Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
File:                     GQQ80InJeU-nj0WlTqtfK26Rju4.mft (raw, json)
Hash identifier:          DBO1F05mp3Bmx5xFlOHz3n6sZhqwdPRSVi15+2UbzmY=
Subject key identifier:   47:57:E9:E0:1E:F6:13:57:6F:41:D7:D2:E6:8B:89:3F:A5:1F:CB:FA
Authority key identifier: 19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
Certificate issuer:       /CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
Manifest number:          0142
Signing time:             Fri 31 Jan 2025 03:32:39 +0000
Manifest this update:     Fri 31 Jan 2025 03:32:38 +0000
Manifest next update:     Fri 07 Feb 2025 03:32:38 +0000
Files and hashes:         1: GQQ80InJeU-nj0WlTqtfK26Rju4.crl (hash: rcGz7secI5p/DBScHMEGeYtMh82q2fEACIpvENKJ0g0=)
                          2: DFC9BF30F14E11ED992E1316C4F9AE02.roa (hash: OU5KcZHZ3xkQgEaHszLfMVM61GV8iQUJWprw5u91teE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
        Validity
            Not Before: Jan 31 03:32:38 2025 GMT
            Not After : Feb  7 03:32:38 2025 GMT
        Subject: CN=679c4456-bdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:77:d7:a3:96:5e:3e:e1:29:76:ac:f7:6b:
                    73:27:c4:b1:da:67:d9:43:44:4e:8a:3e:bb:af:59:
                    c8:4a:32:11:f5:ae:6d:70:f6:7e:df:20:89:5f:1b:
                    34:e3:42:c0:ff:07:82:fa:4e:23:d3:e2:20:48:f7:
                    b5:8c:3a:7d:8a:11:3c:cd:72:5e:aa:45:0d:54:67:
                    19:96:63:d1:c1:fe:aa:1a:30:13:d4:d8:51:43:09:
                    c4:12:c2:cb:0f:1e:49:be:65:08:46:8f:19:ce:44:
                    fd:a8:35:f4:6a:96:ba:f5:ce:0e:b0:41:03:e3:c7:
                    2e:12:fb:99:43:cb:07:d5:70:b2:aa:a1:56:b6:63:
                    2b:62:95:ca:5a:6e:27:76:b8:b5:62:4a:69:10:95:
                    d4:8a:13:5a:12:ae:1d:e1:16:ca:7f:26:7c:de:46:
                    13:31:61:11:b6:65:aa:9b:a6:e1:47:a4:a5:8e:f4:
                    03:55:70:68:4c:38:ae:46:16:37:aa:67:df:23:36:
                    1f:1e:d3:f7:f5:42:05:05:d3:5c:da:82:a5:2b:bd:
                    bb:82:35:fd:f1:8c:b8:7b:41:df:a0:05:c7:22:e3:
                    65:b1:d3:24:b5:a2:68:73:81:32:60:60:0e:08:ce:
                    77:3a:96:ea:56:f5:09:b2:7b:2f:eb:f7:af:2a:ac:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:57:E9:E0:1E:F6:13:57:6F:41:D7:D2:E6:8B:89:3F:A5:1F:CB:FA
            X509v3 Authority Key Identifier:
                keyid:19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8b:a7:63:3d:6f:6e:26:66:ba:dc:e5:54:b3:64:d2:fd:c3:
         38:61:11:46:4d:d0:fb:32:66:72:de:53:4d:5d:62:19:16:90:
         44:c7:99:f1:c4:45:cf:c3:a9:04:ba:06:bc:44:75:25:64:0f:
         a4:88:70:40:21:57:5b:5f:57:4f:d7:76:11:ba:10:87:6b:19:
         72:cc:43:89:f5:f7:b6:61:fa:27:87:72:18:87:25:11:02:71:
         c8:11:a1:61:f4:02:4d:50:ff:46:82:c3:c3:91:33:18:62:80:
         61:de:ef:3a:a4:3e:97:04:c3:f0:5a:ba:4c:b7:cc:54:ac:22:
         0f:c6:14:f8:68:9c:d2:be:2e:e2:64:c1:df:23:3b:c6:04:8f:
         1c:91:ac:78:38:b4:50:79:6a:7c:ea:1b:5d:66:b9:cb:c8:e5:
         87:c7:07:6d:6a:a0:03:df:a9:4a:fb:cd:4d:c9:8e:84:5f:0c:
         b1:c0:6d:4d:ea:0c:e3:d7:de:1d:dc:20:df:f2:34:71:6e:81:
         de:3e:bd:6e:3c:ac:de:d2:82:4c:8f:e2:10:29:89:19:1d:b5:
         27:1a:0d:e9:17:a2:cf:18:ce:a7:4c:67:e7:df:6e:87:d8:f4:
         e9:4a:af:78:90:49:70:80:78:42:43:41:83:ef:c8:96:7f:65:
         6c:01:ba:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU3QUExMTAvBgNVBAUTKDE5MDQzQ0QwODlDOTc5NEZBNzhGNDVBNTRFQUI1RjJC
NkU5MThFRUUwHhcNMjUwMTMxMDMzMjM4WhcNMjUwMjA3MDMzMjM4WjAYMRYwFAYD
VQQDEw02NzljNDQ1Ni1iZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8d316OWXj7hKXas92tzJ8Sx2mfZQ0ROij67r1nISjIR9a5tcPZ+3yCJXxs0
40LA/weC+k4j0+IgSPe1jDp9ihE8zXJeqkUNVGcZlmPRwf6qGjAT1NhRQwnEEsLL
Dx5JvmUIRo8ZzkT9qDX0apa69c4OsEED48cuEvuZQ8sH1XCyqqFWtmMrYpXKWm4n
dri1YkppEJXUihNaEq4d4RbKfyZ83kYTMWERtmWqm6bhR6SljvQDVXBoTDiuRhY3
qmffIzYfHtP39UIFBdNc2oKlK727gjX98Yy4e0HfoAXHIuNlsdMktaJoc4EyYGAO
CM53OpbqVvUJsnsv6/evKqy8cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdX6eAe
9hNXb0HX0uaLiT+lH8v6MB8GA1UdIwQYMBaAFBkEPNCJyXlPp49FpU6rXytukY7u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTdBQS9DMTgzNUQ1Q0Yx
NDgxMUVEQjczMTk2MERDNEY5QUUwMi9HUVE4MEluSmVVLW5qMFdsVHF0ZksyNlJq
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dRUTgwSW5KZVUtbmowV2xUcXRmSzI2Ump1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTdBQS9DMTgzNUQ1Q0YxNDgxMUVEQjczMTk2MERDNEY5QUUwMi9HUVE4MEluSmVV
LW5qMFdsVHF0ZksyNlJqdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCi6djPW9uJma63OVUs2TS/cM4YRFGTdD7MmZy3lNNXWIZFpBEx5nx
xEXPw6kEuga8RHUlZA+kiHBAIVdbX1dP13YRuhCHaxlyzEOJ9fe2Yfonh3IYhyUR
AnHIEaFh9AJNUP9GgsPDkTMYYoBh3u86pD6XBMPwWrpMt8xUrCIPxhT4aJzSvi7i
ZMHfIzvGBI8ckax4OLRQeWp86htdZrnLyOWHxwdtaqAD36lK+81NyY6EXwyxwG1N
6gzj194d3CDf8jRxboHePr1uPKze0oJMj+IQKYkZHbUnGg3pF6LPGM6nTGfn326H
2PTpSq94kElwgHhCQ0GD78iWf2VsAbqi
-----END CERTIFICATE-----