Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
File:                     PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json)
Hash identifier:          wMXhr1zfxgpD/bsKco2wfUVgOdh2T+YyJBdPgmN3xRA=
Subject key identifier:   7A:2B:27:BA:07:CC:B9:58:8A:27:78:7C:B9:64:BD:7B:01:2D:D3:AF
Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
Certificate issuer:       /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Certificate serial:       0782
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
Manifest number:          0768
Signing time:             Thu 30 Jan 2025 21:28:47 +0000
Manifest this update:     Thu 30 Jan 2025 21:28:47 +0000
Manifest next update:     Thu 06 Feb 2025 21:28:47 +0000
Files and hashes:         1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: hGEzoFBvRNn93dv5dvPq8M20rkZ9Akk/ek0vjggB/LI=)
                          2: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=)
                          3: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=)
                          4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=)
                          5: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=)
                          6: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
        Validity
            Not Before: Jan 30 21:28:47 2025 GMT
            Not After : Feb  6 21:28:47 2025 GMT
        Subject: CN=679bef0f-086f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:4d:b4:2d:a4:72:cb:37:4c:af:cd:05:82:
                    b3:cc:9f:17:d2:a6:91:40:aa:92:99:52:bc:ba:e4:
                    fa:3b:3e:fe:0b:74:a5:aa:d3:41:b9:ae:36:65:64:
                    ce:f1:76:ae:74:36:c9:47:e4:ea:31:7e:f2:90:5f:
                    ca:ca:f7:1c:f8:e9:e1:a9:67:93:e1:db:f6:e6:83:
                    67:c2:5e:d1:50:9e:7c:a3:d9:29:09:66:6f:52:07:
                    7a:98:ed:9a:43:67:5f:ad:07:90:de:38:60:2f:a0:
                    cf:31:18:ca:b5:c1:f8:77:54:22:05:d9:23:bd:a6:
                    52:a2:65:0f:6d:cc:78:cb:d1:6e:df:95:ed:66:b3:
                    fe:df:a2:3f:41:6b:94:29:ad:ac:3c:e7:be:f1:d8:
                    49:82:cd:42:c3:d3:57:ce:5f:b4:d2:b8:78:62:8d:
                    e0:5e:e1:b4:0d:7b:03:37:85:2e:2d:9b:ef:2e:68:
                    1a:b7:4a:c1:bf:76:56:42:2a:6c:e7:d6:62:24:1b:
                    d8:2c:b7:32:12:09:9c:79:8a:a4:45:42:64:95:4f:
                    ab:88:63:78:3f:14:22:43:13:f6:b2:91:6c:80:80:
                    0c:2c:8d:ed:af:ee:f0:35:33:0e:06:5e:03:75:3c:
                    d7:4a:a8:5f:aa:dd:2e:ec:d3:57:5e:85:bd:88:76:
                    08:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2B:27:BA:07:CC:B9:58:8A:27:78:7C:B9:64:BD:7B:01:2D:D3:AF
            X509v3 Authority Key Identifier:
                keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:36:23:16:73:be:65:cb:71:88:ca:6c:4b:12:4f:f1:a3:78:
         69:a0:28:c7:5a:1a:2e:b6:4c:75:4d:d3:76:fe:ea:5d:66:99:
         83:09:b8:a8:bf:53:4c:5d:02:d0:61:4a:ee:f8:04:51:03:ea:
         4a:30:0e:25:3b:40:f6:70:5d:5a:c3:d5:17:c7:9f:13:ea:e7:
         00:38:c2:83:ec:79:9e:39:f2:bc:1a:20:9b:a9:4a:75:dd:f9:
         a2:c7:cc:c9:3d:33:8b:de:f7:dd:48:e8:e9:73:c7:07:3b:44:
         4b:a4:dd:42:26:69:05:08:d6:0a:ab:e4:13:4a:fa:e2:dc:d7:
         02:02:0e:23:55:d3:ad:43:ea:a6:c5:c1:15:18:2b:a7:54:13:
         4a:05:08:dd:9a:2e:5a:1c:19:e9:aa:47:09:0b:9c:a0:4e:35:
         97:8d:bb:e7:d3:01:6f:27:56:ca:28:64:8f:9d:c5:d6:b6:67:
         a7:60:e3:49:1e:cb:a3:c6:6c:b8:92:81:33:cd:16:1c:62:84:
         5b:c0:0c:62:81:0c:ec:4c:f7:93:92:a9:39:11:d9:d0:93:71:
         74:f7:82:e0:b8:c7:fe:af:d4:bd:3d:5e:eb:8c:d6:70:6f:55:
         a1:96:ad:96:35:54:c5:eb:4f:d9:fe:02:af:38:97:7e:37:82:
         4d:5d:6c:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5
OUYwMzQzMjAwHhcNMjUwMTMwMjEyODQ3WhcNMjUwMjA2MjEyODQ3WjAYMRYwFAYD
VQQDEw02NzliZWYwZi0wODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0pNtC2kcss3TK/NBYKzzJ8X0qaRQKqSmVK8uuT6Oz7+C3SlqtNBua42ZWTO
8XaudDbJR+TqMX7ykF/Kyvcc+OnhqWeT4dv25oNnwl7RUJ58o9kpCWZvUgd6mO2a
Q2dfrQeQ3jhgL6DPMRjKtcH4d1QiBdkjvaZSomUPbcx4y9Fu35XtZrP+36I/QWuU
Ka2sPOe+8dhJgs1Cw9NXzl+00rh4Yo3gXuG0DXsDN4UuLZvvLmgat0rBv3ZWQips
59ZiJBvYLLcyEgmceYqkRUJklU+riGN4PxQiQxP2spFsgIAMLI3tr+7wNTMOBl4D
dTzXSqhfqt0u7NNXXoW9iHYItwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHorJ7oH
zLlYiid4fLlkvXsBLdOvMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB
QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp
MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvNiMWc75ly3GIymxLEk/xo3hpoCjHWhoutkx1TdN2/updZpmDCbio
v1NMXQLQYUru+ARRA+pKMA4lO0D2cF1aw9UXx58T6ucAOMKD7HmeOfK8GiCbqUp1
3fmix8zJPTOL3vfdSOjpc8cHO0RLpN1CJmkFCNYKq+QTSvri3NcCAg4jVdOtQ+qm
xcEVGCunVBNKBQjdmi5aHBnpqkcJC5ygTjWXjbvn0wFvJ1bKKGSPncXWtmenYONJ
Hsujxmy4koEzzRYcYoRbwAxigQzsTPeTkqk5EdnQk3F094LguMf+r9S9PV7rjNZw
b1Whlq2WNVTF60/Z/gKvOJd+N4JNXWxB
-----END CERTIFICATE-----