Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
File:                     GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json)
Hash identifier:          XPJN8ZEIsT2Mi3YS5KQRrwtqt3GxqxdXHFeF0AYxZ9U=
Subject key identifier:   70:E9:A2:FA:FC:38:2A:0F:CA:AC:8F:56:A9:02:0D:17:27:4D:3B:75
Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
Certificate issuer:       /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Certificate serial:       1CF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
Manifest number:          1CBA
Signing time:             Fri 31 Jan 2025 16:11:07 +0000
Manifest this update:     Fri 31 Jan 2025 16:11:06 +0000
Manifest next update:     Fri 07 Feb 2025 16:11:06 +0000
Files and hashes:         1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: rSTc/TgZgN92/CJMM6I42VCoFSWCjD8KfmRp/bBz8qY=)
                          2: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: +CRLrhJsItyG4k1jiQ8QBFKyQAaJTALKMwvCWSzLpEs=)
                          3: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: LQxi9QdmgN0KIei5VG+HIfawwM3z6gP9YFiwzL4bT7s=)
                          4: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: k72xXpjFgZtRFDkXu8iIG0ZStxYnbHZo3Zq2gA8vZLE=)
                          5: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: /bCo7RekDnlVZuMKbnHK4VdOR64JtrHhskm2RjjMIeM=)
                          6: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: nrk3DaY23QVKoexK2vSoORrq05ctVuvDGn2F2Uteovc=)
                          7: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: 8Yo8XmtHUC1h3z2u1AbgBb+SfApNI9FQPc+WFfWHlN4=)
                          8: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: GPelyj6LTGW9gNvuVS/lYKjmlngEjMMSF+z6F6aAJqQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7410 (0x1cf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
        Validity
            Not Before: Jan 31 16:11:06 2025 GMT
            Not After : Feb  7 16:11:06 2025 GMT
        Subject: CN=679cf61b-5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:5c:80:d8:10:30:45:97:13:a0:23:53:c9:
                    cb:2e:13:77:f7:fd:c5:a2:b5:4b:f9:54:30:61:87:
                    b1:e7:6e:06:da:01:7e:5a:d9:b2:89:96:b3:34:b9:
                    67:4d:4d:3b:de:73:ba:47:b5:b4:94:a8:d5:7f:81:
                    b7:8a:ef:89:76:05:fd:cc:35:0f:e1:20:1f:81:7b:
                    57:27:da:02:d5:32:5a:b5:3b:d1:52:9d:81:92:42:
                    41:9a:79:97:52:a8:53:d7:1a:6b:81:05:42:6a:e1:
                    f3:76:4e:16:19:e1:56:f3:22:fd:0f:99:b9:1a:b6:
                    c0:db:80:69:ae:d2:16:41:23:a9:50:27:6d:d5:67:
                    c4:8d:c6:49:7d:ee:f2:07:d8:50:82:bc:d5:d1:3b:
                    7c:41:c5:32:cd:ba:2f:1b:64:7c:d6:86:be:1e:e6:
                    02:6a:51:73:93:79:9b:de:b6:ed:33:d1:76:82:dd:
                    ed:6c:f9:98:ee:13:cc:d0:bd:fd:25:72:a8:9b:75:
                    fa:ff:e8:e6:55:bc:39:6c:93:85:66:41:c7:7d:ca:
                    b1:5d:b4:d2:e2:8c:a7:01:49:2e:89:14:67:f8:89:
                    1f:5f:b8:e7:df:af:58:2c:a3:11:7b:5c:80:0f:05:
                    1d:64:fd:bd:d9:27:a7:43:7d:b3:e1:4e:ae:be:92:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E9:A2:FA:FC:38:2A:0F:CA:AC:8F:56:A9:02:0D:17:27:4D:3B:75
            X509v3 Authority Key Identifier:
                keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:94:31:31:83:84:79:4c:0f:23:09:17:3d:7b:d2:c6:f5:
         91:20:f6:11:fc:84:20:bc:3d:49:95:61:ee:4f:a3:b8:45:8c:
         17:d6:fa:50:71:ea:57:f5:98:7c:6f:ee:fb:03:96:0c:69:67:
         ce:a7:ee:56:2f:81:db:61:f8:a9:47:b1:bb:df:6d:a2:c4:42:
         20:ab:f2:ea:5e:68:38:99:d7:e2:e8:13:9b:cf:e4:87:31:c6:
         d9:21:04:d4:65:7c:2d:fc:59:06:95:18:2d:56:1e:3e:a9:76:
         b1:2e:7c:f2:fe:21:92:72:20:fa:f9:c6:1b:b3:4d:6b:4f:a9:
         1b:39:9c:c3:b8:ed:f1:9b:28:d4:e4:a6:c7:63:9f:65:c0:9a:
         3c:92:1a:a5:47:e9:33:de:2a:9c:88:5b:1c:8e:c8:50:33:42:
         fc:0e:1e:a2:13:4f:15:5e:94:f8:51:df:95:d1:27:82:a5:50:
         44:aa:bb:c2:8c:27:23:31:da:22:fc:f6:92:a5:4f:4b:02:14:
         9c:77:60:aa:e9:ca:04:de:53:3e:13:cd:33:ae:02:5e:66:c9:
         65:d2:2a:0f:36:e7:3d:a1:df:3a:ac:c0:15:a3:c5:2a:a8:e2:
         95:53:57:61:fb:07:c8:47:35:f5:0f:81:b0:94:43:2d:be:55:
         a1:44:ee:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RCRjIxMTAvBgNVBAUTKDFCMTdBQzNEQzk2Q0EyMzQ1MjUwMjNFRkQzNjI3RTky
Q0Q4ODQ3NDgwHhcNMjUwMTMxMTYxMTA2WhcNMjUwMjA3MTYxMTA2WjAYMRYwFAYD
VQQDEw02NzljZjYxYi01NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1fVcgNgQMEWXE6AjU8nLLhN39/3ForVL+VQwYYex524G2gF+WtmyiZazNLln
TU073nO6R7W0lKjVf4G3iu+JdgX9zDUP4SAfgXtXJ9oC1TJatTvRUp2BkkJBmnmX
UqhT1xprgQVCauHzdk4WGeFW8yL9D5m5GrbA24BprtIWQSOpUCdt1WfEjcZJfe7y
B9hQgrzV0Tt8QcUyzbovG2R81oa+HuYCalFzk3mb3rbtM9F2gt3tbPmY7hPM0L39
JXKom3X6/+jmVbw5bJOFZkHHfcqxXbTS4oynAUkuiRRn+IkfX7jn369YLKMRe1yA
DwUdZP292SenQ32z4U6uvpLY6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDpovr8
OCoPyqyPVqkCDRcnTTt1MB8GA1UdIwQYMBaAFBsXrD3JbKI0UlAj79NifpLNiEdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REJGMi9FMzQ0NTAxNkMy
RjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29qUlNVQ1B2MDJKLWtzMklS
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d4ZXNQY2xzb2pSU1VDUHYwMkota3MySVIwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REJGMi9FMzQ0NTAxNkMyRjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29q
UlNVQ1B2MDJKLWtzMklSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQepQxMYOEeUwPIwkXPXvSxvWRIPYR/IQgvD1JlWHuT6O4RYwX1vpQ
cepX9Zh8b+77A5YMaWfOp+5WL4HbYfipR7G7322ixEIgq/LqXmg4mdfi6BObz+SH
McbZIQTUZXwt/FkGlRgtVh4+qXaxLnzy/iGSciD6+cYbs01rT6kbOZzDuO3xmyjU
5KbHY59lwJo8khqlR+kz3iqciFscjshQM0L8Dh6iE08VXpT4Ud+V0SeCpVBEqrvC
jCcjMdoi/PaSpU9LAhScd2Cq6coE3lM+E80zrgJeZsll0ioPNuc9od86rMAVo8Uq
qOKVU1dh+wfIRzX1D4GwlEMtvlWhRO5b
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:43 2025 by rpki-client