcGjZ3laaLdD478z2ejU071WeBaHU6Qx4YE/cFCnu2WqurNhtwOYxK1xvGXbO9V
gv4VUtOW26nG7gD772BIH2M5406qvhNy0v+kzlqYP8UHxusmLJcxX6ywDQFGShkp
Dgq/DCqb4Tp4o29tQx4KcukQCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcUIWkQ
cypu6/C7AdBuA5OeJu99MB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz
RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0
S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDUXUMThmZTI6WyJM4qwlri9H85Nh29jizq2iRQ/qI4lh3FBboRAcji
OZjMKuoNaX6gbC/j1obhim0EjoIsV4ku2mh7poxA6CrerSI9MQgbFo21h95Xpwz1
mOPLXU3YPLp6B6kSsZwnojkbaMLPXnjNsLBryOjG4ecYHmibmplFZUHVRZupiR9h
2S+qVXUqr/PJDYft1jzOJ0fk/GFiKhuwMB7i/X4z7DHzeQdxstztHiBHTbUUc9cY
Wdsr1DWtq8hY5WAwDX/cKS1euemrb9H80hzcCtECuaEk2ii1NTY4aTxXspgXrkeZ
tvElK0u20JJg/zgPzy5FfCbqGYMoT9OM
-----END CERTIFICATE-----