Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
File:                     bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json)
Hash identifier:          XXV605OMXYWZ/Vj/k5mR9AjgUGyfSMhnVo93cKJPUAY=
Subject key identifier:   1E:33:16:DC:85:9F:1F:7C:1B:15:DF:FB:F8:1C:47:C9:20:80:E4:B4
Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
Certificate issuer:       /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Certificate serial:       1067
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
Manifest number:          105F
Signing time:             Fri 31 Jan 2025 17:21:27 +0000
Manifest this update:     Fri 31 Jan 2025 17:21:26 +0000
Manifest next update:     Fri 07 Feb 2025 17:21:26 +0000
Files and hashes:         1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: bmLngc9e+P2Hdh1PYW5f1jGG9QGoROKZ/7GzT+PrlOw=)
                          2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4199 (0x1067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
        Validity
            Not Before: Jan 31 17:21:26 2025 GMT
            Not After : Feb  7 17:21:26 2025 GMT
        Subject: CN=679d0697-b857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:fe:e5:75:89:6b:7a:8e:3f:10:5b:cb:c9:
                    1f:80:08:e3:8c:ff:92:7a:ac:9b:56:4d:1e:27:a7:
                    fe:c8:dc:71:9f:1c:ce:56:ad:35:83:64:c8:d9:3b:
                    f1:3b:e2:cb:d5:a3:92:e0:24:2f:15:08:4c:2e:70:
                    c4:cd:c0:73:35:f4:d4:43:19:9c:03:76:df:94:48:
                    4d:48:6b:43:bc:f1:b9:c0:2d:09:71:3f:ad:5c:af:
                    ae:bb:fd:25:99:52:6a:76:9d:1e:0c:e4:d9:15:64:
                    8b:b2:d4:54:05:da:62:70:f6:27:85:1d:f1:03:46:
                    83:59:21:2f:04:47:71:8e:37:6d:13:64:72:e9:27:
                    94:e1:2e:56:6a:28:90:fb:37:c4:4c:3b:3f:7e:c9:
                    0a:72:aa:29:e9:7d:48:2d:33:6e:fb:2f:15:1e:ce:
                    a7:84:86:3a:28:33:9a:34:a4:c4:32:a6:68:b3:f4:
                    70:79:2f:a7:54:35:19:9b:d5:c6:75:a1:bb:fe:ce:
                    db:0b:0a:b4:10:f3:5e:d3:1d:7c:a5:c1:53:73:56:
                    0f:53:c7:b6:53:d4:3a:df:05:8d:95:d3:ca:f1:1e:
                    e6:7e:3b:09:8d:fa:a3:eb:d7:4d:4d:4f:35:0c:61:
                    71:a6:7d:50:c8:36:df:e7:54:26:34:15:15:16:37:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:33:16:DC:85:9F:1F:7C:1B:15:DF:FB:F8:1C:47:C9:20:80:E4:B4
            X509v3 Authority Key Identifier:
                keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a0:09:49:ab:fc:c8:75:43:3b:14:a9:3d:bb:77:95:14:4d:
         34:bb:f4:1b:a4:5e:55:d0:82:aa:1e:a7:cb:c5:04:0e:3d:da:
         9f:d3:d7:2d:32:79:00:61:f1:e6:80:f9:84:bc:08:5a:ba:4d:
         50:46:e4:e3:85:be:18:f9:f9:f7:b2:8b:00:bd:2e:5a:b5:94:
         9b:b0:4f:d6:31:3e:7b:d4:95:1d:a7:16:48:79:75:a0:02:d9:
         e2:ea:c7:5c:cd:1a:cb:6b:b2:59:79:0d:82:71:11:43:da:17:
         b2:d3:79:75:b8:f1:e9:52:73:e3:60:b9:8f:2c:cd:6e:b1:b5:
         c4:da:18:0c:66:5a:6e:68:a4:d3:f1:5c:59:e0:5a:b2:20:0f:
         98:bd:de:b2:96:bb:67:51:cb:54:2f:28:2b:09:96:ef:81:82:
         1d:c9:9d:f1:93:26:f3:e9:09:f4:e0:b9:7f:1a:40:9e:2f:3b:
         05:2b:60:56:02:28:c4:39:13:a2:81:2d:73:31:d4:50:48:d1:
         84:88:31:81:4a:02:ce:96:ef:73:84:21:b9:26:af:24:34:60:
         57:17:b5:e0:3c:f0:66:52:fb:1e:45:ab:03:5e:f4:30:1a:1b:
         c4:57:fe:2a:59:a0:c8:6c:99:39:d3:36:56:2c:30:9b:ba:aa:
         3f:90:83:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD
RTVCMUM1NjEwHhcNMjUwMTMxMTcyMTI2WhcNMjUwMjA3MTcyMTI2WjAYMRYwFAYD
VQQDEw02NzlkMDY5Ny1iODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApmL+5XWJa3qOPxBby8kfgAjjjP+SeqybVk0eJ6f+yNxxnxzOVq01g2TI2Tvx
O+LL1aOS4CQvFQhMLnDEzcBzNfTUQxmcA3bflEhNSGtDvPG5wC0JcT+tXK+uu/0l
mVJqdp0eDOTZFWSLstRUBdpicPYnhR3xA0aDWSEvBEdxjjdtE2Ry6SeU4S5WaiiQ
+zfETDs/fskKcqop6X1ILTNu+y8VHs6nhIY6KDOaNKTEMqZos/RweS+nVDUZm9XG
daG7/s7bCwq0EPNe0x18pcFTc1YPU8e2U9Q63wWNldPK8R7mfjsJjfqj69dNTU81
DGFxpn1QyDbf51QmNBUVFjcqJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4zFtyF
nx98GxXf+/gcR8kggOS0MB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB
QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4
V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx
dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnoAlJq/zIdUM7FKk9u3eVFE00u/QbpF5V0IKqHqfLxQQOPdqf09ct
MnkAYfHmgPmEvAhauk1QRuTjhb4Y+fn3sosAvS5atZSbsE/WMT571JUdpxZIeXWg
Atni6sdczRrLa7JZeQ2CcRFD2hey03l1uPHpUnPjYLmPLM1usbXE2hgMZlpuaKTT
8VxZ4FqyIA+Yvd6ylrtnUctULygrCZbvgYIdyZ3xkybz6Qn04Ll/GkCeLzsFK2BW
AijEOROigS1zMdRQSNGEiDGBSgLOlu9zhCG5Jq8kNGBXF7XgPPBmUvseRasDXvQw
GhvEV/4qWaDIbJk50zZWLDCbuqo/kIOq
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:55 2025 by rpki-client