Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          MwfaYdK0FtJ3N/08E+erIl0l3noL7ZDjfOzL3+OQ8YM=
Subject key identifier:   E8:53:BE:8E:17:A6:39:CD:57:A6:61:87:09:6A:00:5B:04:F7:86:C1
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       03AF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          039D
Signing time:             Thu 30 Jan 2025 23:32:28 +0000
Manifest this update:     Thu 30 Jan 2025 23:32:27 +0000
Manifest next update:     Thu 06 Feb 2025 23:32:27 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: 0trNYvrEAFC5SJglm+HwX1aOQ92DWTBzqJh5+yDpBMw=)
                          2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: aj80KCIif9eZITuW9nRaN1zZrhEdRJFymu5+h23dMBM=)
                          3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Jan 30 23:32:27 2025 GMT
            Not After : Feb  6 23:32:27 2025 GMT
        Subject: CN=679c0c0b-bd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:22:c2:77:af:3f:ca:4d:7d:50:0a:f0:3f:
                    2d:9a:67:09:fc:8a:26:98:62:bc:c3:6e:2c:5c:5d:
                    8a:db:ca:23:50:31:08:72:be:6d:df:00:3c:a2:b7:
                    a3:ab:e2:d4:ed:df:c0:9c:4a:53:29:55:b0:ba:1c:
                    8b:82:7c:19:78:5f:77:6e:65:03:14:38:aa:03:50:
                    35:1b:0e:69:36:f8:67:b2:4a:36:48:7a:41:a8:5c:
                    41:82:c0:08:ea:41:5b:04:5f:fb:85:18:e6:d2:53:
                    87:8a:c2:ed:67:1e:76:70:e6:d0:26:8f:54:47:54:
                    48:f8:52:5a:f9:44:44:ef:50:1d:a4:5a:65:33:76:
                    2f:c2:65:5f:34:e5:9d:55:c2:30:25:bd:6d:40:b1:
                    d7:4e:28:8b:dd:46:18:67:ad:08:b7:cd:3f:39:2d:
                    ad:d8:4c:83:a6:6b:7b:ec:79:35:27:19:b6:a5:ca:
                    1f:1d:7c:7a:32:a2:d5:f9:44:ab:c5:77:67:08:2d:
                    2c:ed:49:c2:5a:b0:a1:35:f9:17:20:1e:48:67:67:
                    90:3e:98:d8:99:dc:f8:8a:3f:40:8b:a0:b0:b3:b9:
                    52:3b:39:60:d3:be:a6:be:78:35:e4:c7:8d:51:7b:
                    59:6c:25:58:8c:a3:1e:e5:fe:3c:a5:1f:09:eb:b6:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:53:BE:8E:17:A6:39:CD:57:A6:61:87:09:6A:00:5B:04:F7:86:C1
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b2:1e:c4:5d:37:02:1c:ab:52:2d:9a:4a:06:23:bc:25:b7:
         4a:35:e1:38:5c:d9:3d:68:1a:3d:13:a2:16:04:4f:d4:7a:3c:
         59:e2:f6:c5:3a:14:85:72:20:d9:e9:78:98:d4:c4:10:8b:44:
         17:56:4a:a0:bb:bf:e1:46:a9:01:92:4a:02:79:82:ee:c5:a8:
         cb:c1:a7:9c:ca:31:dc:8f:9a:30:4c:c1:1c:11:04:c0:74:64:
         a8:c6:a2:66:57:13:83:a5:f7:af:9e:7c:03:11:9a:17:40:7b:
         8b:09:8c:f8:b8:19:e8:ba:5c:f1:4d:8f:22:e0:21:de:0e:73:
         13:d0:bf:a0:63:2b:9d:f3:95:cd:77:5d:9e:8c:76:37:34:6f:
         2f:2b:2e:76:9e:a6:bd:0e:9b:4a:d4:b6:e3:4c:ee:f0:fd:f4:
         44:2e:79:02:8f:d5:4a:33:ce:37:60:34:c6:89:ea:b2:c5:87:
         40:99:c6:50:36:15:c5:e0:1a:ee:75:54:0d:14:c1:9b:fc:45:
         b1:2c:d5:f0:07:1f:c2:aa:c5:89:8c:7c:df:7b:f7:b5:e8:62:
         fa:94:87:b6:18:89:aa:5c:dc:c8:06:6c:59:10:b7:f1:81:eb:
         33:f5:b7:07:e7:a5:b4:d3:61:5d:e2:6b:b7:b2:f5:d7:00:4c:
         b0:f9:d0:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENkUxMTAvBgNVBAUTKDhEMjAyMDdEMUVEQjVGNUMyRDY2M0IwQTZBMTBCQ0Q0
MEJBRDNBREUwHhcNMjUwMTMwMjMzMjI3WhcNMjUwMjA2MjMzMjI3WjAYMRYwFAYD
VQQDEw02NzljMGMwYi1iZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsOkiwnevP8pNfVAK8D8tmmcJ/IommGK8w24sXF2K28ojUDEIcr5t3wA8orej
q+LU7d/AnEpTKVWwuhyLgnwZeF93bmUDFDiqA1A1Gw5pNvhnsko2SHpBqFxBgsAI
6kFbBF/7hRjm0lOHisLtZx52cObQJo9UR1RI+FJa+URE71AdpFplM3YvwmVfNOWd
VcIwJb1tQLHXTiiL3UYYZ60It80/OS2t2EyDpmt77Hk1Jxm2pcofHXx6MqLV+USr
xXdnCC0s7UnCWrChNfkXIB5IZ2eQPpjYmdz4ij9Ai6Cws7lSOzlg076mvng15MeN
UXtZbCVYjKMe5f48pR8J67ZYMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhTvo4X
pjnNV6ZhhwlqAFsE94bBMB8GA1UdIwQYMBaAFI0gIH0e219cLWY7CmoQvNQLrTre
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS9BNDZCRTU4ODg4
ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgxd3RaanNLYWhDODFBdXRP
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2pTQWdmUjdiWDF3dFpqc0thaEM4MUF1dE90NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUQ2RS9BNDZCRTU4ODg4ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgx
d3RaanNLYWhDODFBdXRPdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwsh7EXTcCHKtSLZpKBiO8JbdKNeE4XNk9aBo9E6IWBE/UejxZ4vbF
OhSFciDZ6XiY1MQQi0QXVkqgu7/hRqkBkkoCeYLuxajLwaecyjHcj5owTMEcEQTA
dGSoxqJmVxODpfevnnwDEZoXQHuLCYz4uBnoulzxTY8i4CHeDnMT0L+gYyud85XN
d12ejHY3NG8vKy52nqa9DptK1LbjTO7w/fRELnkCj9VKM843YDTGieqyxYdAmcZQ
NhXF4BrudVQNFMGb/EWxLNXwBx/CqsWJjHzfe/e16GL6lIe2GImqXNzIBmxZELfx
gesz9bcH56W002Fd4mu3svXXAEyw+dDp
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:08 2025 by rpki-client