Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
File:                     vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json)
Hash identifier:          Qjv7xZ8Jptt4CUxRIMIsJ+Vp4RruK0/MMEQZA9RbDK0=
Subject key identifier:   BD:43:55:AF:E4:69:CC:9D:47:F1:3D:E2:73:E3:DC:FF:DE:2A:F8:27
Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95
Certificate issuer:       /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
Certificate serial:       0D92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
Manifest number:          0D8A
Signing time:             Fri 31 Jan 2025 17:56:11 +0000
Manifest this update:     Fri 31 Jan 2025 17:56:11 +0000
Manifest next update:     Fri 07 Feb 2025 17:56:11 +0000
Files and hashes:         1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: 9us5wuQQLhiiUZ6JOCp0BwljcYBEMafNBckXnYrwTTo=)
                          2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3474 (0xd92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
        Validity
            Not Before: Jan 31 17:56:11 2025 GMT
            Not After : Feb  7 17:56:11 2025 GMT
        Subject: CN=679d0ebb-d826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:21:74:10:7a:38:4a:91:ca:82:ab:56:96:
                    21:a4:68:83:43:a9:1d:9f:51:8f:2f:2e:26:9b:ea:
                    68:0f:05:a7:06:49:66:9b:07:4c:ae:dc:fe:b3:b0:
                    24:96:34:82:25:2f:bd:79:79:b0:81:94:b1:b1:5c:
                    8d:fd:0f:af:61:74:f7:c2:b9:78:a8:9e:7d:29:3a:
                    28:88:d4:4f:98:b6:74:70:ae:22:89:c0:43:48:51:
                    c6:bc:38:ba:d2:81:13:35:ab:60:fb:6a:6b:67:8b:
                    b5:47:2e:a5:b4:bd:30:6e:d6:0c:1b:05:37:45:c9:
                    ce:6a:ed:32:48:46:17:b1:e1:47:ce:34:1a:97:94:
                    ae:29:fa:22:d8:1e:e2:2c:5a:30:5b:40:b5:9a:bc:
                    4f:7d:83:61:f3:24:cf:65:7c:57:c6:ba:a3:0d:32:
                    c3:ad:9e:a3:b7:67:6c:0d:fa:42:7f:d7:ca:7b:2f:
                    51:e4:a6:3b:16:6c:cd:0a:72:0a:34:0b:91:b1:82:
                    47:b8:c2:91:ff:20:ce:37:e8:ba:2d:a1:2f:94:9a:
                    6c:c9:9c:d5:62:01:a2:9b:19:01:6d:59:c5:a8:bf:
                    6a:20:cc:db:04:14:7a:fa:b8:5d:6a:60:e2:e8:f2:
                    69:14:7a:70:99:c2:ea:bc:ad:5d:4c:b0:8b:e5:0d:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:55:AF:E4:69:CC:9D:47:F1:3D:E2:73:E3:DC:FF:DE:2A:F8:27
            X509v3 Authority Key Identifier:
                keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f4:a0:b6:5f:5a:1b:ad:9f:f3:7b:77:89:aa:78:03:57:f2:
         86:81:71:18:48:ec:6e:52:77:96:10:eb:b8:26:fb:43:ce:37:
         da:9c:dc:ea:61:f8:1e:11:de:2b:e2:f2:59:45:72:cd:59:83:
         af:cc:14:c7:65:de:fe:44:59:65:6c:09:f9:fe:67:12:86:10:
         1b:6e:23:9d:50:dc:04:38:3c:56:9f:3d:d0:13:d9:2d:1a:bd:
         3f:66:5a:9e:22:12:b9:4f:7e:e1:8c:17:14:0f:21:b7:72:63:
         89:97:d5:da:cf:05:a0:fd:54:2c:fb:27:1d:57:96:73:ac:51:
         b4:63:72:4c:1b:5e:d9:86:25:46:0b:e7:fb:30:c1:b8:cf:38:
         d9:2c:4b:1c:c0:aa:34:f9:64:5b:3e:91:6c:e7:4b:3f:61:05:
         f0:5e:e3:f4:a3:ae:a5:4f:15:41:89:4b:ee:5a:81:a7:84:bf:
         88:d9:fe:23:10:67:85:df:98:1f:ec:0b:a6:07:58:c7:8f:fd:
         6c:30:ee:79:fc:e1:ac:61:b3:c1:10:a9:6e:52:ff:f0:bd:43:
         cd:3f:b7:ff:42:69:ba:76:13:8b:ee:8d:31:01:d0:42:b9:31:
         b2:49:40:80:92:04:7d:5f:bd:cb:f0:27:53:bc:47:15:cc:c4:
         36:be:d5:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0
RDQwNjY0OTUwHhcNMjUwMTMxMTc1NjExWhcNMjUwMjA3MTc1NjExWjAYMRYwFAYD
VQQDEw02NzlkMGViYi1kODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzjghdBB6OEqRyoKrVpYhpGiDQ6kdn1GPLy4mm+poDwWnBklmmwdMrtz+s7Ak
ljSCJS+9eXmwgZSxsVyN/Q+vYXT3wrl4qJ59KTooiNRPmLZ0cK4iicBDSFHGvDi6
0oETNatg+2prZ4u1Ry6ltL0wbtYMGwU3RcnOau0ySEYXseFHzjQal5SuKfoi2B7i
LFowW0C1mrxPfYNh8yTPZXxXxrqjDTLDrZ6jt2dsDfpCf9fKey9R5KY7FmzNCnIK
NAuRsYJHuMKR/yDON+i6LaEvlJpsyZzVYgGimxkBbVnFqL9qIMzbBBR6+rhdamDi
6PJpFHpwmcLqvK1dTLCL5Q2JaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1DVa/k
acydR/E94nPj3P/eKvgnMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5
OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz
UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAi9KC2X1obrZ/ze3eJqngDV/KGgXEYSOxuUneWEOu4JvtDzjfanNzq
YfgeEd4r4vJZRXLNWYOvzBTHZd7+RFllbAn5/mcShhAbbiOdUNwEODxWnz3QE9kt
Gr0/ZlqeIhK5T37hjBcUDyG3cmOJl9XazwWg/VQs+ycdV5ZzrFG0Y3JMG17ZhiVG
C+f7MMG4zzjZLEscwKo0+WRbPpFs50s/YQXwXuP0o66lTxVBiUvuWoGnhL+I2f4j
EGeF35gf7AumB1jHj/1sMO55/OGsYbPBEKluUv/wvUPNP7f/Qmm6dhOL7o0xAdBC
uTGySUCAkgR9X73L8CdTvEcVzMQ2vtXA
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:25 2025 by rpki-client