Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft
File:                     3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json)
Hash identifier:          SuM1QeNWSVl1HelX9om6I62MLhVIDwgsx+5oCgLIV7k=
Subject key identifier:   75:72:AC:DF:51:1C:72:2E:DC:AE:89:4B:52:E9:0A:96:11:18:D9:01
Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96
Certificate issuer:       /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft
Manifest number:          012B
Signing time:             Fri 31 Jan 2025 03:44:05 +0000
Manifest this update:     Fri 31 Jan 2025 03:44:05 +0000
Manifest next update:     Fri 07 Feb 2025 03:44:04 +0000
Files and hashes:         1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: xZiCwXHj2OLGyi3eGAVnr6zkApAEAU8/UDaDxZWG62k=)
                          2: F287261014C311EE89C2C021C4F9AE02.roa (hash: h2JTkH5cDdzaWjiM7lCs6Ni3E0awofcV4Wu5xaJdDqI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
        Validity
            Not Before: Jan 31 03:44:05 2025 GMT
            Not After : Feb  7 03:44:04 2025 GMT
        Subject: CN=679c4705-f71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3b:c7:e2:37:75:21:bd:86:9d:8b:2e:d8:ef:
                    31:c1:e6:8d:c0:c6:a5:9f:58:44:1b:f0:68:98:f9:
                    d1:6b:0f:8a:7f:97:1a:c5:87:2b:3c:db:be:89:a6:
                    49:41:09:33:87:bf:4c:3a:7e:0b:b2:13:55:37:c8:
                    9d:87:15:aa:a2:ad:a5:1c:22:ac:91:2c:5b:aa:ee:
                    49:5a:be:21:db:a0:4a:28:17:0d:7a:ce:cd:06:bd:
                    7b:25:67:fa:6b:12:74:fd:13:2f:92:2a:21:f8:8f:
                    92:57:d6:e5:83:06:47:d5:74:ea:65:61:6c:74:ee:
                    3a:3f:71:04:41:0b:84:cd:f7:48:72:33:3b:c0:70:
                    34:f0:df:5d:80:11:4b:de:06:8d:65:9b:21:27:99:
                    6b:67:01:43:5c:d3:39:20:0e:53:62:98:e3:9d:1b:
                    f0:31:c2:ae:dc:52:18:4f:3f:a2:2f:c4:8f:f1:26:
                    c6:20:41:02:1b:04:da:86:2c:90:f2:e4:8b:be:20:
                    a7:9d:f3:f6:70:73:f6:db:e4:79:4e:44:27:fc:81:
                    ec:12:99:37:50:0c:44:ce:f9:df:2b:42:d7:b1:b3:
                    71:28:ba:c0:ca:dc:36:a8:cc:85:45:ab:8a:41:f8:
                    ad:f6:eb:91:be:22:c1:c7:0b:6a:19:18:03:c9:85:
                    d5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:72:AC:DF:51:1C:72:2E:DC:AE:89:4B:52:E9:0A:96:11:18:D9:01
            X509v3 Authority Key Identifier:
                keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e1:1a:d2:a2:e1:98:b0:02:1c:c5:cb:b9:bd:c3:4d:cc:b7:
         b4:1a:67:57:2c:a4:4b:16:79:11:b4:69:a0:3b:4b:d5:74:19:
         fc:62:7e:f8:59:93:ca:3b:6a:10:3a:9d:b6:fb:cd:da:28:10:
         ee:ca:24:b4:21:35:9e:a4:04:b6:35:6d:8a:e6:f3:58:81:53:
         9f:d3:87:bc:71:1e:b8:30:4f:6b:c1:b5:57:28:51:89:85:54:
         b7:04:de:57:ea:c9:52:48:12:57:96:90:1c:1d:c3:0d:83:8f:
         d4:b3:b5:9e:86:30:cb:7a:b9:64:f9:4f:5f:7e:43:85:5e:99:
         95:84:25:1d:a6:45:08:e0:e8:89:c4:11:6e:9f:af:0d:02:11:
         b9:b4:f9:72:93:d8:e1:b2:73:53:b3:df:f5:ce:fb:55:67:4c:
         6c:b5:d0:3d:dd:3c:ae:3a:0f:48:a4:29:f0:8a:7f:41:c2:1b:
         f5:6e:20:8f:6e:29:67:64:c1:c1:78:0c:37:1e:d8:fe:99:4c:
         70:40:01:79:6e:8a:51:64:30:c8:96:6d:0b:d4:81:5e:45:bb:
         16:52:4a:82:47:ca:e4:d3:75:45:cc:5e:6e:02:e4:02:f2:7f:
         19:a0:66:7b:f6:d5:01:f3:e8:be:7e:bb:f0:22:7e:85:59:e5:
         d2:41:be:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC
QzU5ODA1OTYwHhcNMjUwMTMxMDM0NDA1WhcNMjUwMjA3MDM0NDA0WjAYMRYwFAYD
VQQDEw02NzljNDcwNS1mNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9TvH4jd1Ib2GnYsu2O8xweaNwMaln1hEG/BomPnRaw+Kf5caxYcrPNu+iaZJ
QQkzh79MOn4LshNVN8idhxWqoq2lHCKskSxbqu5JWr4h26BKKBcNes7NBr17JWf6
axJ0/RMvkioh+I+SV9blgwZH1XTqZWFsdO46P3EEQQuEzfdIcjM7wHA08N9dgBFL
3gaNZZshJ5lrZwFDXNM5IA5TYpjjnRvwMcKu3FIYTz+iL8SP8SbGIEECGwTahiyQ
8uSLviCnnfP2cHP22+R5TkQn/IHsEpk3UAxEzvnfK0LXsbNxKLrAytw2qMyFRauK
Qfit9uuRviLBxwtqGRgDyYXVWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVyrN9R
HHIu3K6JS1LpCpYRGNkBMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0
QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH
bU1MV1BETHZZYjI4V1lCWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAk4RrSouGYsAIcxcu5vcNNzLe0GmdXLKRLFnkRtGmgO0vVdBn8Yn74
WZPKO2oQOp22+83aKBDuyiS0ITWepAS2NW2K5vNYgVOf04e8cR64ME9rwbVXKFGJ
hVS3BN5X6slSSBJXlpAcHcMNg4/Us7WehjDLerlk+U9ffkOFXpmVhCUdpkUI4OiJ
xBFun68NAhG5tPlyk9jhsnNTs9/1zvtVZ0xstdA93TyuOg9IpCnwin9Bwhv1biCP
bilnZMHBeAw3Htj+mUxwQAF5bopRZDDIlm0L1IFeRbsWUkqCR8rk03VFzF5uAuQC
8n8ZoGZ79tUB8+i+frvwIn6FWeXSQb6v
-----END CERTIFICATE-----