Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
File:                     Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json)
Hash identifier:          Kioht2GVlZWTDH/FCnkzRNzeYOi1+lKjZITgJZFCnYk=
Subject key identifier:   F2:76:66:20:9E:6F:62:D3:91:78:0A:93:1C:0B:9B:82:74:58:F1:D6
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Certificate issuer:       /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial:       312F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
Manifest number:          311B
Signing time:             Fri 31 Jan 2025 15:28:04 +0000
Manifest this update:     Fri 31 Jan 2025 15:28:03 +0000
Manifest next update:     Fri 07 Feb 2025 15:28:03 +0000
Files and hashes:         1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: G3wu8/rx+p8+XoAJZ8tSpzBIcJHXabYxXpFZF0sP+J0=)
                          2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: v67lW37yOK1EE+Ye9daXrMBIu71X0smdg0I3L06d6Kc=)
                          3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: W3sK8AJb9TonKRiMiC+GBOGQDVtd6T29hWzDhem/MOk=)
                          4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: pswsUG0qEzo4Lxip378d+/jtEbIDA6UOlyLDYYpHdnM=)
                          5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: h9X/Ha5+JAajFHpKe4PaLiXxR7AjtPZF1G/S4br67kg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12591 (0x312f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
        Validity
            Not Before: Jan 31 15:28:03 2025 GMT
            Not After : Feb  7 15:28:03 2025 GMT
        Subject: CN=679cec03-fb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:eb:83:05:e1:27:6d:d8:ef:15:07:42:53:
                    1b:7c:69:e3:4a:7d:0a:c2:19:77:c8:b5:c3:0a:a9:
                    e6:d2:9a:c4:17:1b:24:0c:11:4d:ab:c5:07:27:f2:
                    15:9b:c2:f1:00:01:75:5b:aa:cb:a8:c7:78:78:13:
                    4f:43:9a:92:5a:c4:5a:95:3c:3f:10:4b:79:4f:d2:
                    b9:64:4e:92:72:69:01:4c:8a:49:65:22:b6:53:94:
                    56:38:48:77:c1:62:7c:bc:1a:5c:a3:de:62:c0:c1:
                    0f:76:2e:6f:2f:22:af:e5:c8:e0:eb:4e:12:6f:2c:
                    53:6d:3e:42:04:6f:87:94:aa:95:38:b3:8e:d2:01:
                    47:8a:5f:dc:72:da:a4:8f:0a:9e:b5:82:af:50:5b:
                    e8:2a:e4:03:e0:0f:dd:4e:38:e5:3c:68:ee:5c:f0:
                    d8:13:5c:1f:54:76:62:b1:bf:6b:2b:2b:0e:59:65:
                    05:d4:50:29:94:93:7a:df:8b:2c:58:32:d0:6a:38:
                    21:85:f4:9b:52:a3:48:a2:e8:47:91:82:8c:35:0a:
                    31:e2:29:24:d6:89:f6:87:90:09:48:37:0f:96:85:
                    50:28:d2:bb:5a:9c:48:ac:b3:64:87:25:7d:86:7b:
                    e6:39:57:a0:0f:a6:90:bb:1d:c4:a1:63:99:8d:e1:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:76:66:20:9E:6F:62:D3:91:78:0A:93:1C:0B:9B:82:74:58:F1:D6
            X509v3 Authority Key Identifier:
                keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f0:42:c7:72:35:fe:f1:36:e2:68:d5:4d:e2:cb:8e:44:6c:
         7e:b2:5a:9b:73:e2:e2:5e:e3:75:f4:88:85:0e:4e:0e:39:15:
         b2:5f:ab:b3:70:99:d5:1b:51:78:c6:a8:f4:de:cd:7a:a3:08:
         45:13:b5:6e:73:35:95:15:ff:dc:bf:b8:94:ed:85:25:40:da:
         11:db:43:b1:27:2a:89:4d:17:bf:f6:77:31:56:32:f5:26:f4:
         09:70:b7:ab:55:32:98:25:c6:0e:d4:b6:6a:29:ba:10:e8:6d:
         f4:b4:94:7f:b4:69:82:d0:3b:03:64:f5:f9:7d:2b:18:6e:08:
         60:f9:27:5e:6e:5a:8b:1b:ad:3e:97:18:12:52:71:80:32:59:
         9f:3f:a3:15:0c:8b:fe:26:65:9a:ac:8e:48:9c:a3:6a:3f:94:
         0c:96:4d:0e:e1:dc:89:6b:44:af:0f:20:3c:33:71:3f:f6:6d:
         72:86:7c:1d:c9:db:54:b9:a4:43:40:a8:57:dc:86:20:fa:31:
         8d:9c:39:e8:a4:b4:c6:d0:02:c3:c9:65:be:d8:fa:f6:ea:f2:
         b3:59:97:5d:21:14:76:d2:22:23:7a:22:93:f3:27:0c:da:df:
         2a:bb:30:d2:ce:85:fb:81:de:01:5a:21:d0:c6:fd:28:e1:f0:
         d2:99:6c:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG
OEJEMEY1QzkwHhcNMjUwMTMxMTUyODAzWhcNMjUwMjA3MTUyODAzWjAYMRYwFAYD
VQQDEw02NzljZWMwMy1mYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApyjrgwXhJ23Y7xUHQlMbfGnjSn0Kwhl3yLXDCqnm0prEFxskDBFNq8UHJ/IV
m8LxAAF1W6rLqMd4eBNPQ5qSWsRalTw/EEt5T9K5ZE6ScmkBTIpJZSK2U5RWOEh3
wWJ8vBpco95iwMEPdi5vLyKv5cjg604SbyxTbT5CBG+HlKqVOLOO0gFHil/cctqk
jwqetYKvUFvoKuQD4A/dTjjlPGjuXPDYE1wfVHZisb9rKysOWWUF1FAplJN634ss
WDLQajghhfSbUqNIouhHkYKMNQox4ikk1on2h5AJSDcPloVQKNK7WpxIrLNkhyV9
hnvmOVegD6aQux3EoWOZjeGhzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJ2ZiCe
b2LTkXgKkxwLm4J0WPHWMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE
RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm
MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBz8ELHcjX+8TbiaNVN4suORGx+slqbc+LiXuN19IiFDk4OORWyX6uz
cJnVG1F4xqj03s16owhFE7VuczWVFf/cv7iU7YUlQNoR20OxJyqJTRe/9ncxVjL1
JvQJcLerVTKYJcYO1LZqKboQ6G30tJR/tGmC0DsDZPX5fSsYbghg+SdeblqLG60+
lxgSUnGAMlmfP6MVDIv+JmWarI5InKNqP5QMlk0O4dyJa0SvDyA8M3E/9m1yhnwd
ydtUuaRDQKhX3IYg+jGNnDnopLTG0ALDyWW+2Pr26vKzWZddIRR20iIjeiKT8ycM
2t8quzDSzoX7gd4BWiHQxv0o4fDSmWxs
-----END CERTIFICATE-----