Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier:          QnjBRIP1A/aKKxuY/OGlMB03p/C2vCuXBDHcDrCqFqo=
Subject key identifier:   80:D1:32:D6:58:80:7E:C8:7A:C8:93:0F:09:D5:48:88:7A:6F:D7:29
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       05A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number:          059B
Signing time:             Thu 30 Jan 2025 23:11:56 +0000
Manifest this update:     Thu 30 Jan 2025 23:11:56 +0000
Manifest next update:     Thu 06 Feb 2025 23:11:56 +0000
Files and hashes:         1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: mCADYn+ABTYWc3w1tugcF0W6ee6tkFiAMLcfyjEoaVo=)
                          2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: vGzObFzmUSUm9avmvrIKqnd7FTqkeDv/FQw4GL+SnIE=)
                          3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: mdfptfU1KFsjIZAm1iPXbK29nkG/PT2OQg8PEsvtPkY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440 (0x5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: Jan 30 23:11:56 2025 GMT
            Not After : Feb  6 23:11:56 2025 GMT
        Subject: CN=679c073c-3ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:6d:3e:ea:e8:bc:be:05:e4:36:90:e5:d5:
                    04:33:d3:6f:72:82:bf:3e:32:e3:99:98:ac:de:11:
                    6d:6b:ab:45:5f:cc:c6:72:2b:6b:29:cb:fe:5f:9d:
                    01:96:99:bf:4a:f1:a0:42:6e:6e:34:24:c4:2b:f1:
                    c6:e2:23:98:03:2e:c6:6e:db:23:e4:5e:df:e6:f1:
                    4f:28:90:d4:cb:da:77:20:b3:68:e7:7e:a7:c2:5d:
                    3a:68:61:5a:2b:c7:ea:23:c3:25:d4:42:8d:bd:e1:
                    f0:b7:0f:9a:3c:d2:53:8b:42:ea:1d:89:d9:0f:3f:
                    e3:a9:84:8b:9d:62:0c:02:cc:6f:c0:89:f3:46:85:
                    bd:27:18:5f:a6:c3:f9:ef:fa:58:9c:af:56:59:a8:
                    08:30:c5:37:38:70:96:8a:99:50:65:92:be:16:3c:
                    af:93:eb:ef:73:4c:b9:de:4b:59:29:a3:05:da:c2:
                    d7:fd:03:fc:34:42:ae:bf:e9:c8:54:66:13:2b:5d:
                    f2:52:2f:67:d9:08:36:64:96:2d:24:47:60:00:d0:
                    19:3b:68:b4:fd:93:17:b2:bc:3e:33:a6:f7:49:35:
                    f0:13:fa:fd:a7:94:a7:a9:94:55:19:5f:f9:80:70:
                    bd:34:2a:da:d9:0f:9f:b1:db:3d:a9:b9:2e:36:28:
                    dd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D1:32:D6:58:80:7E:C8:7A:C8:93:0F:09:D5:48:88:7A:6F:D7:29
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ec:70:78:8e:8b:55:7b:49:98:91:61:ec:9e:dd:68:5b:f5:
         33:08:cc:92:d5:a3:42:41:2e:dd:72:56:6e:5d:43:cb:12:ca:
         ba:4d:4b:11:9c:fc:06:fa:71:a7:6c:d6:c2:58:69:81:48:06:
         3a:4c:d0:6b:54:61:34:8f:4e:d5:5b:6b:fa:67:84:06:65:82:
         f7:a9:94:84:dc:86:1e:5d:af:44:c6:65:1f:24:65:ce:b5:43:
         1a:3f:e6:ca:b4:db:4e:eb:d5:46:b0:b0:84:3b:0a:85:a6:53:
         a0:34:8d:89:47:a5:8c:0f:e1:f8:0d:fb:92:db:35:bc:43:f3:
         f2:13:db:1d:7b:b2:2f:cb:08:a0:6b:86:38:53:fb:d7:f5:86:
         52:e5:f6:e2:ad:d1:a6:0c:71:1c:49:22:ab:c9:0e:38:02:3e:
         45:4e:37:9c:51:94:cc:97:58:c4:57:77:0b:03:04:66:33:cd:
         31:20:74:75:45:0b:57:43:b9:59:ee:ca:11:8a:6b:24:c7:ee:
         e3:d7:6f:6b:33:b3:4e:84:82:49:29:0e:3c:e4:7c:1c:f0:b7:
         9d:e2:0a:0e:a3:ed:56:b1:8c:cd:15:82:b1:11:f3:f2:69:95:
         23:00:33:2f:8b:47:66:0c:b4:c3:a9:34:c0:d2:2a:92:c6:21:
         38:76:b6:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF
NzA5OTRGMDMwHhcNMjUwMTMwMjMxMTU2WhcNMjUwMjA2MjMxMTU2WjAYMRYwFAYD
VQQDEw02NzljMDczYy0zZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0FtPurovL4F5DaQ5dUEM9NvcoK/PjLjmZis3hFta6tFX8zGcitrKcv+X50B
lpm/SvGgQm5uNCTEK/HG4iOYAy7Gbtsj5F7f5vFPKJDUy9p3ILNo536nwl06aGFa
K8fqI8Ml1EKNveHwtw+aPNJTi0LqHYnZDz/jqYSLnWIMAsxvwInzRoW9JxhfpsP5
7/pYnK9WWagIMMU3OHCWiplQZZK+Fjyvk+vvc0y53ktZKaMF2sLX/QP8NEKuv+nI
VGYTK13yUi9n2Qg2ZJYtJEdgANAZO2i0/ZMXsrw+M6b3STXwE/r9p5SnqZRVGV/5
gHC9NCra2Q+fsds9qbkuNijdKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDRMtZY
gH7IesiTDwnVSIh6b9cpMB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5
QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTNFNC8yNzUwNTg4MkI5QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZS
MnpteU4wTmJGMDNuQ1pUd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCR7HB4jotVe0mYkWHsnt1oW/UzCMyS1aNCQS7dclZuXUPLEsq6TUsR
nPwG+nGnbNbCWGmBSAY6TNBrVGE0j07VW2v6Z4QGZYL3qZSE3IYeXa9ExmUfJGXO
tUMaP+bKtNtO69VGsLCEOwqFplOgNI2JR6WMD+H4DfuS2zW8Q/PyE9sde7Ivywig
a4Y4U/vX9YZS5fbirdGmDHEcSSKryQ44Aj5FTjecUZTMl1jEV3cLAwRmM80xIHR1
RQtXQ7lZ7soRimskx+7j129rM7NOhIJJKQ485Hwc8Led4goOo+1WsYzNFYKxEfPy
aZUjADMvi0dmDLTDqTTA0iqSxiE4drY3
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:49 2025 by rpki-client