Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
File:                     tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json)
Hash identifier:          QnNNTGoSpArZdFRYTMfPgdUvD4Wtg/Ik/gz5vh2p9Go=
Subject key identifier:   49:D3:AB:E6:23:39:25:75:38:E7:4D:B6:FA:2D:BC:E0:D4:FD:61:88
Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E
Certificate issuer:       /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
Manifest number:          069E
Signing time:             Thu 30 Jan 2025 22:14:39 +0000
Manifest this update:     Thu 30 Jan 2025 22:14:39 +0000
Manifest next update:     Thu 06 Feb 2025 22:14:39 +0000
Files and hashes:         1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: ZWus8K99z6/nJp71Q8AQ3PIIFzfdNzjEsGxlaVDLNiQ=)
                          2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: jBVejEc8SbD5hzJMp0NrZfjCLh7dYPm6cdhWChv4bQs=)
                          3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: /KIPnD9VbEuE/iKTnYpsbUw04cGUOW+7JQdByMj925k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E
        Validity
            Not Before: Jan 30 22:14:39 2025 GMT
            Not After : Feb  6 22:14:39 2025 GMT
        Subject: CN=679bf9cf-7f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:33:ce:33:47:7a:70:6f:94:1c:68:62:9e:
                    cf:35:41:cf:38:db:31:b2:db:6b:fa:72:c3:97:93:
                    c1:31:15:27:12:73:4c:c0:38:63:eb:49:fd:55:4c:
                    88:42:75:04:5e:76:77:12:6e:05:65:3e:62:85:ad:
                    b0:06:6e:c2:e6:ee:0a:f3:d6:0b:94:3f:95:27:29:
                    d8:e7:20:17:27:cd:7d:62:c0:b1:5c:3a:c2:4d:9c:
                    7e:e3:3f:eb:06:ce:9a:52:a7:dd:78:85:78:42:1b:
                    b3:a5:05:60:9a:9b:f2:6d:72:35:ea:d0:c8:c4:28:
                    16:3e:34:1e:54:b0:48:4d:b4:71:0b:ea:3d:68:a4:
                    ca:7d:76:e9:96:d3:94:01:a7:4a:02:f1:32:a4:1d:
                    52:f7:8d:dd:76:fd:ad:09:82:b3:41:78:c5:20:51:
                    cb:ba:9b:96:d4:42:cb:37:e2:6b:4c:b8:c2:86:e8:
                    b9:16:a8:75:08:79:e2:0e:93:ca:93:05:c6:b7:0b:
                    a7:43:c5:59:af:9d:dc:48:b9:84:2a:e3:27:00:51:
                    76:e6:8c:4b:01:b6:a2:f7:2a:25:cb:34:98:c8:d4:
                    8c:71:f6:3b:ea:d2:4d:91:38:d0:d0:24:99:7c:2f:
                    30:9b:ba:24:a2:3a:c2:31:04:cc:e0:f7:3f:3a:7b:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D3:AB:E6:23:39:25:75:38:E7:4D:B6:FA:2D:BC:E0:D4:FD:61:88
            X509v3 Authority Key Identifier:
                keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:9d:b8:11:5d:c5:20:54:b8:08:23:ac:91:46:bd:78:9a:
         84:79:73:21:2e:7b:45:f7:ef:51:9d:7b:d8:f7:7d:19:c5:d8:
         f4:43:04:40:e7:7d:aa:28:81:a0:7d:34:d3:3d:73:97:90:93:
         1f:3a:e6:eb:9c:6a:31:da:59:99:08:9b:09:a6:cd:f4:69:b3:
         80:3f:b6:2b:fa:a6:0c:34:53:f9:66:a7:03:a7:11:61:c4:3f:
         42:b6:c2:f9:02:7d:9d:8d:b2:e9:fc:37:1f:79:c9:07:e9:08:
         0b:7e:c2:3c:55:c0:ed:4f:15:ec:9d:cb:4d:b3:a5:f6:c4:6f:
         1d:bc:2e:01:b3:c2:9a:e4:32:c7:c5:49:db:b2:f9:57:37:37:
         27:f2:dd:92:f6:e6:7f:1a:1d:8d:4c:26:fa:4b:ac:bc:a8:1e:
         80:15:c1:1d:1a:a0:da:54:1f:f7:3f:bb:2f:41:b6:45:1c:e4:
         d6:bb:a1:6c:ee:5a:f7:75:b6:8b:2d:47:40:ca:90:a8:df:2d:
         8c:82:c4:ed:e6:eb:e0:47:5c:2e:0e:33:90:b5:c4:e4:71:6a:
         b4:9f:1a:56:a2:4b:f2:64:01:5a:ba:48:f7:6f:9e:7e:96:1d:
         69:79:74:f3:27:36:22:05:2f:6e:7e:22:03:75:24:e7:73:f8:
         d8:8a:46:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3
RThGMUEwOUUwHhcNMjUwMTMwMjIxNDM5WhcNMjUwMjA2MjIxNDM5WjAYMRYwFAYD
VQQDEw02NzliZjljZi03ZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA23kzzjNHenBvlBxoYp7PNUHPONsxsttr+nLDl5PBMRUnEnNMwDhj60n9VUyI
QnUEXnZ3Em4FZT5iha2wBm7C5u4K89YLlD+VJynY5yAXJ819YsCxXDrCTZx+4z/r
Bs6aUqfdeIV4QhuzpQVgmpvybXI16tDIxCgWPjQeVLBITbRxC+o9aKTKfXbpltOU
AadKAvEypB1S943ddv2tCYKzQXjFIFHLupuW1ELLN+JrTLjChui5Fqh1CHniDpPK
kwXGtwunQ8VZr53cSLmEKuMnAFF25oxLAbai9yolyzSYyNSMcfY76tJNkTjQ0CSZ
fC8wm7okojrCMQTM4Pc/OnsfLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnTq+Yj
OSV1OOdNtvotvODU/WGIMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0
QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3
M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBb/J24EV3FIFS4CCOskUa9eJqEeXMhLntF9+9RnXvY930Zxdj0QwRA
532qKIGgfTTTPXOXkJMfOubrnGox2lmZCJsJps30abOAP7Yr+qYMNFP5ZqcDpxFh
xD9CtsL5An2djbLp/DcfeckH6QgLfsI8VcDtTxXsnctNs6X2xG8dvC4Bs8Ka5DLH
xUnbsvlXNzcn8t2S9uZ/Gh2NTCb6S6y8qB6AFcEdGqDaVB/3P7svQbZFHOTWu6Fs
7lr3dbaLLUdAypCo3y2MgsTt5uvgR1wuDjOQtcTkcWq0nxpWokvyZAFaukj3b55+
lh1peXTzJzYiBS9ufiIDdSTnc/jYikaY
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:55 2025 by rpki-client