Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          D0NFcdqVI9atPHLlfjIYyXcGdSxZlOG3nF6guYDPFa8=
Subject key identifier:   AA:99:B7:A5:10:BC:53:CD:C8:EA:1F:DF:AD:25:05:5C:17:AE:34:B4
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       34A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          3479
Signing time:             Fri 31 Jan 2025 14:33:29 +0000
Manifest this update:     Fri 31 Jan 2025 14:33:28 +0000
Manifest next update:     Fri 07 Feb 2025 14:33:28 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: 7NiPpcZNiTAGiAymX4wmHX/nfjlhR5lsRwFhKZhU6Vc=)
                          2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: LI2pTAtj2FrGkxTBu/kHsrcO7e2WbrdhGE8h6n7f+mA=)
                          3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=)
                          4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: JS1dP/Z3wRNVnOwepT6cYwjkzee8Wo5X7MrAc7I3mlg=)
                          5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: oxQvbEvt1VKVOZrQR/1bF13JTfe0jqTt+sjD6nr8S1U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13476 (0x34a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Jan 31 14:33:28 2025 GMT
            Not After : Feb  7 14:33:28 2025 GMT
        Subject: CN=679cdf38-cb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:29:50:27:62:62:6f:24:b3:d9:4c:50:85:
                    37:a0:6e:59:b1:3c:9c:e5:57:fd:de:e5:bc:b0:f5:
                    2c:2e:ae:bf:df:c0:b9:b6:c6:6f:76:aa:86:89:35:
                    8f:fd:84:51:fd:11:18:7c:96:21:11:4a:f3:1c:bd:
                    6b:3a:e8:3f:7a:eb:d0:f8:5d:0b:07:fd:2f:bb:a6:
                    cc:80:bd:8b:86:db:73:e7:09:d8:8c:64:40:3b:07:
                    b8:c4:27:13:fb:a5:5b:eb:37:75:d9:af:23:67:64:
                    85:a0:20:80:1f:91:a3:cd:a0:43:44:c4:3b:bb:96:
                    98:7d:85:91:50:30:24:9a:31:44:34:dd:2c:cb:00:
                    7f:1f:89:00:66:5c:96:30:e7:e7:b1:e4:a4:bc:1a:
                    7d:5f:94:58:6a:21:48:03:5a:83:e7:e9:9d:2c:e8:
                    ee:ed:dd:d4:62:33:9c:bb:e7:73:a7:1f:d7:28:d3:
                    1a:f0:ca:6b:01:ac:2c:fa:c4:fb:88:9e:f5:ff:cd:
                    72:6f:01:a7:a5:32:aa:84:3c:36:9e:ec:95:99:15:
                    53:e4:65:ae:9e:51:02:23:27:f4:32:ad:5d:19:30:
                    e2:33:cd:17:e7:b1:c0:6d:55:e0:f1:c2:26:fa:79:
                    83:e3:0f:a3:6e:ca:c8:d7:ea:4a:da:63:7d:d2:7d:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:99:B7:A5:10:BC:53:CD:C8:EA:1F:DF:AD:25:05:5C:17:AE:34:B4
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:8f:d4:75:9e:f7:40:da:d1:55:dc:77:e3:65:33:2d:cd:
         3e:a6:63:09:52:ed:5a:f6:71:c7:cf:bd:aa:4f:c7:77:b8:1d:
         31:86:fb:62:f8:83:d6:f2:3f:e0:e1:6e:bf:39:1b:80:19:91:
         7c:63:4a:9e:5a:18:48:a0:b4:30:be:bf:49:4e:92:09:0f:47:
         06:0b:67:c9:de:0f:d8:90:d3:50:ca:60:90:dd:ed:05:da:24:
         3d:60:ac:15:61:66:82:35:16:a7:f9:3b:76:65:47:8c:03:af:
         37:ba:c5:00:58:87:7b:80:9e:cb:70:44:cd:23:80:e0:7c:fa:
         95:11:c1:e2:b3:52:5e:d4:d8:a2:d8:3a:ec:be:80:73:35:ad:
         a0:dc:68:8e:1f:6c:1b:f2:69:4c:aa:43:9b:6a:97:0d:16:79:
         58:44:cd:b0:ca:84:79:2e:f1:02:66:40:54:73:d7:8a:fd:46:
         9b:b3:75:81:5b:65:93:0b:66:be:2e:21:35:06:9a:3d:c8:30:
         eb:44:a9:ff:2e:9e:3f:20:f4:1e:8a:8e:7a:4a:1f:41:3b:26:
         f0:c9:27:d1:9b:b5:83:60:be:d4:a0:bb:8c:bc:10:78:4d:b4:
         34:1a:d7:f8:a3:9a:7b:ad:5a:79:5f:18:6b:1c:0c:53:72:6b:
         5c:95:d0:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2
NzdFMkRDN0IwHhcNMjUwMTMxMTQzMzI4WhcNMjUwMjA3MTQzMzI4WjAYMRYwFAYD
VQQDEw02NzljZGYzOC1jYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6qEpUCdiYm8ks9lMUIU3oG5ZsTyc5Vf93uW8sPUsLq6/38C5tsZvdqqGiTWP
/YRR/REYfJYhEUrzHL1rOug/euvQ+F0LB/0vu6bMgL2Lhttz5wnYjGRAOwe4xCcT
+6Vb6zd12a8jZ2SFoCCAH5GjzaBDRMQ7u5aYfYWRUDAkmjFENN0sywB/H4kAZlyW
MOfnseSkvBp9X5RYaiFIA1qD5+mdLOju7d3UYjOcu+dzpx/XKNMa8MprAaws+sT7
iJ71/81ybwGnpTKqhDw2nuyVmRVT5GWunlECIyf0Mq1dGTDiM80X57HAbVXg8cIm
+nmD4w+jbsrI1+pK2mN90n1LAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqZt6UQ
vFPNyOof360lBVwXrjS0MB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE
ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz
SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv
NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAz4I/UdZ73QNrRVdx342UzLc0+pmMJUu1a9nHHz72qT8d3uB0xhvti
+IPW8j/g4W6/ORuAGZF8Y0qeWhhIoLQwvr9JTpIJD0cGC2fJ3g/YkNNQymCQ3e0F
2iQ9YKwVYWaCNRan+Tt2ZUeMA683usUAWId7gJ7LcETNI4DgfPqVEcHis1Je1Nii
2DrsvoBzNa2g3GiOH2wb8mlMqkObapcNFnlYRM2wyoR5LvECZkBUc9eK/Uabs3WB
W2WTC2a+LiE1Bpo9yDDrRKn/Lp4/IPQeio56Sh9BOybwySfRm7WDYL7UoLuMvBB4
TbQ0Gtf4o5p7rVp5XxhrHAxTcmtcldDh
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:28 2025 by rpki-client