Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
File:                     eDj_-XHbpCvN2NjzdFXwsoSbedc.mft (raw, json)
Hash identifier:          mO/5Nzro84zSTcvHswEWhXq+diXaegdEYMS5xnE3Al4=
Subject key identifier:   7D:8B:EF:F8:FC:19:A2:9F:91:2B:B4:F7:80:83:1C:AF:D0:D2:EB:36
Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
Certificate issuer:       /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
Manifest number:          D7
Signing time:             Fri 31 Jan 2025 04:46:32 +0000
Manifest this update:     Fri 31 Jan 2025 04:46:32 +0000
Manifest next update:     Fri 07 Feb 2025 04:46:32 +0000
Files and hashes:         1: eDj_-XHbpCvN2NjzdFXwsoSbedc.crl (hash: SWtIQiNgqHN/NuZ/PFzUUtZIC74QjGdyaWhVRhr5BTs=)
                          2: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (hash: dKUIWl8erdDyFZKjf2ms5iCtc7nOGksh5tTJx3endFE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
        Validity
            Not Before: Jan 31 04:46:32 2025 GMT
            Not After : Feb  7 04:46:32 2025 GMT
        Subject: CN=679c55a8-7192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:2c:20:85:fc:63:34:7f:94:ea:7d:c5:92:
                    1e:19:d0:3d:91:39:f8:93:2a:c8:70:61:6c:e2:61:
                    ea:93:28:a7:c5:42:84:68:8f:a8:2f:fd:ad:c4:9b:
                    f1:ec:01:12:ac:eb:0e:9f:f4:b0:d0:e3:ca:2a:a0:
                    bf:ea:cc:9c:f3:23:b5:16:ad:a2:aa:00:55:e2:f8:
                    5e:a0:00:87:c9:c5:00:94:85:95:6c:d4:c4:30:21:
                    f8:b6:62:f6:81:b9:6d:d8:97:3c:9d:fc:d8:52:76:
                    8f:28:ec:db:f4:9b:de:71:a8:09:a3:93:b3:19:bd:
                    fe:46:86:55:ff:d7:f4:68:04:66:c9:55:16:35:22:
                    4d:01:f2:59:c5:9d:15:36:7e:92:b1:f5:fe:ae:58:
                    2b:2b:33:e4:2e:db:10:eb:62:8c:77:42:df:1b:aa:
                    4c:60:f8:f3:ca:27:8e:4b:81:60:02:dd:4c:2c:a7:
                    06:5c:33:24:c4:a2:9f:65:4d:c5:92:af:8e:6b:c1:
                    8e:6d:9c:6c:60:d5:49:8a:11:7b:e4:23:75:a4:13:
                    16:7a:7e:04:34:8c:31:af:af:8b:ed:0c:94:8b:97:
                    eb:c5:f5:5d:f9:38:11:ab:1f:00:f4:43:1b:30:b2:
                    a7:54:cf:cf:f9:c5:6e:3e:6c:6f:03:d2:c2:39:db:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8B:EF:F8:FC:19:A2:9F:91:2B:B4:F7:80:83:1C:AF:D0:D2:EB:36
            X509v3 Authority Key Identifier:
                keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c6:a3:4e:a8:4c:4f:5a:fc:94:3b:cb:29:d5:f6:0e:da:af:
         b9:3a:d2:f8:6e:f4:e6:f0:f6:b5:50:b5:72:1e:a7:f5:2a:dd:
         67:1d:3b:2a:b2:7e:84:29:a5:1a:e9:68:49:1a:6f:69:ff:23:
         b1:9d:55:6f:e5:ca:54:d3:a1:ea:4b:56:4f:5d:6d:25:20:76:
         e8:da:a7:e0:bd:9f:5f:ce:db:14:f3:d8:eb:14:58:4c:3f:04:
         a9:cd:3a:95:4e:75:03:85:b3:0d:91:49:28:f5:6a:59:61:13:
         f7:00:2e:e2:8b:d4:6c:22:c9:6d:67:ce:8c:f0:84:e1:97:14:
         62:65:31:a6:6a:43:32:2c:48:92:f5:ef:88:6f:34:3b:6f:68:
         7e:f4:01:d1:4f:b9:14:1b:71:cb:69:30:07:3c:6c:90:00:dc:
         8b:64:07:02:57:f0:c2:ee:d2:15:ec:ec:d6:51:bf:8d:32:bf:
         a4:b7:7f:af:5c:24:68:fb:12:2c:e9:e6:f3:6e:f6:d9:7f:c6:
         c5:c5:2a:39:08:2d:6d:5d:ac:b5:53:e0:7d:4a:6c:aa:27:e5:
         e4:46:3c:63:99:23:8a:78:a4:80:3c:04:82:f4:bd:ba:db:3b:
         06:33:65:44:b6:aa:33:55:c3:31:d1:f4:4d:3f:2f:df:1f:8d:
         50:c9:3b:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE5QzgxMTAvBgNVBAUTKDc4MzhGRkY5NzFEQkE0MkJDREQ4RDhGMzc0NTVGMEIy
ODQ5Qjc5RDcwHhcNMjUwMTMxMDQ0NjMyWhcNMjUwMjA3MDQ0NjMyWjAYMRYwFAYD
VQQDEw02NzljNTVhOC03MTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDEsIIX8YzR/lOp9xZIeGdA9kTn4kyrIcGFs4mHqkyinxUKEaI+oL/2txJvx
7AESrOsOn/Sw0OPKKqC/6syc8yO1Fq2iqgBV4vheoACHycUAlIWVbNTEMCH4tmL2
gblt2Jc8nfzYUnaPKOzb9JvecagJo5OzGb3+RoZV/9f0aARmyVUWNSJNAfJZxZ0V
Nn6SsfX+rlgrKzPkLtsQ62KMd0LfG6pMYPjzyieOS4FgAt1MLKcGXDMkxKKfZU3F
kq+Oa8GObZxsYNVJihF75CN1pBMWen4ENIwxr6+L7QyUi5frxfVd+TgRqx8A9EMb
MLKnVM/P+cVuPmxvA9LCOdtzbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2L7/j8
GaKfkSu094CDHK/Q0us2MB8GA1UdIwQYMBaAFHg4//lx26QrzdjY83RV8LKEm3nX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTlDOC9EQkJCMDlGRTlB
M0ExMUVFQTY3NTg5N0NDNEY5QUUwMi9lRGpfLVhIYnBDdk4yTmp6ZEZYd3NvU2Jl
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VEal8tWEhicEN2TjJOanpkRlh3c29TYmVkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTlDOC9EQkJCMDlGRTlBM0ExMUVFQTY3NTg5N0NDNEY5QUUwMi9lRGpfLVhIYnBD
dk4yTmp6ZEZYd3NvU2JlZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGxqNOqExPWvyUO8sp1fYO2q+5OtL4bvTm8Pa1ULVyHqf1Kt1nHTsq
sn6EKaUa6WhJGm9p/yOxnVVv5cpU06HqS1ZPXW0lIHbo2qfgvZ9fztsU89jrFFhM
PwSpzTqVTnUDhbMNkUko9WpZYRP3AC7ii9RsIsltZ86M8IThlxRiZTGmakMyLEiS
9e+IbzQ7b2h+9AHRT7kUG3HLaTAHPGyQANyLZAcCV/DC7tIV7OzWUb+NMr+kt3+v
XCRo+xIs6ebzbvbZf8bFxSo5CC1tXay1U+B9SmyqJ+XkRjxjmSOKeKSAPASC9L26
2zsGM2VEtqozVcMx0fRNPy/fH41QyTsD
-----END CERTIFICATE-----