Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
File:                     U73ibYJfZ3-axChvmmdmH1xJtWk.mft (raw, json)
Hash identifier:          d/JpS+zBo8ZtPZVDI2idWOpWpY7ih3L0sRJlDq6oqLw=
Subject key identifier:   2C:1C:76:7D:26:E3:A7:4F:6F:81:C0:34:4C:F9:F0:9A:56:5A:71:D1
Authority key identifier: 53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
Certificate issuer:       /CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Certificate serial:       08E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
Manifest number:          08C0
Signing time:             Thu 30 Jan 2025 20:37:57 +0000
Manifest this update:     Thu 30 Jan 2025 20:37:57 +0000
Manifest next update:     Thu 06 Feb 2025 20:37:57 +0000
Files and hashes:         1: U73ibYJfZ3-axChvmmdmH1xJtWk.crl (hash: 7MXxcm/UfbxfzeDUWYJ5dJp2V0zVlKEcvN/3QnvnwIw=)
                          2: C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa (hash: oYydxPk4UhXwzQt6ATEzMXRyl5GNnPSrO9reRguBtdM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
        Validity
            Not Before: Jan 30 20:37:57 2025 GMT
            Not After : Feb  6 20:37:57 2025 GMT
        Subject: CN=679be325-129e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:06:01:19:65:24:52:db:31:71:37:f1:74:
                    3f:f0:b2:7f:c0:71:9c:61:7e:52:8b:8c:79:1a:dd:
                    f8:ff:38:5f:48:ec:77:16:3d:04:b5:94:f6:49:5e:
                    8d:87:f6:25:48:61:06:67:28:0d:76:78:1e:fe:61:
                    4b:d0:83:aa:df:c4:f0:e6:89:57:21:60:be:e8:6f:
                    be:27:36:e5:b6:63:3f:6a:e0:f5:0f:0a:ce:b6:54:
                    12:ff:a2:7b:91:f9:74:9a:87:3f:9b:21:7f:37:fe:
                    c8:07:9f:98:bc:ad:15:3d:c7:1a:2a:87:a5:e0:98:
                    dd:30:dd:14:de:9f:3a:d6:f2:aa:8a:7b:71:4a:c1:
                    84:ec:0a:b8:44:79:ce:0d:48:99:b0:d2:69:c0:49:
                    13:54:76:c0:c7:c3:6d:5f:93:54:95:cb:ef:79:88:
                    19:f5:cf:9f:b6:1b:57:48:fb:de:88:ae:9f:b7:2c:
                    84:1d:6d:c6:5f:39:7b:13:32:b2:71:83:d1:c6:4b:
                    ff:3b:b5:53:7c:3d:fe:7e:28:49:e8:f0:3b:74:de:
                    0e:aa:df:a8:5b:d4:05:4b:36:d3:ef:34:5d:ab:96:
                    ef:60:b4:82:d4:b0:f5:f6:7d:73:4a:dd:d8:00:4b:
                    54:cd:42:1b:74:a4:11:97:46:4e:c9:bd:ea:9e:07:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1C:76:7D:26:E3:A7:4F:6F:81:C0:34:4C:F9:F0:9A:56:5A:71:D1
            X509v3 Authority Key Identifier:
                keyid:53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:13:c4:a2:16:fe:c9:3a:e8:4c:0a:b4:7a:7f:27:21:e6:
         d9:e8:1b:28:b1:fd:e8:32:4d:3b:64:fd:4e:f1:a2:d2:78:43:
         18:d4:e8:da:4a:b0:13:d9:43:12:a4:40:fa:cc:df:ae:78:08:
         71:85:76:b2:7f:2a:26:9c:b0:eb:41:c3:d1:5b:66:9c:e6:f2:
         af:60:f8:cc:a3:ae:cd:56:1a:6a:5f:3c:cc:16:7c:00:84:34:
         6e:a3:a2:ce:32:6c:b0:79:6d:36:da:1d:63:2d:21:19:c0:4e:
         c8:05:19:15:46:98:9f:fb:fe:b9:16:3d:e7:c6:8a:5c:a7:c8:
         3b:0b:f3:37:2f:c0:52:bd:a5:ac:5e:03:60:03:a0:10:be:7d:
         85:45:61:29:88:42:de:36:5a:2d:69:76:e8:bb:4b:0b:55:4f:
         c8:77:02:74:29:88:90:e9:ed:34:6c:d2:09:7b:43:b5:64:6d:
         9f:f2:bf:b7:c8:a0:79:d0:a2:8b:11:91:8d:0b:c4:73:3f:22:
         a7:b8:ed:29:e2:12:30:89:b8:07:5f:fe:ad:62:f9:36:1b:b9:
         b2:4f:30:97:87:a9:12:91:01:25:30:88:dd:6d:90:ac:c0:f4:
         48:af:09:2e:83:68:17:b7:76:fa:d8:47:09:b3:01:09:04:76:
         d4:f9:01:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUxQUUxMTAvBgNVBAUTKDUzQkRFMjZEODI1RjY3N0Y5QUM0Mjg2RjlBNjc2NjFG
NUM0OUI1NjkwHhcNMjUwMTMwMjAzNzU3WhcNMjUwMjA2MjAzNzU3WjAYMRYwFAYD
VQQDEw02NzliZTMyNS0xMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlhYGARllJFLbMXE38XQ/8LJ/wHGcYX5Si4x5Gt34/zhfSOx3Fj0EtZT2SV6N
h/YlSGEGZygNdnge/mFL0IOq38Tw5olXIWC+6G++JzbltmM/auD1DwrOtlQS/6J7
kfl0moc/myF/N/7IB5+YvK0VPccaKoel4JjdMN0U3p861vKqintxSsGE7Aq4RHnO
DUiZsNJpwEkTVHbAx8NtX5NUlcvveYgZ9c+fthtXSPveiK6ftyyEHW3GXzl7EzKy
cYPRxkv/O7VTfD3+fihJ6PA7dN4Oqt+oW9QFSzbT7zRdq5bvYLSC1LD19n1zSt3Y
AEtUzUIbdKQRl0ZOyb3qngffUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwcdn0m
46dPb4HANEz58JpWWnHRMB8GA1UdIwQYMBaAFFO94m2CX2d/msQob5pnZh9cSbVp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTFBRS9CNDBCQjFCOEIx
MkUxMUVBOUE5NUI1NkFDNEY5QUUwMi9VNzNpYllKZlozLWF4Q2h2bW1kbUgxeEp0
V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U3M2liWUpmWjMtYXhDaHZtbWRtSDF4SnRXay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTFBRS9CNDBCQjFCOEIxMkUxMUVBOUE5NUI1NkFDNEY5QUUwMi9VNzNpYllKZloz
LWF4Q2h2bW1kbUgxeEp0V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0ixPEohb+yTroTAq0en8nIebZ6Bsosf3oMk07ZP1O8aLSeEMY1Oja
SrAT2UMSpED6zN+ueAhxhXayfyomnLDrQcPRW2ac5vKvYPjMo67NVhpqXzzMFnwA
hDRuo6LOMmyweW022h1jLSEZwE7IBRkVRpif+/65Fj3nxopcp8g7C/M3L8BSvaWs
XgNgA6AQvn2FRWEpiELeNlotaXbou0sLVU/IdwJ0KYiQ6e00bNIJe0O1ZG2f8r+3
yKB50KKLEZGNC8RzPyKnuO0p4hIwibgHX/6tYvk2G7myTzCXh6kSkQElMIjdbZCs
wPRIrwkug2gXt3b62EcJswEJBHbU+QGR
-----END CERTIFICATE-----