Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
File:                     XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json)
Hash identifier:          XM4YVHcf6SNaBwYZsjcphX8/mP04OtcVa6Leq/ok8iw=
Subject key identifier:   CA:EF:A7:DA:73:CE:6A:ED:E7:13:2C:F9:98:18:59:D2:39:9A:20:A0
Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B
Certificate issuer:       /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
Manifest number:          30
Signing time:             Fri 31 Jan 2025 06:45:43 +0000
Manifest this update:     Fri 31 Jan 2025 06:45:43 +0000
Manifest next update:     Fri 07 Feb 2025 06:45:43 +0000
Files and hashes:         1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: t+Dgl+xrz1Wg2pnTo3ZgGgMBArochkvLQrJYB+DWUGI=)
                          2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: G7IWl5XTyAgfWE48sRsXaPS6r+SeXaYM6TeXGgT/8zE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
        Validity
            Not Before: Jan 31 06:45:43 2025 GMT
            Not After : Feb  7 06:45:43 2025 GMT
        Subject: CN=679c7197-e8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:67:eb:05:57:06:02:b7:9a:cc:d2:67:06:
                    a8:3b:2e:66:45:ad:b4:72:74:fd:7b:0a:fe:f3:c9:
                    de:f5:f9:4d:a7:c4:c3:60:fd:d7:60:6b:58:13:c0:
                    13:f9:61:02:2b:9c:76:42:c2:f3:21:fa:25:53:fb:
                    04:ef:3b:b7:86:cd:bb:3f:f9:46:1f:05:2f:dd:96:
                    1d:db:d7:66:a9:d1:41:ee:93:2c:87:6a:0e:84:b5:
                    6d:11:1c:64:43:a1:0f:c4:3a:8a:77:ec:98:22:76:
                    39:81:a2:ad:e4:43:46:65:29:5d:e0:6e:f8:ef:86:
                    b1:0f:0d:89:a8:78:84:c2:61:12:fa:62:9b:51:5b:
                    13:78:13:a3:bb:43:6e:e0:f2:39:9a:c4:86:7d:01:
                    a9:78:0c:27:b6:d6:1f:a2:95:ba:b9:d6:c9:51:d0:
                    cd:1a:87:e2:5a:8a:68:1c:55:cb:64:e3:7c:3c:2a:
                    e9:10:b4:56:ab:9d:3c:29:86:f5:b3:a7:53:78:f1:
                    9a:44:9e:9a:aa:d0:a7:ee:02:b9:83:76:76:b9:26:
                    86:16:f6:11:fe:3d:b1:4c:0a:ce:89:ca:b0:9a:44:
                    82:4e:19:1b:38:70:bf:15:b0:20:87:ae:64:d6:3f:
                    19:41:35:23:92:1c:bc:6b:a7:41:77:43:f0:60:f7:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EF:A7:DA:73:CE:6A:ED:E7:13:2C:F9:98:18:59:D2:39:9A:20:A0
            X509v3 Authority Key Identifier:
                keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:06:54:fb:64:2b:aa:5d:49:56:12:b8:80:78:21:a7:5f:5e:
         a7:a6:86:b4:71:83:1c:9e:52:de:45:44:6c:ed:92:e9:58:93:
         3b:3e:1c:06:d5:f0:f9:bd:c0:f4:07:dc:94:f3:c0:c7:a1:85:
         38:06:8e:51:be:0a:a6:37:ba:cc:56:c0:e7:0f:57:72:5f:12:
         99:84:d0:81:db:02:8a:19:67:52:d3:85:e8:f1:c9:cb:57:46:
         77:33:cb:07:d3:20:ae:44:7f:f7:53:ec:a7:4c:82:ab:97:4d:
         d3:d2:8c:8d:65:a8:72:82:72:34:23:3a:bc:dc:8d:d5:09:55:
         08:41:4a:b8:2d:cc:e9:88:91:87:5f:45:e9:96:b5:50:84:31:
         40:e1:f4:a9:c8:19:90:3c:34:b5:d1:14:84:a1:cb:87:d1:2b:
         0e:bd:6a:b3:be:13:6c:92:04:a2:93:27:80:00:75:e7:a3:b4:
         7a:65:f4:b8:f0:4d:27:59:b6:90:4d:4e:97:0c:92:25:81:ab:
         eb:f7:9b:c0:64:b7:ba:d7:13:01:c5:8f:fb:70:f0:8a:22:f4:
         c3:69:24:a6:76:c1:5a:9a:29:e9:9c:39:bf:d1:ab:7c:19:15:
         c9:19:10:ed:86:0c:89:83:19:4c:f0:c8:7f:9b:8a:ca:dd:5f:
         44:99:12:5f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
MTAyNTExMC8GA1UEBRMoNUYwMDRENTdFQjM2RjQyNjcyRTY2RjMwMDVGNjQ2OUI2
Mjg5MTcxQjAeFw0yNTAxMzEwNjQ1NDNaFw0yNTAyMDcwNjQ1NDNaMBgxFjAUBgNV
BAMTDTY3OWM3MTk3LWU4ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDP8WfrBVcGAreazNJnBqg7LmZFrbRydP17Cv7zyd71+U2nxMNg/ddga1gTwBP5
YQIrnHZCwvMh+iVT+wTvO7eGzbs/+UYfBS/dlh3b12ap0UHukyyHag6EtW0RHGRD
oQ/EOop37JgidjmBoq3kQ0ZlKV3gbvjvhrEPDYmoeITCYRL6YptRWxN4E6O7Q27g
8jmaxIZ9Aal4DCe21h+ilbq51slR0M0ah+JaimgcVctk43w8KukQtFarnTwphvWz
p1N48ZpEnpqq0KfuArmDdna5JoYW9hH+PbFMCs6JyrCaRIJOGRs4cL8VsCCHrmTW
PxlBNSOSHLxrp0F3Q/Bg909LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyu+n2nPO
au3nEyz5mBhZ0jmaIKAwHwYDVR0jBBgwFoAUXwBNV+s29CZy5m8wBfZGm2KJFxsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxMDI1Lzk1NkY2NjJDOUQ4
NDExRUY4MTdFMTQyMEM0RjlBRTAyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWHdCTlYtczI5Q1p5NW04d0JmWkdtMktKRnhzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx
MDI1Lzk1NkY2NjJDOUQ4NDExRUY4MTdFMTQyMEM0RjlBRTAyL1h3Qk5WLXMyOUNa
eTVtOHdCZlpHbTJLSkZ4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAH4GVPtkK6pdSVYSuIB4IadfXqemhrRxgxyeUt5FRGztkulYkzs+HAbV
8Pm9wPQH3JTzwMehhTgGjlG+CqY3usxWwOcPV3JfEpmE0IHbAooZZ1LThejxyctX
RnczywfTIK5Ef/dT7KdMgquXTdPSjI1lqHKCcjQjOrzcjdUJVQhBSrgtzOmIkYdf
RemWtVCEMUDh9KnIGZA8NLXRFIShy4fRKw69arO+E2ySBKKTJ4AAdeejtHpl9Ljw
TSdZtpBNTpcMkiWBq+v3m8Bkt7rXEwHFj/tw8Ioi9MNpJKZ2wVqaKemcOb/Rq3wZ
FckZEO2GDImDGUzwyH+bisrdX0SZEl8=
-----END CERTIFICATE-----