Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File:                     kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier:          J+I2dd5DJgRTbMUf31pqr4CuU69Y37kzsZ5Tti+5Gbs=
Subject key identifier:   48:B4:B6:D9:4E:50:CF:BF:D6:74:E7:44:E2:06:D9:0B:50:31:BD:81
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer:       /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial:       0B20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number:          0ABB
Signing time:             Thu 30 Jan 2025 19:49:04 +0000
Manifest this update:     Thu 30 Jan 2025 19:49:03 +0000
Manifest next update:     Thu 06 Feb 2025 19:49:03 +0000
Files and hashes:         1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: 6DLl2SUtWPxFbinuOf8+c5jFDl3E3bFEjY5BZBQvcRQ=)
                          2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: sG5z5F60bRkwe2ogLmkA/1wwRb6ZeVikHH1++i6WLMU=)
                          3: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: OiCqL64kCp2J/PyzoY9CSchJTuWtMok6+NnOGYQZCrA=)
                          4: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: MWul020TY2EQJzghpFUw+RZp3fjWB6k4CzwH1CloCq8=)
                          5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: 2P/JeHiTW086kTL1ZKLZUoTkrgXMZFa/u0jtZlf7/Bo=)
                          6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 1/waXuRUn1IGSXVfPONWMa3UyJu0JHRxsD7xIflOWMg=)
                          7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: x1+smML+yzOczakB5oyzij+JFVA8SbZpm/q9Gzr67+c=)
                          8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: s9ompX+CCM1BRWG5qcbuq6MfN+m/cuQTViMjb9Qf0GI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2848 (0xb20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
        Validity
            Not Before: Jan 30 19:49:03 2025 GMT
            Not After : Feb  6 19:49:03 2025 GMT
        Subject: CN=679bd7b0-cb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:2e:3d:00:e1:aa:6e:98:a7:08:bc:7f:49:
                    f6:90:61:54:35:42:bd:ea:d6:12:9b:17:9d:3d:84:
                    e3:9f:cc:e2:96:1c:69:17:96:86:10:8e:dd:49:92:
                    eb:63:db:6c:08:da:fc:9c:cb:69:89:22:7a:66:73:
                    e9:c0:a7:2e:42:f8:b4:d2:e0:70:23:c5:68:4f:67:
                    30:26:ef:a4:ab:1a:ca:e0:f5:35:75:78:d2:98:81:
                    60:e4:eb:9f:a5:9c:8e:e4:a0:14:58:cf:fd:b8:0b:
                    7a:b3:56:5c:94:41:e1:52:cb:39:ad:f5:4f:ff:bb:
                    3b:e7:bf:81:a0:a0:66:72:01:02:3d:19:2e:27:bc:
                    8d:25:1d:20:bb:35:de:78:bc:6a:cf:46:76:67:8e:
                    ee:90:ad:1e:28:62:52:61:e7:50:df:fe:ae:49:30:
                    26:2c:95:a6:78:4e:57:53:55:17:f5:a8:06:15:da:
                    d4:f1:93:80:67:cc:74:c4:3f:b6:78:00:07:fd:80:
                    30:73:f2:37:22:44:5f:0c:de:7e:81:eb:14:1a:19:
                    1c:26:53:2e:b1:d7:ca:3a:3a:6d:27:ad:38:45:25:
                    4f:e8:5a:6f:98:8b:21:ce:04:e2:1a:53:ae:c6:5b:
                    db:1c:44:8e:fc:54:d7:d2:31:d0:7f:dd:bd:47:e2:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B4:B6:D9:4E:50:CF:BF:D6:74:E7:44:E2:06:D9:0B:50:31:BD:81
            X509v3 Authority Key Identifier:
                keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:c8:34:7b:d1:84:2d:c9:22:7b:20:f3:09:16:7e:54:93:
         43:fb:9b:b9:37:61:3e:17:cd:3a:8e:5f:5b:19:12:2c:c9:f9:
         80:05:58:df:2f:2f:08:c8:42:01:47:2f:af:43:ef:cd:c9:99:
         17:3b:f5:cf:07:5e:7e:bf:52:93:2c:15:b4:37:ca:ed:d8:7b:
         3e:44:cb:06:6f:a2:04:5f:cf:2e:6f:03:f5:43:87:fe:20:48:
         9f:b0:5e:ce:a5:6b:af:56:cb:40:f6:2c:0b:f4:f0:2a:9a:58:
         e0:52:89:36:e3:80:e2:42:87:91:aa:a9:15:2c:ed:4e:eb:9c:
         be:7a:74:15:24:bd:84:a9:be:85:b2:b4:09:83:93:6b:3d:a3:
         19:4e:29:e0:e8:f2:bf:dd:f4:af:d3:3d:da:3a:e8:bc:99:04:
         9f:fc:cd:1e:96:49:56:41:28:f3:11:bf:05:45:6f:ae:76:9d:
         26:3e:83:44:d6:73:1c:16:38:eb:d9:f0:fe:28:5f:c5:57:75:
         cc:50:ae:22:59:89:df:56:7f:e5:ad:d8:8a:40:bd:a4:b8:93:
         b4:bd:f3:00:a7:7a:dd:12:44:4e:98:bf:7b:53:3e:2a:34:9a:
         92:4e:d3:c8:58:65:4a:f2:8b:83:af:dd:e7:a0:a0:d0:19:88:
         40:01:08:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw
QjJEQTAxREUwHhcNMjUwMTMwMTk0OTAzWhcNMjUwMjA2MTk0OTAzWjAYMRYwFAYD
VQQDEw02NzliZDdiMC1jYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6UuPQDhqm6Ypwi8f0n2kGFUNUK96tYSmxedPYTjn8zilhxpF5aGEI7dSZLr
Y9tsCNr8nMtpiSJ6ZnPpwKcuQvi00uBwI8VoT2cwJu+kqxrK4PU1dXjSmIFg5Ouf
pZyO5KAUWM/9uAt6s1ZclEHhUss5rfVP/7s757+BoKBmcgECPRkuJ7yNJR0guzXe
eLxqz0Z2Z47ukK0eKGJSYedQ3/6uSTAmLJWmeE5XU1UX9agGFdrU8ZOAZ8x0xD+2
eAAH/YAwc/I3IkRfDN5+gesUGhkcJlMusdfKOjptJ604RSVP6FpvmIshzgTiGlOu
xlvbHESO/FTX0jHQf929R+JUFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi0ttlO
UM+/1nTnROIG2QtQMb2BMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5
NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82
Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuIMg0e9GELckieyDzCRZ+VJND+5u5N2E+F806jl9bGRIsyfmABVjf
Ly8IyEIBRy+vQ+/NyZkXO/XPB15+v1KTLBW0N8rt2Hs+RMsGb6IEX88ubwP1Q4f+
IEifsF7OpWuvVstA9iwL9PAqmljgUok244DiQoeRqqkVLO1O65y+enQVJL2Eqb6F
srQJg5NrPaMZTing6PK/3fSv0z3aOui8mQSf/M0elklWQSjzEb8FRW+udp0mPoNE
1nMcFjjr2fD+KF/FV3XMUK4iWYnfVn/lrdiKQL2kuJO0vfMAp3rdEkROmL97Uz4q
NJqSTtPIWGVK8ouDr93noKDQGYhAAQhC
-----END CERTIFICATE-----