Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
File:                     9h-6phkp0QD6mdvUgM6MLE7nP_E.mft (raw, json)
Hash identifier:          e+g9lxDUDXVpuKa9YbJsc1A8RDpiOkBA9ufy7833oZ4=
Subject key identifier:   68:43:62:D7:21:5A:0D:DE:50:C6:ED:A2:79:5F:26:4B:EB:64:D8:9A
Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1
Certificate issuer:       /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
Certificate serial:       0A7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
Manifest number:          0A6D
Signing time:             Thu 30 Jan 2025 19:46:07 +0000
Manifest this update:     Thu 30 Jan 2025 19:46:06 +0000
Manifest next update:     Thu 06 Feb 2025 19:46:06 +0000
Files and hashes:         1: 9h-6phkp0QD6mdvUgM6MLE7nP_E.crl (hash: qE/BrreUg5exQG+E9nrgZXTGO51gGlXzbeerPZkiIzo=)
                          2: FDF734905C9D11EA91DB3C7CC4F9AE02.roa (hash: vXdhueOKeH2L+EhcuXNxIR6NEBaIJ+rO+WquQADkcYg=)
                          3: 8DB89FC2572311EA9D4ED562C4F9AE02.roa (hash: uIlmxyBkIRVTtfqtlVJMMghD2D4RDYW/jdv8jycrnJo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2683 (0xa7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
        Validity
            Not Before: Jan 30 19:46:06 2025 GMT
            Not After : Feb  6 19:46:06 2025 GMT
        Subject: CN=679bd6ff-e31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:2f:ab:a5:64:cd:d8:66:44:b4:56:d1:c7:
                    e6:a3:0e:76:08:bc:24:1e:8e:09:08:f8:4a:11:9a:
                    ba:e2:37:eb:97:d1:40:1a:ab:b1:7a:6e:c3:2e:13:
                    f3:89:8d:4c:2b:13:0f:36:38:f3:99:83:7a:b2:4a:
                    0b:12:71:24:7b:a6:82:98:05:df:27:40:05:e3:e7:
                    a1:9d:fe:1f:34:1b:03:de:01:cb:69:ff:2b:6f:74:
                    6a:e8:fd:57:f4:60:a3:a8:f4:4f:18:ea:2d:5a:5e:
                    e9:a0:4d:c1:dc:3e:56:da:c1:bb:a4:9c:2b:91:83:
                    ed:f6:62:b2:76:a9:aa:89:bb:1f:d1:5c:3e:e8:19:
                    8d:62:cc:9b:eb:48:9f:fd:50:6b:73:bb:42:1f:98:
                    c2:5c:66:ad:db:1c:a8:e7:e6:df:d8:64:12:cc:56:
                    48:cf:3b:f7:d3:94:f8:54:95:0a:5a:bb:0f:c2:45:
                    ce:dd:17:46:e2:51:94:93:0c:c6:77:19:53:b4:d6:
                    47:8c:25:05:7a:38:88:91:b0:10:f9:08:86:4a:d8:
                    44:b4:25:71:8e:13:d6:ab:fa:38:7d:a0:78:f0:22:
                    04:3b:6f:be:40:63:30:02:e4:b4:e8:ad:33:bc:94:
                    87:6c:65:d9:2a:21:af:cb:6f:c0:b3:0d:5c:d3:b7:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:43:62:D7:21:5A:0D:DE:50:C6:ED:A2:79:5F:26:4B:EB:64:D8:9A
            X509v3 Authority Key Identifier:
                keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5c:03:35:3c:fa:31:98:11:e8:78:df:20:95:cd:6a:5f:fd:
         a1:27:59:da:83:8b:12:ee:44:87:74:bd:1f:72:b0:70:ea:66:
         3b:6b:02:be:e9:50:45:69:b0:1c:58:06:16:2b:48:54:81:4f:
         13:43:00:42:c9:e7:5d:1e:72:0c:c1:9f:0d:fc:0e:b0:7f:47:
         27:7e:ed:29:ef:0e:45:42:03:f9:0a:01:b4:58:01:45:7b:e1:
         00:94:fc:da:94:dc:a2:8a:cf:37:fb:9f:05:ba:64:db:f2:04:
         fd:96:3d:46:a6:46:8c:c6:70:ee:80:cc:da:c8:06:39:2a:9d:
         39:db:97:00:13:19:c4:7a:d9:86:a0:63:b8:fb:9a:47:71:5f:
         1e:b3:1d:73:e6:f3:ce:ab:b9:71:90:1d:26:7b:31:04:3d:14:
         b9:77:e3:f4:cb:a3:b3:f2:df:d0:0a:b2:e1:32:a0:44:67:fb:
         34:8c:79:b8:3c:ba:00:0c:ee:3b:1c:b6:28:c0:ba:07:81:c7:
         9e:02:f6:9c:54:b9:89:67:1b:3d:ff:6e:76:72:07:1c:25:7a:
         8b:3c:c9:e3:be:cb:7d:df:23:7f:ff:54:ff:72:68:37:f0:4b:
         c9:f6:a8:20:48:98:f8:5b:6a:35:3d:3e:c2:93:fc:7e:a6:3d:
         9f:88:af:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVBRkIxMTAvBgNVBAUTKEY2MUZCQUE2MTkyOUQxMDBGQTk5REJENDgwQ0U4QzJD
NEVFNzNGRjEwHhcNMjUwMTMwMTk0NjA2WhcNMjUwMjA2MTk0NjA2WjAYMRYwFAYD
VQQDEw02NzliZDZmZi1lMzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmzMvq6VkzdhmRLRW0cfmow52CLwkHo4JCPhKEZq64jfrl9FAGquxem7DLhPz
iY1MKxMPNjjzmYN6skoLEnEke6aCmAXfJ0AF4+ehnf4fNBsD3gHLaf8rb3Rq6P1X
9GCjqPRPGOotWl7poE3B3D5W2sG7pJwrkYPt9mKydqmqibsf0Vw+6BmNYsyb60if
/VBrc7tCH5jCXGat2xyo5+bf2GQSzFZIzzv305T4VJUKWrsPwkXO3RdG4lGUkwzG
dxlTtNZHjCUFejiIkbAQ+QiGSthEtCVxjhPWq/o4faB48CIEO2++QGMwAuS06K0z
vJSHbGXZKiGvy2/Asw1c07c57wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhDYtch
Wg3eUMbtonlfJkvrZNiaMB8GA1UdIwQYMBaAFPYfuqYZKdEA+pnb1IDOjCxO5z/x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUFGQi8wOTRGNzQ2RTU0
RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBRRDZtZHZVZ002TUxFN25Q
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzloLTZwaGtwMFFENm1kdlVnTTZNTEU3blBfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUFGQi8wOTRGNzQ2RTU0RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBR
RDZtZHZVZ002TUxFN25QX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyXAM1PPoxmBHoeN8glc1qX/2hJ1nag4sS7kSHdL0fcrBw6mY7awK+
6VBFabAcWAYWK0hUgU8TQwBCyeddHnIMwZ8N/A6wf0cnfu0p7w5FQgP5CgG0WAFF
e+EAlPzalNyiis83+58FumTb8gT9lj1GpkaMxnDugMzayAY5Kp0525cAExnEetmG
oGO4+5pHcV8esx1z5vPOq7lxkB0mezEEPRS5d+P0y6Oz8t/QCrLhMqBEZ/s0jHm4
PLoADO47HLYowLoHgceeAvacVLmJZxs9/252cgccJXqLPMnjvst93yN//1T/cmg3
8EvJ9qggSJj4W2o1PT7Ck/x+pj2fiK/p
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:07:32 2025 by rpki-client